Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/l7U-0KevBePzS4iplpO1wMKKxJI.roa
File:                     l7U-0KevBePzS4iplpO1wMKKxJI.roa (raw, json)
Hash identifier:          X5rYNo5vapN+GyI7MflZCQdWyjahVJrvJPS5mETTkqg=
Subject key identifier:   97:B5:3E:D0:A7:AF:05:E3:F3:4B:88:A9:96:93:B5:C0:C2:8A:C4:92
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/l7U-0KevBePzS4iplpO1wMKKxJI.roa
Signing time:             Thu 15 Sep 2022 02:45:55 +0000
ROA not before:           Thu 15 Sep 2022 02:45:55 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     9924
IP address blocks:        123.193.223.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8096 (0x1fa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:45:55 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=97B53ED0A7AF05E3F34B88A99693B5C0C28AC492
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5a:26:a7:0f:0c:ae:b8:a7:1f:7b:7a:19:62:
                    1d:82:5c:25:c6:2c:f9:3a:99:10:7e:cc:9c:32:73:
                    d4:28:8d:41:bb:bc:59:fc:2c:44:1f:95:f0:bd:d0:
                    77:27:d7:7c:4c:08:36:9e:6a:db:5c:c5:0c:41:a2:
                    eb:bd:0f:13:63:55:1f:da:e6:cd:32:92:87:10:34:
                    f2:b2:64:cc:98:e2:a2:bd:9b:b0:9d:3c:6f:78:ec:
                    83:ab:1f:59:a6:c2:37:93:ea:b4:f7:4a:47:84:30:
                    cb:08:85:d9:c3:60:a4:db:cc:21:66:f3:db:48:e3:
                    43:81:27:21:f3:3e:de:8f:ec:27:8c:eb:ec:4a:f0:
                    d5:1a:03:86:20:93:0d:43:fc:13:82:b6:58:41:2c:
                    b7:c2:ff:5d:58:3f:c2:d3:ce:6b:d8:18:35:a5:d6:
                    04:c1:f6:66:0c:dd:32:bd:0c:1c:75:fc:70:07:9b:
                    3e:69:cb:6e:ea:63:df:85:a2:06:7b:d9:ed:08:19:
                    21:4e:4f:dd:bb:24:11:26:2f:7e:27:c4:8b:2e:63:
                    f6:0a:ec:b2:1d:c8:cc:36:0d:7d:71:18:7e:2e:f0:
                    3f:39:53:20:a9:09:90:a7:de:9d:35:f4:c2:27:48:
                    dc:07:7b:64:63:9d:e2:43:7c:d9:2e:23:a1:61:14:
                    f5:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:B5:3E:D0:A7:AF:05:E3:F3:4B:88:A9:96:93:B5:C0:C2:8A:C4:92
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/l7U-0KevBePzS4iplpO1wMKKxJI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:3b:01:c4:d0:d7:71:ed:ee:9b:f2:72:5e:42:85:cc:b5:d0:
         5c:7b:5a:1d:bf:02:70:ce:15:2e:cf:49:f3:3d:c6:0a:33:2f:
         8f:a0:98:4c:c6:00:aa:c1:c4:68:ec:80:24:9a:31:39:c0:f7:
         1c:e6:e7:c5:e4:4e:bb:7d:b9:4a:c9:17:45:ae:9b:10:00:f3:
         b2:43:6a:b4:84:23:c4:66:0b:e1:77:e1:9b:71:d5:55:7c:4b:
         37:e5:0a:bb:4e:d3:47:9a:9f:18:f3:08:d9:4a:c1:cf:e9:d7:
         59:7e:af:90:1f:21:46:8d:11:05:3a:22:a9:f1:71:e4:05:c9:
         61:85:02:55:bb:76:18:76:66:7c:38:6c:8d:63:16:b1:e5:44:
         03:26:32:64:c1:07:d6:4f:e2:72:4f:57:1b:6a:39:a2:65:a3:
         ac:e8:54:d3:d6:48:97:50:96:93:bd:a5:a1:90:47:d6:22:14:
         37:12:43:19:c9:db:5f:de:e7:da:17:0b:24:36:2c:d8:0f:bd:
         00:83:5a:47:21:be:a3:ba:d9:93:de:bc:e7:68:30:40:38:2f:
         65:d2:74:1e:e8:47:60:f2:7f:40:48:05:8d:57:96:78:f1:65:
         d6:e2:df:11:9d:d4:68:28:e2:02:32:2c:79:46:83:e1:e2:6f:
         bd:31:0d:f4
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH6AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MTUw
MjQ1NTVaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDk3QjUzRUQwQTdBRjA1
RTNGMzRCODhBOTk2OTNCNUMwQzI4QUM0OTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCrWianDwyuuKcfe3oZYh2CXCXGLPk6mRB+zJwyc9QojUG7vFn8
LEQflfC90Hcn13xMCDaeattcxQxBouu9DxNjVR/a5s0ykocQNPKyZMyY4qK9m7Cd
PG947IOrH1mmwjeT6rT3SkeEMMsIhdnDYKTbzCFm89tI40OBJyHzPt6P7CeM6+xK
8NUaA4Ygkw1D/BOCtlhBLLfC/11YP8LTzmvYGDWl1gTB9mYM3TK9DBx1/HAHmz5p
y27qY9+FogZ72e0IGSFOT927JBEmL34nxIsuY/YK7LIdyMw2DX1xGH4u8D85UyCp
CZCn3p019MInSNwHe2RjneJDfNkuI6FhFPVrAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUl7U+0KevBePzS4iplpO1wMKKxJIwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2w3VS0wS2V2QmVQelM0aXBs
cE8xd01LS3hKSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB7
wd8wDQYJKoZIhvcNAQELBQADggEBAJ47AcTQ13Ht7pvycl5Chcy10Fx7Wh2/AnDO
FS7PSfM9xgozL4+gmEzGAKrBxGjsgCSaMTnA9xzm58XkTrt9uUrJF0WumxAA87JD
arSEI8RmC+F34Ztx1VV8SzflCrtO00eanxjzCNlKwc/p11l+r5AfIUaNEQU6Iqnx
ceQFyWGFAlW7dhh2Znw4bI1jFrHlRAMmMmTBB9ZP4nJPVxtqOaJlo6zoVNPWSJdQ
lpO9paGQR9YiFDcSQxnJ21/e59oXCyQ2LNgPvQCDWkchvqO62ZPevOdoMEA4L2XS
dB7oR2Dyf0BIBY1XlnjxZdbi3xGd1Ggo4gIyLHlGg+Hib70xDfQ=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:27 2023 by rpki-client on console-ams.rpki-client.org