Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZIAYE4bjru9rptXl4hqZ1HI0Q4g.roa
File:                     ZIAYE4bjru9rptXl4hqZ1HI0Q4g.roa (raw, json)
Hash identifier:          VNq9O+hYkZKmCwx8GG+Hv3znM7rbOVw3wC6VKrbjIIQ=
Subject key identifier:   64:80:18:13:86:E3:AE:EF:6B:A6:D5:E5:E2:1A:99:D4:72:34:43:88
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZIAYE4bjru9rptXl4hqZ1HI0Q4g.roa
Signing time:             Thu 15 Sep 2022 02:45:05 +0000
ROA not before:           Thu 15 Sep 2022 02:45:05 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        123.195.177.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8096 (0x1fa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:45:05 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=6480181386E3AEEF6BA6D5E5E21A99D472344388
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8a:0a:21:cf:be:87:7c:bd:a7:53:8d:d9:21:
                    ff:8d:8c:c7:6c:a7:eb:54:79:ac:e5:41:57:b8:0a:
                    0b:fb:0d:7f:6e:a3:cc:25:ae:00:ce:85:6d:46:94:
                    2e:de:9c:05:ab:76:cd:3b:b5:0f:8e:e2:34:bc:4e:
                    2b:d8:0e:2e:3a:86:73:eb:47:bb:a2:cd:6a:53:c9:
                    77:78:99:6d:c6:41:47:74:48:f9:7b:fa:3f:1a:05:
                    0e:b6:1b:6e:b4:4e:72:28:31:90:e9:75:bc:ef:1c:
                    17:fe:96:fe:d0:9a:7e:7b:04:fe:4c:9d:3d:26:92:
                    1e:7a:97:9c:4d:68:85:2e:cc:af:4c:e8:19:df:64:
                    74:19:e0:92:cb:45:0a:b6:ae:7a:7a:83:b0:fa:f5:
                    67:12:0e:2c:c9:3f:e6:99:b1:e1:b7:1e:54:8e:8e:
                    48:28:38:23:6f:21:1f:8b:88:50:55:d1:46:32:9b:
                    e8:6e:ea:d7:d3:26:2b:ca:8e:9b:82:8c:23:94:89:
                    7a:33:4d:ae:eb:0a:82:76:51:93:ec:2b:9a:8e:66:
                    c7:7f:cd:85:84:e8:90:dd:ca:5d:c9:3d:0d:d4:18:
                    3f:0c:12:61:fe:ce:e3:02:84:d3:8d:78:84:96:ae:
                    7d:be:56:53:ea:bc:b8:37:33:cd:39:67:f1:7c:bb:
                    37:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:80:18:13:86:E3:AE:EF:6B:A6:D5:E5:E2:1A:99:D4:72:34:43:88
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZIAYE4bjru9rptXl4hqZ1HI0Q4g.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:0f:b6:db:ca:6f:c0:54:b1:fd:1a:d4:c8:a4:11:de:51:ab:
         28:c1:6d:2f:d8:69:e2:7b:17:e5:cd:be:80:d5:2b:3d:de:26:
         ca:74:2e:34:1c:a1:28:6d:1a:8a:e2:31:5f:6a:ab:52:b8:cf:
         d9:9e:12:69:98:43:bb:b5:25:8c:c6:80:b5:36:e5:79:65:34:
         c6:d2:48:1a:2e:1c:51:a2:d5:0f:d5:73:27:39:0f:ff:42:14:
         19:b4:22:fc:8b:c0:a7:c2:a7:44:1d:b8:7e:f3:4e:0e:a4:bb:
         5f:5c:a1:3e:2b:23:b8:7b:49:de:29:7d:d5:8c:aa:23:e0:d5:
         7e:97:8e:77:1c:d1:31:73:09:72:16:5c:86:b4:96:ea:55:4a:
         d1:24:5f:52:4a:9a:05:48:56:16:fa:dd:54:42:b9:06:4f:43:
         10:22:55:82:b1:04:3c:b4:ac:35:ee:17:2d:e3:57:6a:45:c3:
         81:df:de:2c:3f:72:18:08:07:a0:b1:f6:29:07:3e:67:b8:8c:
         d8:1c:e9:e0:9c:2e:4d:1f:94:c0:d5:f2:f2:9c:82:d3:c3:21:
         68:d1:8e:bc:bb:df:5a:83:d2:f8:4f:36:22:bd:30:01:9e:9d:
         db:2b:ac:a2:76:f7:36:d0:71:53:42:3e:00:c0:91:67:d5:61:
         70:48:a1:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:22 2023 by rpki-client on console-ams.rpki-client.org