Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sTNnwSO3IV0e56jT8YDUHhAtAOM.roa
File:                     sTNnwSO3IV0e56jT8YDUHhAtAOM.roa (raw, json)
Hash identifier:          X/qI9SKQu4yMJuzzjusjjPbPOGn/F8MHgT7EfE8QARQ=
Subject key identifier:   B1:33:67:C1:23:B7:21:5D:1E:E7:A8:D3:F1:80:D4:1E:10:2D:00:E3
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       21C2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sTNnwSO3IV0e56jT8YDUHhAtAOM.roa
Signing time:             Fri 25 Nov 2022 04:40:22 +0000
ROA not before:           Fri 25 Nov 2022 04:40:22 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        118.232.32.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8642 (0x21c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:40:22 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=B13367C123B7215D1EE7A8D3F180D41E102D00E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e5:98:29:c5:ba:3c:9c:74:80:00:4b:bc:06:
                    15:5b:7d:4e:7a:3d:79:15:32:31:4f:13:94:25:fb:
                    73:cc:85:27:ae:8b:01:6c:3c:28:1b:57:5b:f8:98:
                    1a:28:8f:8d:a2:69:a3:c0:3f:64:2e:76:e1:fa:f1:
                    64:80:5a:5e:00:8c:5f:3f:11:54:19:3a:51:4c:76:
                    20:60:b3:09:90:db:35:7c:e0:3e:62:6c:cc:7b:82:
                    d9:08:cd:4a:60:de:63:8a:9d:a4:d2:0a:4a:33:87:
                    18:81:c3:c6:a0:07:0b:b8:c4:2f:19:61:3d:49:1f:
                    fc:c6:07:fc:d9:2b:96:ec:44:3f:33:0e:6e:d6:7d:
                    1b:93:20:0b:86:aa:34:a5:60:61:67:4e:3f:15:98:
                    99:9a:37:c1:d7:95:25:d6:2d:22:c6:ce:70:30:db:
                    1d:b5:bc:99:5b:40:03:ed:7d:34:dc:f3:1d:72:7b:
                    4e:8f:f0:5d:10:9e:c4:d7:ff:a5:95:6e:e5:12:8e:
                    82:87:96:80:2d:ef:b0:63:84:66:23:7a:62:74:e6:
                    f7:0a:04:d4:8c:f4:e4:93:04:2a:df:02:79:74:32:
                    c5:92:ca:38:be:e8:c7:9a:97:c2:72:83:b7:f9:e0:
                    24:73:66:e9:41:1c:0d:17:a2:5f:d5:88:c4:8d:f4:
                    fb:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:33:67:C1:23:B7:21:5D:1E:E7:A8:D3:F1:80:D4:1E:10:2D:00:E3
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sTNnwSO3IV0e56jT8YDUHhAtAOM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9a:81:14:13:2b:1d:28:64:e8:30:cf:53:70:47:79:86:50:96:
         fd:e9:b2:38:c8:c2:28:61:84:9b:fa:66:b6:dd:b8:0e:34:68:
         0c:87:2b:9f:ac:cb:84:0b:16:d3:4c:f0:6d:1e:0a:31:c7:78:
         5f:18:f1:30:bc:72:83:1a:19:61:f7:89:2b:f8:27:f0:ef:f9:
         d2:21:21:2d:7c:6e:43:a6:9e:ab:36:8b:be:04:9f:52:8e:33:
         e0:75:a8:57:1b:ee:23:21:21:1a:de:3a:98:4e:89:c6:f4:82:
         54:86:1f:b7:d9:eb:d7:16:e2:b8:4b:a9:23:ac:85:7c:9c:22:
         f0:b0:2a:51:4e:11:55:fd:71:54:d5:0f:9d:81:6a:bb:77:f5:
         a6:d0:ee:93:42:5c:02:d5:c3:b2:57:aa:88:28:2e:00:f4:33:
         2f:54:12:1a:8a:eb:30:04:36:35:85:08:5a:cf:33:c2:c1:32:
         c9:b3:93:ec:2a:6b:f1:58:06:c4:53:b4:70:54:2c:dc:aa:1c:
         2c:89:f7:ec:ce:bd:86:57:b2:4a:af:0c:64:4b:1f:57:fd:b9:
         e5:1e:9a:d1:7c:6c:b3:81:ee:c3:04:46:b4:b2:b2:85:09:a6:
         b2:3c:26:6d:77:7c:ec:68:6d:d9:d2:51:83:e1:f3:4f:5a:31:
         2a:94:ba:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:11 2023 by rpki-client on console-fra.rpki-client.org