Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pPTRZabuQGiMH2QbQcg8GaXANvE.roa
File:                     pPTRZabuQGiMH2QbQcg8GaXANvE.roa (raw, json)
Hash identifier:          JgNk36TIBt/qUdqqHic4M88MR2k2qN5H5ADsIPpaUwU=
Subject key identifier:   A4:F4:D1:65:A6:EE:40:68:8C:1F:64:1B:41:C8:3C:19:A5:C0:36:F1
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       219F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pPTRZabuQGiMH2QbQcg8GaXANvE.roa
Signing time:             Fri 25 Nov 2022 04:40:08 +0000
ROA not before:           Fri 25 Nov 2022 04:40:08 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        106.1.188.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8607 (0x219f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:40:08 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=A4F4D165A6EE40688C1F641B41C83C19A5C036F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b8:7e:b1:e6:d7:51:27:54:1b:17:bb:65:90:
                    b6:99:fc:0a:e2:b1:58:6e:75:82:4c:c9:0e:98:a6:
                    2c:15:e3:4a:dc:2a:e8:da:fb:ab:b9:42:a5:14:ff:
                    2b:da:f3:31:92:70:dd:5f:46:0b:24:5b:75:d1:27:
                    bc:c6:5a:af:f9:ab:d0:21:c9:8b:6b:06:51:db:95:
                    3b:2b:e2:63:fb:6c:54:72:78:0a:d0:cc:31:a7:93:
                    ee:f3:95:91:b4:b6:6e:50:4e:c2:d6:97:9c:df:3a:
                    8d:9d:ce:f7:fe:6d:8f:31:e6:bc:c5:5a:be:b3:01:
                    ae:84:ef:c3:d9:a1:db:63:92:a5:16:01:a9:71:c2:
                    ea:41:a7:e9:43:ef:80:74:13:4d:ee:b2:85:26:9a:
                    f0:ee:fa:3e:43:95:fa:f4:35:43:c2:66:b7:b0:6e:
                    d1:9c:3c:2c:82:09:5a:a9:1c:18:a9:77:86:17:5a:
                    ef:55:c6:54:ca:63:b8:a3:de:56:54:f2:74:c9:09:
                    13:b4:6e:98:08:7e:d9:47:dd:e7:40:58:3d:4c:11:
                    81:44:25:18:0d:05:fc:d0:c8:7c:89:29:70:58:53:
                    67:0d:5e:8e:17:4d:e3:50:3c:e5:0a:6d:32:19:fc:
                    d9:6b:06:3d:a5:20:40:3f:9f:3d:9a:ea:b1:79:04:
                    be:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:F4:D1:65:A6:EE:40:68:8C:1F:64:1B:41:C8:3C:19:A5:C0:36:F1
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pPTRZabuQGiMH2QbQcg8GaXANvE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:c1:32:a5:a6:75:f3:d1:52:a9:bf:24:1a:1b:e0:34:e6:2b:
         69:e9:39:4f:a5:c7:81:03:7a:ea:ea:b3:2d:e1:8d:fc:cb:b6:
         13:32:4d:78:bf:41:f7:50:01:b7:35:95:39:d8:a1:40:82:ca:
         d5:ff:9f:11:1a:78:b2:00:e0:e8:9e:83:c2:4e:be:7f:86:75:
         10:d6:68:c3:80:6f:0d:8c:fd:63:dd:f1:00:85:0e:92:d8:d3:
         f3:7d:c2:27:ee:2c:d6:d5:61:2d:f5:3a:5f:25:be:dc:f7:a6:
         21:bf:11:8b:54:6c:7c:f2:e7:c5:fd:18:e0:33:1f:ac:9e:39:
         4c:63:24:64:2d:74:26:90:d9:42:49:dc:03:a6:a1:5c:99:67:
         c5:bc:bb:d5:ed:96:a6:e5:5a:4c:54:c9:85:fa:13:66:0e:0a:
         47:9d:c8:bf:2d:a6:9c:cc:33:01:a3:e5:78:a6:93:b5:32:70:
         6a:d4:81:f1:13:84:a0:10:9c:33:1f:76:14:6d:7f:65:3e:dd:
         19:bb:9e:66:ce:a7:32:d7:56:57:ae:03:92:ff:1b:9c:3b:b1:
         93:42:da:1c:a6:65:1b:95:7a:e4:73:1b:ac:74:f1:16:75:91:
         1a:a4:bc:04:2d:5f:e2:78:f2:cc:fa:64:ff:43:74:29:85:55:
         cc:75:b5:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:10 2023 by rpki-client on console-fra.rpki-client.org