Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hr28QN-OyKSe5M-c8rMq_vLOLOI.roa
File:                     hr28QN-OyKSe5M-c8rMq_vLOLOI.roa (raw, json)
Hash identifier:          t6VoDx7UgsCmXLl/pA042f2FZ65wB3b+AnINUfyIu/0=
Subject key identifier:   86:BD:BC:40:DF:8E:C8:A4:9E:E4:CF:9C:F2:B3:2A:FE:F2:CE:2C:E2
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hr28QN-OyKSe5M-c8rMq_vLOLOI.roa
Signing time:             Thu 15 Sep 2022 02:45:19 +0000
ROA not before:           Thu 15 Sep 2022 02:45:19 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        180.177.132.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8096 (0x1fa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:45:19 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=86BDBC40DF8EC8A49EE4CF9CF2B32AFEF2CE2CE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ee:66:d9:17:e2:f8:87:0c:01:c6:17:26:12:
                    c2:cb:4e:9d:1a:5c:73:58:ea:9f:5b:44:7d:60:82:
                    03:8a:3c:98:30:44:2b:58:52:a6:1a:9e:8b:b3:2a:
                    d2:af:4b:7e:85:8c:29:38:6b:bb:1e:01:52:e5:8b:
                    86:f1:d2:9d:2e:31:c1:02:bf:a9:f2:10:8c:b7:5d:
                    a3:a7:6f:51:7e:fe:24:33:fd:b0:ac:60:28:04:94:
                    b8:da:de:c0:ba:24:e2:50:17:b8:46:8a:46:a9:90:
                    81:47:be:73:c8:69:64:b0:1b:c1:1f:b8:c4:da:3b:
                    10:f5:94:e5:8d:32:8c:7c:8b:c2:cc:5c:fe:67:53:
                    4d:a6:29:d7:52:c1:0a:6c:ef:06:da:8a:b6:10:bd:
                    8b:ec:38:89:3c:e2:c5:b1:32:2e:87:e0:bf:29:e0:
                    fa:20:fa:d3:2c:d5:5d:29:f9:95:d1:f2:9a:5e:16:
                    81:b9:17:a6:a9:3b:cf:46:e2:ea:6f:94:07:bf:c6:
                    ba:48:3c:89:17:ff:0b:fd:41:76:37:bd:81:d0:e8:
                    e8:49:fc:49:52:dd:98:cb:18:9b:8f:0d:ee:87:24:
                    b7:18:66:ac:bc:48:1c:34:1d:4b:b6:7a:f2:5f:90:
                    94:1d:2d:bc:23:c6:46:f6:5c:94:85:9d:19:be:73:
                    91:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:BD:BC:40:DF:8E:C8:A4:9E:E4:CF:9C:F2:B3:2A:FE:F2:CE:2C:E2
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hr28QN-OyKSe5M-c8rMq_vLOLOI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:71:4e:c9:d2:45:df:f4:6a:8c:40:24:0a:fc:7d:cc:c7:4a:
         ec:5d:6c:4b:bb:19:2d:68:bc:2d:1e:91:86:83:15:2d:05:7f:
         e4:59:cf:ba:fb:f5:05:11:dd:94:04:50:f6:8d:1a:f5:25:35:
         f8:15:83:9e:5f:ac:f8:78:31:51:3d:8c:4f:c5:93:ed:6b:d7:
         59:83:f1:87:a3:70:ac:53:2f:69:94:fa:54:3b:ee:61:2a:ea:
         29:78:f6:08:b7:f8:57:bd:d5:94:a6:dc:54:6b:80:45:ce:4d:
         40:85:93:6e:8f:e4:2a:2d:48:a2:d3:86:9b:66:18:25:79:d7:
         4c:83:5b:bc:ed:82:5f:9f:5b:e2:ad:91:0f:95:6f:2b:42:9a:
         ad:16:26:70:c3:5f:f2:1d:11:69:b1:c1:fb:6f:22:35:43:90:
         ec:61:93:a8:06:42:c4:c2:7d:a6:16:0a:a6:a9:2e:5a:7b:36:
         c2:b3:4b:7a:25:4d:72:45:37:7b:ba:d4:8d:92:3c:c7:11:3d:
         30:fd:f6:03:df:ca:83:66:97:92:c7:96:86:c5:38:c5:0e:4c:
         69:30:29:d8:1d:d1:0a:c0:20:b3:db:ec:9a:25:fa:ba:a8:7b:
         3c:03:f4:0b:5c:0a:27:af:95:97:78:55:7c:e0:75:d0:7f:3b:
         ee:6d:af:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:38 2023 by rpki-client on console-fra.rpki-client.org