Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kKsv6xLei_LzHYjAjUvPNNsazFQ.roa
File:                     kKsv6xLei_LzHYjAjUvPNNsazFQ.roa (raw, json)
Hash identifier:          gvGeIC7CUAuYWEeDf8rFNsNN02pLE4xdybe54gfumZo=
Subject key identifier:   90:AB:2F:EB:12:DE:8B:F2:F3:1D:88:C0:8D:4B:CF:34:DB:1A:CC:54
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kKsv6xLei_LzHYjAjUvPNNsazFQ.roa
Signing time:             Thu 15 Sep 2022 02:52:39 +0000
ROA not before:           Thu 15 Sep 2022 02:52:39 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        118.233.32.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8098 (0x1fa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:52:39 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=90AB2FEB12DE8BF2F31D88C08D4BCF34DB1ACC54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:58:da:6e:75:2e:0c:83:07:a3:9a:5c:22:23:
                    a7:f7:25:58:1d:39:c0:8b:d3:d5:b1:df:f0:a4:69:
                    dc:3a:3c:17:e7:e6:5f:6b:98:16:cf:d7:28:11:57:
                    87:2a:f0:80:ad:37:cc:d7:f8:c7:d1:62:7d:7a:ba:
                    19:5f:e9:a8:6b:ab:c5:54:45:5c:d2:59:66:f4:6c:
                    2f:e3:fb:d7:66:ff:2a:3c:3c:d0:66:7e:f4:65:ae:
                    88:66:fe:5c:bb:d5:a1:16:16:bd:fa:b5:60:43:97:
                    f2:9e:0b:69:f0:8f:47:23:20:76:74:ed:b0:d8:89:
                    5c:43:1d:c8:e2:14:ba:6c:d7:0d:28:05:24:50:4e:
                    69:10:3d:ce:2a:a4:0e:0f:81:60:a1:a5:3d:18:c8:
                    de:ff:3b:73:4b:09:44:2a:5d:54:ce:f3:4f:b3:2f:
                    d2:46:a5:2a:fb:de:95:c4:ef:b7:df:ab:b4:be:9d:
                    6c:85:67:0b:a5:49:3a:c3:53:06:e4:6a:04:c6:47:
                    ca:69:4e:cb:06:31:2a:32:a7:96:9e:1e:8f:83:fa:
                    09:4d:94:fc:a3:71:f8:e8:81:7e:9d:29:c5:43:69:
                    a6:27:89:fa:8e:69:cb:0c:00:42:29:57:da:77:3f:
                    dd:e2:94:70:83:6d:78:bf:f6:21:47:05:8b:21:29:
                    79:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:AB:2F:EB:12:DE:8B:F2:F3:1D:88:C0:8D:4B:CF:34:DB:1A:CC:54
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kKsv6xLei_LzHYjAjUvPNNsazFQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.233.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:e8:d4:10:bb:76:47:a5:15:8e:fb:47:83:e3:6a:99:f2:1b:
         0d:a6:c6:8b:ab:ae:eb:b9:7f:b7:aa:c3:35:15:c8:b5:e4:11:
         e8:c6:4d:46:d4:ea:cc:54:bd:79:d6:d1:9a:db:66:60:ba:79:
         98:ed:4f:ec:43:f1:bc:b4:28:7f:0a:60:0a:4d:ee:dc:60:17:
         c3:7e:4f:42:48:b5:30:40:b2:53:0f:7d:ad:b0:a3:64:68:cc:
         7b:bb:2a:f9:20:38:9f:17:bb:fb:1b:ab:b5:cc:11:d1:98:b2:
         06:b5:2a:9d:11:a6:ed:8a:00:91:b6:0b:84:a9:59:f5:52:37:
         0e:04:31:4a:e2:f3:12:c6:73:cd:dd:d0:90:f0:53:66:81:6b:
         bd:4c:05:99:23:7e:58:91:28:bc:e1:0c:42:4b:0f:95:75:df:
         69:24:90:12:99:35:59:8b:04:e6:b2:9d:ba:53:0a:43:51:0d:
         1a:6b:8e:e6:c5:f5:c9:02:f5:76:32:63:ed:d5:5b:10:30:9a:
         e4:14:f2:c9:0e:41:76:b6:63:72:04:1f:3e:46:80:ec:66:e1:
         ca:7c:83:7d:5e:84:59:2c:89:f0:99:78:7a:66:1f:77:27:e6:
         70:5f:f1:f2:9f:49:11:92:87:5b:cf:d1:45:32:8d:d1:2b:30:
         2e:e1:b6:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:26 2023 by rpki-client on console-ams.rpki-client.org