Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hCcLZx5tBwozGuB7thuj9bQLb7s.roa
File:                     hCcLZx5tBwozGuB7thuj9bQLb7s.roa (raw, json)
Hash identifier:          H+tXIrSVNfm6kplEQxj4Ke9/Jh3fK4nzIjb4RAIIrmE=
Subject key identifier:   84:27:0B:67:1E:6D:07:0A:33:1A:E0:7B:B6:1B:A3:F5:B4:0B:6F:BB
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       205C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hCcLZx5tBwozGuB7thuj9bQLb7s.roa
Signing time:             Fri 25 Nov 2022 04:38:37 +0000
ROA not before:           Fri 25 Nov 2022 04:38:37 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        118.232.77.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8284 (0x205c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:38:37 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=84270B671E6D070A331AE07BB61BA3F5B40B6FBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6f:79:7d:8e:1d:12:66:81:8b:7e:15:d2:1f:
                    c6:be:d6:74:20:aa:3c:cb:be:6a:63:98:0d:d5:64:
                    82:b8:ba:73:0e:4d:de:79:99:66:ee:66:e9:cb:e2:
                    db:50:61:b0:52:eb:97:22:29:14:d5:1b:2b:fe:48:
                    9f:a4:f9:8b:6a:77:c6:4d:db:21:df:dd:6d:d7:5b:
                    a7:31:83:0d:fe:24:f3:e1:ce:fa:b4:8d:25:62:3e:
                    9f:10:46:47:4b:b1:67:cc:af:75:fa:6b:b1:43:4a:
                    32:d2:c4:d3:03:41:57:c6:3e:a4:06:58:34:5c:18:
                    bf:ee:4a:da:16:d9:2a:bd:46:de:84:12:ef:1b:82:
                    a3:88:ca:3f:d4:34:c1:33:25:00:10:bc:8f:9a:76:
                    16:00:86:09:bc:47:23:fe:ce:01:c7:3c:23:79:77:
                    13:9d:02:f1:61:96:05:7d:c2:71:95:31:3a:34:14:
                    e1:5f:cc:34:42:3b:03:65:8f:71:75:61:f6:96:52:
                    57:ca:67:aa:54:38:dd:56:f8:d6:42:c8:c6:fd:df:
                    80:7d:ab:c4:63:c5:3a:87:bf:b8:7a:e0:dc:3c:41:
                    13:2b:ab:1f:46:4b:d2:fb:1d:fb:60:7c:dd:9d:bc:
                    8f:e7:46:5e:ea:b3:77:f8:12:0b:8e:c5:2a:e9:28:
                    a8:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:27:0B:67:1E:6D:07:0A:33:1A:E0:7B:B6:1B:A3:F5:B4:0B:6F:BB
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hCcLZx5tBwozGuB7thuj9bQLb7s.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:47:b3:04:25:30:8e:29:05:56:3a:74:2f:13:e9:67:7b:76:
         25:79:70:5f:b3:1f:e6:30:f3:c6:00:ac:1b:a9:f7:c9:48:ac:
         8d:b8:94:be:96:00:0e:c4:e6:36:48:43:ae:d4:42:3e:98:4a:
         86:20:09:21:c1:74:38:44:0b:f5:7b:9b:f5:aa:88:cf:07:01:
         df:12:11:ed:9d:a8:68:9e:aa:2c:45:f0:21:2c:d0:b8:e2:9a:
         41:44:79:8a:5b:9c:57:40:d9:8c:3e:4c:a8:a1:cc:a5:c6:65:
         ed:25:ad:5e:2b:ac:f5:b5:cc:a5:74:80:49:2a:29:a3:ee:1c:
         87:4b:4d:2d:46:84:69:ac:a3:c5:69:3d:73:ff:47:0f:3a:0e:
         5b:99:ca:25:ee:a9:73:a9:a7:96:d3:c1:0c:e4:c6:7c:33:06:
         98:d0:dd:30:76:0b:fe:48:ac:86:dc:14:2b:06:e1:af:c1:31:
         12:63:d4:c0:9f:ba:e8:5b:a0:5c:2c:0f:c1:c4:63:53:e4:61:
         76:8e:ca:2d:97:aa:4f:4f:4c:c3:75:0c:a5:3f:34:f7:62:22:
         ff:57:94:bd:f5:31:76:fd:13:cc:47:2c:5a:7f:ee:0f:27:4e:
         96:e2:ff:b0:0b:0a:80:3c:4c:ae:ff:2f:66:a4:96:34:79:e1:
         b1:f0:62:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:08 2023 by rpki-client on console-fra.rpki-client.org