Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tiFmURf7Qtc1zw-Z38crGDnoblA.roa
File:                     tiFmURf7Qtc1zw-Z38crGDnoblA.roa (raw, json)
Hash identifier:          Qj3V5VZPuWxNeXb7Gnalt+o3C3q9yoV75gMCC/sewVk=
Subject key identifier:   B6:21:66:51:17:FB:42:D7:35:CF:0F:99:DF:C7:2B:18:39:E8:6E:50
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tiFmURf7Qtc1zw-Z38crGDnoblA.roa
Signing time:             Thu 15 Sep 2022 02:45:49 +0000
ROA not before:           Thu 15 Sep 2022 02:45:49 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        123.195.132.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8096 (0x1fa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:45:49 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=B621665117FB42D735CF0F99DFC72B1839E86E50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:54:44:88:3a:16:4e:17:40:ea:43:50:b1:97:
                    ff:7d:78:66:4a:82:3b:69:18:75:3e:6d:0d:de:38:
                    00:61:11:63:83:c2:2b:77:a8:ff:93:35:b1:21:d4:
                    6e:21:1d:35:77:d6:a9:2f:c3:85:ab:c8:62:e7:95:
                    d7:dd:d4:9e:66:50:da:f3:42:a5:04:e4:93:eb:21:
                    e6:2b:95:cb:47:15:80:21:9f:1e:aa:9b:eb:95:2a:
                    0c:71:c4:a3:fc:ae:05:02:15:c8:1d:f5:4a:08:2c:
                    df:08:f2:4e:4c:10:08:27:40:cd:37:4a:5c:d2:0b:
                    af:87:da:6d:36:6a:82:b0:ad:a0:7a:ed:7a:d8:0e:
                    13:23:c9:77:a3:d5:ac:9f:ab:68:79:3b:74:99:d9:
                    a6:39:6b:05:cb:fe:f3:80:0f:2a:46:a3:7e:f1:9b:
                    1f:b6:9f:03:f1:3d:1d:a2:3c:03:17:fd:1d:0b:ad:
                    af:33:12:58:9d:55:36:ba:73:73:e4:6a:b4:8a:fb:
                    a2:38:69:86:47:bd:97:9a:82:6e:9c:f7:cc:52:5c:
                    34:cc:56:09:c8:e8:f3:3b:83:0e:da:73:b4:ec:34:
                    f2:40:e0:bd:1a:7f:b0:da:0b:f1:61:4e:9f:fa:90:
                    07:0a:17:a4:50:24:d8:73:e0:06:a8:de:5d:ab:68:
                    d5:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:21:66:51:17:FB:42:D7:35:CF:0F:99:DF:C7:2B:18:39:E8:6E:50
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tiFmURf7Qtc1zw-Z38crGDnoblA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:c5:b9:49:08:26:17:98:8e:4b:ee:ee:6b:26:d1:c7:cc:e0:
         09:a7:8d:35:f2:15:1d:ab:f5:8e:ed:f4:86:77:a0:f2:4a:0f:
         84:3b:d8:69:22:52:41:91:0b:9e:92:98:b8:b7:38:30:01:18:
         72:c5:58:61:f0:bc:a0:39:db:84:43:c2:23:79:7a:2e:66:d9:
         6c:cf:fa:86:ac:b4:46:a0:55:cb:63:26:68:70:a3:53:18:78:
         0e:97:87:c4:72:ae:dd:3a:46:d1:a4:06:4e:2d:76:ba:60:ac:
         4c:82:8a:f7:04:e2:f3:2e:8b:00:b5:3a:87:1f:4d:d7:61:b4:
         18:2b:1a:88:f3:1c:05:44:ac:8e:29:2b:1c:99:3a:67:7f:8f:
         60:0b:a5:fe:bd:c2:0c:8d:1f:88:dd:69:5d:4c:a2:fb:af:c7:
         26:41:3e:2d:5f:bd:b8:59:b1:c0:2f:93:99:04:ae:16:14:97:
         be:71:cd:fb:bc:74:e3:4a:cc:4e:12:ac:43:68:8f:60:16:c7:
         4e:d3:b2:e8:44:89:03:67:f6:c0:6d:f9:a7:f4:53:a7:86:6a:
         87:77:ed:59:97:40:70:ab:c1:09:45:2e:08:f3:e0:5d:5b:6b:
         14:31:0c:9b:cb:25:1d:ce:8e:47:c2:37:49:f5:cc:f2:29:0e:
         d1:86:70:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:41 2023 by rpki-client on console-fra.rpki-client.org