Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kgB3p4Cc4WRMHJfKsrdzluKus14.roa
File:                     kgB3p4Cc4WRMHJfKsrdzluKus14.roa (raw, json)
Hash identifier:          aAzj24iI0Im7MkGDebgAz/881vWqESvY6+bUHpr/1vU=
Subject key identifier:   92:00:77:A7:80:9C:E1:64:4C:1C:97:CA:B2:B7:73:96:E2:AE:B3:5E
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kgB3p4Cc4WRMHJfKsrdzluKus14.roa
Signing time:             Thu 15 Sep 2022 02:52:48 +0000
ROA not before:           Thu 15 Sep 2022 02:52:48 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        211.76.117.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8098 (0x1fa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:52:48 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=920077A7809CE1644C1C97CAB2B77396E2AEB35E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7e:64:63:e5:d0:55:21:80:98:47:cd:54:ff:
                    52:fb:46:f1:2e:d4:d5:ab:5f:1f:fe:0c:f7:4c:76:
                    bf:e6:d6:6b:71:dd:32:8c:4e:0b:93:e6:7f:97:95:
                    62:ce:60:02:a1:55:4f:85:8b:55:99:24:12:65:48:
                    fd:b2:c2:d5:0f:14:49:18:f5:6e:34:ff:d0:a6:e7:
                    e6:c6:41:79:37:a2:84:ab:ac:00:1a:0c:62:d6:dc:
                    8f:32:b9:6b:b3:90:df:30:e5:87:8d:fa:03:7f:a5:
                    f6:cf:fa:79:e9:bb:59:60:ab:36:71:1f:f3:41:93:
                    9e:ae:92:7e:75:e9:57:d3:e8:2d:d6:1a:cb:34:0e:
                    f1:e4:32:2e:1e:83:a1:57:dc:c3:f6:55:54:18:8d:
                    12:28:48:5b:89:a2:c0:ac:9c:4e:23:a4:30:83:73:
                    99:0d:c0:39:57:b9:4c:99:a6:79:89:62:f9:fb:88:
                    e5:44:97:c9:40:4f:13:d8:10:3a:db:17:10:a6:ba:
                    9f:04:03:2d:90:71:bf:01:59:70:f3:9b:a2:15:0b:
                    e6:6b:03:52:14:2b:6d:40:7b:56:a4:36:de:0c:18:
                    05:a8:be:a9:13:b6:e0:9f:86:c7:bd:74:8b:85:d5:
                    30:83:33:a2:b7:47:85:66:91:bf:25:73:c3:78:98:
                    05:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:00:77:A7:80:9C:E1:64:4C:1C:97:CA:B2:B7:73:96:E2:AE:B3:5E
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kgB3p4Cc4WRMHJfKsrdzluKus14.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.76.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:0b:67:0d:85:07:58:fa:0a:be:58:17:74:6d:1e:53:6b:33:
         08:55:b0:a9:03:87:73:b5:c3:31:5a:a1:42:14:9d:7b:09:d0:
         b3:fd:ec:1c:d2:09:af:f3:a1:93:76:3b:f2:4c:9e:49:f0:8a:
         9d:c0:69:a3:0a:87:d8:42:f3:f0:a6:2c:9a:f0:6e:74:a0:49:
         09:c4:02:86:b2:75:38:5c:cf:92:71:2a:7c:9f:fb:7a:b1:bd:
         3d:58:54:9b:57:ff:42:38:19:e7:61:23:43:fb:ff:d8:ff:c0:
         2c:47:95:b9:1e:d5:fd:a4:f0:80:72:e0:b8:c5:17:27:20:3b:
         8f:51:44:e7:a0:8e:ab:a8:61:30:68:6c:50:26:9e:df:62:7f:
         b1:67:64:62:05:39:19:56:34:f9:f4:72:1e:d7:29:d4:fe:e7:
         89:1d:14:db:f8:55:7f:b9:fc:7e:7e:8b:e0:01:0a:21:b6:da:
         92:9d:94:7f:34:e9:9d:64:0d:d3:f4:ec:5d:e5:dd:cb:85:5b:
         9f:ab:52:c9:e7:32:85:75:b3:77:bc:c2:98:62:8d:9c:18:ed:
         cb:0e:27:ac:5b:be:5e:29:02:60:96:61:04:30:0b:e8:e3:22:
         4b:c0:7c:98:a8:e0:48:45:fd:41:96:0d:87:b9:ba:40:c8:a2:
         02:ee:ea:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:27 2023 by rpki-client on console-ams.rpki-client.org