Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/blqbfNKbwxeGRT1RwZEmuTHkOQo.roa
File:                     blqbfNKbwxeGRT1RwZEmuTHkOQo.roa (raw, json)
Hash identifier:          yzUge/1GIrPsFDEykBTub+3azU7ZhSUvYvc6iov72EE=
Subject key identifier:   6E:5A:9B:7C:D2:9B:C3:17:86:45:3D:51:C1:91:26:B9:31:E4:39:0A
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/blqbfNKbwxeGRT1RwZEmuTHkOQo.roa
Signing time:             Thu 15 Sep 2022 02:53:23 +0000
ROA not before:           Thu 15 Sep 2022 02:53:23 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        2407:4d00:ff07::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8098 (0x1fa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:53:23 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=6E5A9B7CD29BC31786453D51C19126B931E4390A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:40:49:be:ce:9e:da:d9:73:d0:50:85:12:05:
                    ce:7e:28:47:21:f3:73:5e:dd:79:9f:e3:10:bf:d0:
                    17:22:f2:3c:de:8c:cc:37:32:cc:18:f7:f8:c2:8a:
                    b1:f5:a3:a3:4b:01:8b:2b:35:78:53:b9:e5:61:e5:
                    22:90:e3:70:32:df:37:a0:e7:6d:67:76:2d:1e:81:
                    85:b6:f5:88:b6:33:59:df:30:cc:6c:30:4a:22:90:
                    fd:c0:8b:4a:58:ca:32:c0:1e:e4:76:21:fe:d4:47:
                    3b:0e:12:e8:39:09:1e:e0:32:66:1e:5f:a1:a3:cf:
                    1e:0b:d3:a2:7e:95:78:dd:99:15:2e:22:5b:f6:74:
                    73:d3:39:ee:80:8e:1f:be:8e:7d:5e:1b:07:41:79:
                    e1:ec:47:1c:49:b3:aa:60:68:a0:b5:39:3e:89:38:
                    7a:1b:42:25:ec:9f:3b:f8:0c:b6:28:9c:d8:70:55:
                    66:b2:fd:41:67:98:a3:07:de:3d:60:99:84:37:ed:
                    5e:a3:84:7a:f9:88:24:2d:90:64:9d:68:af:62:ed:
                    1c:9c:5b:a4:f8:33:d4:75:a1:40:c2:ee:8e:47:ec:
                    7b:9d:64:5b:86:80:03:10:35:b5:76:d5:0b:99:2d:
                    99:d4:c8:00:29:e4:5d:51:12:65:91:bb:b6:47:cb:
                    d1:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:5A:9B:7C:D2:9B:C3:17:86:45:3D:51:C1:91:26:B9:31:E4:39:0A
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/blqbfNKbwxeGRT1RwZEmuTHkOQo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:4d00:ff07::/48

    Signature Algorithm: sha256WithRSAEncryption
         b2:91:43:1c:59:ab:80:d0:eb:36:3e:fb:f7:4e:97:52:65:b7:
         6e:7f:0b:49:e6:2b:18:a5:56:2e:87:85:29:4b:d5:69:34:ae:
         41:35:97:96:e7:0f:39:e3:30:90:3d:e1:ee:8c:3c:1f:bc:e6:
         21:e7:68:fa:be:93:d3:f3:6f:47:cc:38:6c:c6:67:49:b6:74:
         df:38:4a:e3:89:d7:74:4b:cf:2c:74:95:62:b8:20:1e:b0:7f:
         ba:a8:ab:2b:76:d9:e9:4c:fc:04:4c:44:8c:bc:9c:57:82:29:
         e1:22:96:dc:ec:ad:51:bd:8a:a0:63:e6:ad:a4:c4:49:be:10:
         a6:68:e0:35:6f:b0:6b:c6:81:7b:74:af:ec:55:e9:3c:12:84:
         d3:bc:c7:13:69:07:ec:31:c7:03:96:78:2f:a0:ee:bc:0a:bd:
         55:6b:7a:54:2b:ce:3f:b8:99:fd:8e:5a:d0:3e:d8:e7:27:45:
         e9:8f:f0:e1:69:4b:ec:64:2f:c5:63:4f:88:2d:b3:ca:54:48:
         00:ff:0a:0e:d5:67:30:e5:0f:92:62:68:d6:0c:f0:64:ff:d0:
         bd:96:b0:95:0b:48:ed:10:6b:da:3a:a1:cb:4b:8a:67:25:cb:
         51:39:f2:cc:2a:0f:ca:85:7c:d6:90:35:05:24:6f:e1:b5:42:
         4f:c4:13:18
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICH6IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MTUw
MjUzMjNaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDZFNUE5QjdDRDI5QkMz
MTc4NjQ1M0Q1MUMxOTEyNkI5MzFFNDM5MEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCvQEm+zp7a2XPQUIUSBc5+KEch83Ne3Xmf4xC/0Bci8jzejMw3
MswY9/jCirH1o6NLAYsrNXhTueVh5SKQ43Ay3zeg521ndi0egYW29Yi2M1nfMMxs
MEoikP3Ai0pYyjLAHuR2If7URzsOEug5CR7gMmYeX6Gjzx4L06J+lXjdmRUuIlv2
dHPTOe6Ajh++jn1eGwdBeeHsRxxJs6pgaKC1OT6JOHobQiXsnzv4DLYonNhwVWay
/UFnmKMH3j1gmYQ37V6jhHr5iCQtkGSdaK9i7RycW6T4M9R1oUDC7o5H7HudZFuG
gAMQNbV21QuZLZnUyAAp5F1REmWRu7ZHy9EnAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUblqbfNKbwxeGRT1RwZEmuTHkOQowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2JscWJmTktid3hlR1JUMVJ3
WkVtdVRIa09Rby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk
B00A/wcwDQYJKoZIhvcNAQELBQADggEBALKRQxxZq4DQ6zY++/dOl1Jlt25/C0nm
KxilVi6HhSlL1Wk0rkE1l5bnDznjMJA94e6MPB+85iHnaPq+k9Pzb0fMOGzGZ0m2
dN84SuOJ13RLzyx0lWK4IB6wf7qoqyt22elM/ARMRIy8nFeCKeEiltzsrVG9iqBj
5q2kxEm+EKZo4DVvsGvGgXt0r+xV6TwShNO8xxNpB+wxxwOWeC+g7rwKvVVrelQr
zj+4mf2OWtA+2OcnRemP8OFpS+xkL8VjT4gts8pUSAD/Cg7VZzDlD5JiaNYM8GT/
0L2WsJULSO0Qa9o6octLimcly1E58swqD8qFfNaQNQUkb+G1Qk/EExg=
-----END CERTIFICATE-----