Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rtP6R-gSwyLuzz_EfDKH7_2MDj4.roa
File:                     rtP6R-gSwyLuzz_EfDKH7_2MDj4.roa (raw, json)
Hash identifier:          xt9e9CQF/8kZLT4lGOeD3884rI/VzXJaTghjCqq3ZcY=
Subject key identifier:   AE:D3:FA:47:E8:12:C3:22:EE:CF:3F:C4:7C:32:87:EF:FD:8C:0E:3E
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       2129
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rtP6R-gSwyLuzz_EfDKH7_2MDj4.roa
Signing time:             Fri 25 Nov 2022 04:39:33 +0000
ROA not before:           Fri 25 Nov 2022 04:39:33 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        106.1.44.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8489 (0x2129)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:39:33 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=AED3FA47E812C322EECF3FC47C3287EFFD8C0E3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:40:05:b5:6e:fc:93:40:91:20:ac:5c:0d:4b:
                    a6:0f:4d:f6:75:f9:3b:46:af:2a:d9:c7:29:b9:74:
                    87:b7:84:4e:74:bf:7a:08:a0:e4:7d:13:94:8c:05:
                    76:ac:da:c1:fb:6e:6d:3e:3f:fd:0b:3e:61:31:46:
                    ab:2a:60:d2:9f:df:78:9a:7a:ef:39:24:98:35:e7:
                    24:6d:29:43:6e:68:c7:e5:38:2b:ac:3b:dd:86:ea:
                    72:c6:72:c3:13:7f:21:7a:46:63:64:e5:96:f0:63:
                    38:62:42:84:a1:44:46:81:1f:7d:35:32:63:e1:32:
                    51:19:16:a0:6b:e7:d6:d9:c1:68:5f:ce:12:98:bd:
                    1f:49:11:2f:07:d0:b8:83:5a:dc:b9:ef:77:4f:8e:
                    1d:25:34:69:de:2c:09:91:bc:e6:83:8b:9c:b3:4b:
                    67:6f:b9:e0:96:02:6c:ab:c1:43:34:3f:37:69:9a:
                    ff:f4:1d:53:d9:d0:ec:ea:6d:19:88:6d:3f:aa:c5:
                    45:d7:8a:c0:70:b5:81:7a:46:82:42:b6:85:60:b2:
                    2c:76:42:0c:51:25:9f:29:cb:b4:d1:96:0b:55:6e:
                    b0:8c:2b:81:f5:c3:ba:12:ef:08:98:53:72:69:8b:
                    1c:a2:aa:32:77:29:0a:57:11:f6:2a:9c:b8:8d:8f:
                    3a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:D3:FA:47:E8:12:C3:22:EE:CF:3F:C4:7C:32:87:EF:FD:8C:0E:3E
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rtP6R-gSwyLuzz_EfDKH7_2MDj4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:af:24:a5:1c:e3:ba:56:e4:6b:70:ab:d8:33:e2:d5:32:a1:
         28:23:30:3d:45:1f:4b:f2:d0:c8:10:7c:a1:bb:d4:11:35:0f:
         44:74:e9:02:a4:d6:9b:dd:bf:bf:b7:eb:5f:89:77:dc:08:bc:
         5c:43:96:01:68:be:12:30:de:2b:6e:02:b4:e5:f2:67:d3:25:
         e5:db:97:f3:ba:da:b6:58:96:63:0a:83:93:db:74:81:af:4d:
         0e:ec:10:9d:19:67:2d:76:80:8a:db:c1:a1:e4:81:b7:80:eb:
         41:9d:55:7a:91:ef:59:6c:8a:2c:18:2e:ef:f5:ef:bc:6c:54:
         fc:c8:07:e9:8f:fb:1a:b3:43:27:ad:21:f3:37:f3:73:21:46:
         b7:18:b9:fd:3b:43:79:3a:88:4b:1b:d7:b6:4f:63:ff:d1:6e:
         3b:27:78:0b:d7:83:d2:b3:c1:c0:39:f0:82:dc:d4:c0:c6:fa:
         72:93:a1:d7:db:3f:cb:ce:72:71:b7:53:60:45:eb:44:42:74:
         a8:1f:3b:b0:69:4f:e0:b8:72:bb:c2:d9:96:74:4d:8e:9e:08:
         8d:06:3e:48:75:9d:51:68:c7:e7:79:fe:85:de:cb:ed:8f:99:
         4b:09:70:38:c9:51:3d:ae:5f:a4:df:7f:a5:18:89:66:e9:ed:
         d9:a0:89:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:35 2023 by rpki-client on console-ams.rpki-client.org