Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/v53U1Ivc50aQ5c1rh5ltEO6d_ac.roa
File:                     v53U1Ivc50aQ5c1rh5ltEO6d_ac.roa (raw, json)
Hash identifier:          Q0nJP54XLljlzHpqufkhNfIt4u4F5dPLuec8uMovN08=
Subject key identifier:   BF:9D:D4:D4:8B:DC:E7:46:90:E5:CD:6B:87:99:6D:10:EE:9D:FD:A7
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       218B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/v53U1Ivc50aQ5c1rh5ltEO6d_ac.roa
Signing time:             Fri 25 Nov 2022 04:40:02 +0000
ROA not before:           Fri 25 Nov 2022 04:40:02 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        180.177.240.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8587 (0x218b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:40:02 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=BF9DD4D48BDCE74690E5CD6B87996D10EE9DFDA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:74:6b:10:b2:cb:db:8a:91:5b:69:00:0d:b3:
                    c8:96:a5:da:b0:27:b5:14:61:71:a5:2d:bd:99:38:
                    41:fe:f7:20:3d:56:06:c6:d4:bd:35:b1:49:94:70:
                    b3:e2:8f:38:4e:70:8a:75:41:9f:41:96:87:9a:0a:
                    63:d7:ae:a9:6c:fd:fe:83:40:c1:48:dc:82:fb:4c:
                    f8:99:bb:dd:0e:ad:08:00:89:d6:53:59:67:5c:09:
                    89:90:8d:68:98:8d:2d:77:87:79:89:85:e0:4f:d2:
                    f7:30:05:7e:7e:9f:91:78:82:cd:bd:3e:82:c7:94:
                    94:dd:dd:60:56:a5:58:da:04:c0:75:1f:dc:a5:ac:
                    f0:48:3e:50:88:e8:2c:27:73:f3:3c:4b:30:d1:86:
                    22:ce:ff:98:c7:2b:39:1c:86:47:e7:f1:92:9c:4c:
                    3c:4d:b1:2f:3e:7f:be:d8:bf:b4:ad:12:23:21:d9:
                    d7:bb:1a:da:f4:79:f7:66:aa:15:3a:3b:b3:4f:3e:
                    00:f6:11:cc:08:d9:d7:42:61:5b:f9:64:65:89:65:
                    c7:94:12:d4:f9:55:28:33:00:37:1a:f1:fe:7d:db:
                    19:b3:ad:d9:21:d4:93:9d:51:ae:3a:bc:43:cc:f1:
                    9e:55:f0:32:2e:e2:30:2a:7a:3f:fe:38:31:17:28:
                    ff:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:9D:D4:D4:8B:DC:E7:46:90:E5:CD:6B:87:99:6D:10:EE:9D:FD:A7
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/v53U1Ivc50aQ5c1rh5ltEO6d_ac.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:f1:90:55:d3:aa:e3:9a:2c:69:2d:c4:08:4a:ef:30:ca:21:
         8a:d5:1d:0f:05:c9:b9:3f:08:84:d6:8e:b1:ac:53:86:a4:dc:
         1d:7c:4d:59:ad:d1:af:31:a5:b9:06:08:0b:b8:25:f0:da:61:
         13:09:6f:fa:53:36:3c:8f:ab:5b:14:de:ca:8f:31:75:5e:84:
         6b:24:95:51:19:c7:8c:e3:eb:da:da:40:d3:0a:47:70:9e:1d:
         73:f9:10:bd:49:79:03:45:af:d3:52:7d:99:eb:77:48:6f:3f:
         1a:05:99:23:ef:3c:3a:97:08:83:7c:f3:b1:83:30:72:99:74:
         d8:3d:0e:e3:fc:68:dc:86:6f:c8:89:3c:68:09:36:ec:66:55:
         9e:69:72:12:86:e5:8f:b0:dc:22:56:76:9b:47:f6:43:06:cb:
         6f:4f:99:ab:68:db:3a:eb:76:ed:2d:e3:61:c4:fe:a5:b5:ac:
         1e:b8:83:21:9d:f7:10:86:c0:91:c5:ae:de:1c:9c:46:9a:0a:
         ec:ec:be:98:a7:d0:8e:5e:49:5f:06:c5:9b:5d:5c:6e:7c:21:
         b5:0b:c5:7d:c8:ff:0b:81:b5:45:e4:de:4e:2c:2e:a3:81:73:
         9e:a2:33:4d:3e:94:16:da:a2:18:8e:b9:28:c3:1c:e7:0e:71:
         75:01:b8:60
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIYswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDQwMDJaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEJGOURENEQ0OEJEQ0U3
NDY5MEU1Q0Q2Qjg3OTk2RDEwRUU5REZEQTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDPdGsQssvbipFbaQANs8iWpdqwJ7UUYXGlLb2ZOEH+9yA9VgbG
1L01sUmUcLPijzhOcIp1QZ9BloeaCmPXrqls/f6DQMFI3IL7TPiZu90OrQgAidZT
WWdcCYmQjWiYjS13h3mJheBP0vcwBX5+n5F4gs29PoLHlJTd3WBWpVjaBMB1H9yl
rPBIPlCI6Cwnc/M8SzDRhiLO/5jHKzkchkfn8ZKcTDxNsS8+f77Yv7StEiMh2de7
Gtr0efdmqhU6O7NPPgD2EcwI2ddCYVv5ZGWJZceUEtT5VSgzADca8f592xmzrdkh
1JOdUa46vEPM8Z5V8DIu4jAqej/+ODEXKP+9AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUv53U1Ivc50aQ5c1rh5ltEO6d/acwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3Y1M1UxSXZjNTBhUTVjMXJo
NWx0RU82ZF9hYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0
sfAwDQYJKoZIhvcNAQELBQADggEBAIDxkFXTquOaLGktxAhK7zDKIYrVHQ8Fybk/
CITWjrGsU4ak3B18TVmt0a8xpbkGCAu4JfDaYRMJb/pTNjyPq1sU3sqPMXVehGsk
lVEZx4zj69raQNMKR3CeHXP5EL1JeQNFr9NSfZnrd0hvPxoFmSPvPDqXCIN887GD
MHKZdNg9DuP8aNyGb8iJPGgJNuxmVZ5pchKG5Y+w3CJWdptH9kMGy29Pmato2zrr
du0t42HE/qW1rB64gyGd9xCGwJHFrt4cnEaaCuzsvpin0I5eSV8GxZtdXG58IbUL
xX3I/wuBtUXk3k4sLqOBc56iM00+lBbaohiOuSjDHOcOcXUBuGA=
-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:12 2023 by rpki-client on console-fra.rpki-client.org