Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_9Nl5xDAblWjGEvA9QroGfEn2e4.roa
File:                     _9Nl5xDAblWjGEvA9QroGfEn2e4.roa (raw, json)
Hash identifier:          VmYQnXjEuTQsVcSCBZyn3ByUBMsaRhKYyUj9rH0Zjxo=
Subject key identifier:   FF:D3:65:E7:10:C0:6E:55:A3:18:4B:C0:F5:0A:E8:19:F1:27:D9:EE
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_9Nl5xDAblWjGEvA9QroGfEn2e4.roa
Signing time:             Thu 15 Sep 2022 02:45:02 +0000
ROA not before:           Thu 15 Sep 2022 02:45:02 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     9924
IP address blocks:        123.195.192.0/20 maxlen: 20

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8096 (0x1fa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:45:02 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=FFD365E710C06E55A3184BC0F50AE819F127D9EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:18:ef:68:7d:37:67:af:17:78:0d:d9:f0:10:
                    f9:6e:ee:4d:c8:33:19:65:f6:9b:0b:aa:76:94:a7:
                    94:a9:91:4b:c0:4c:9c:7c:65:ea:d0:aa:42:d4:79:
                    b0:c1:a7:be:f1:98:f8:26:9d:1b:b8:cc:88:16:a2:
                    72:72:c9:35:90:91:cf:15:47:3a:c8:8e:59:90:0c:
                    db:57:b1:5d:ef:a4:90:d7:eb:fb:1f:0f:c6:71:40:
                    4f:2e:8c:e2:85:bd:dd:bd:d4:f1:06:96:89:52:17:
                    46:e8:a2:d5:8f:e0:c0:82:45:5e:6b:c4:60:f7:5b:
                    48:bf:9d:a7:0d:f2:59:cc:6b:b0:8c:aa:56:b7:71:
                    83:df:c9:3d:53:bd:13:4b:3a:44:87:99:67:ac:11:
                    db:c6:7e:f5:0e:3d:3a:bb:9d:06:fb:6a:78:31:df:
                    d8:d0:3c:4e:e6:3b:40:ad:a1:f9:f2:1b:a4:0f:1b:
                    b9:14:46:a7:45:31:1e:00:36:42:c1:9f:fd:70:32:
                    ea:73:e5:65:3c:99:fa:2f:63:21:a9:ef:07:63:cd:
                    76:11:33:05:71:cd:f6:3d:7b:9c:f8:37:d7:ed:62:
                    85:a7:de:80:16:3c:82:ec:fd:ac:e5:27:f9:76:62:
                    f2:c9:4b:d4:9b:29:45:bd:17:56:4a:2a:49:5f:9f:
                    79:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:D3:65:E7:10:C0:6E:55:A3:18:4B:C0:F5:0A:E8:19:F1:27:D9:EE
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_9Nl5xDAblWjGEvA9QroGfEn2e4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         67:26:c5:3a:ab:9d:40:6d:aa:af:d9:d7:6b:e4:7c:69:b3:c8:
         a0:33:c4:31:32:86:62:a8:cf:c1:37:13:e1:bc:3d:c3:1f:5b:
         a8:1b:ea:02:6b:04:f6:96:53:fa:0d:ce:33:b0:b6:33:0c:b2:
         d6:9c:c2:dc:ff:73:13:3e:e1:18:44:37:e4:2e:8f:60:da:c9:
         ef:54:c6:2c:ec:80:51:5e:a9:40:91:54:d8:9e:e1:27:b1:e1:
         c5:7b:ba:9e:f9:86:da:75:ac:da:5c:9e:ad:6b:0a:e7:b4:e3:
         06:1c:d7:a9:d1:bc:57:1a:e2:02:86:9f:bc:ab:f2:57:da:9b:
         e0:82:de:d2:7c:ba:db:1c:9b:fb:cc:6c:cc:ff:58:c8:67:a7:
         00:be:70:46:66:5d:57:cf:ac:15:e0:f8:dc:88:01:00:85:23:
         fd:54:f0:fe:38:97:29:1f:be:03:04:ab:b8:80:e8:88:bf:c2:
         2f:fe:b0:50:dd:95:e0:f5:1b:fc:af:aa:9a:f0:f2:58:f6:4e:
         f9:da:52:26:9c:e3:e7:96:5e:2e:da:fe:9a:4e:44:af:10:0f:
         7a:a0:1f:a6:8e:f0:6f:18:15:e8:81:fb:af:35:19:03:37:7e:
         c7:29:ad:de:03:8d:c9:23:a3:e7:53:7a:5c:0d:6e:57:96:3c:
         a8:36:e0:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:22 2023 by rpki-client on console-ams.rpki-client.org