Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xttpQIu0FiK9iA63amuL1m2YOVc.roa
File:                     xttpQIu0FiK9iA63amuL1m2YOVc.roa (raw, json)
Hash identifier:          4Cu4/ZWuK8cGQQqYjVghJ7RXwnSSglulAsVdoBxkjiU=
Subject key identifier:   C6:DB:69:40:8B:B4:16:22:BD:88:0E:B7:6A:6B:8B:D6:6D:98:39:57
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       2076
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xttpQIu0FiK9iA63amuL1m2YOVc.roa
Signing time:             Fri 25 Nov 2022 04:38:45 +0000
ROA not before:           Fri 25 Nov 2022 04:38:45 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        180.177.8.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8310 (0x2076)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:38:45 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=C6DB69408BB41622BD880EB76A6B8BD66D983957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:aa:13:8c:31:53:50:89:cd:cc:b3:b5:ec:0a:
                    4d:35:3e:71:06:61:04:34:7a:63:56:ee:f2:85:4b:
                    9b:81:3b:d6:3a:6f:64:3c:75:ed:97:4f:dd:bf:c7:
                    a1:0b:db:f7:5d:d4:05:e6:d8:e0:29:5a:57:ad:be:
                    e9:c4:e5:d5:59:8d:9c:d5:00:81:72:b2:ee:73:3c:
                    7a:20:16:5b:a7:9d:61:61:9c:fd:36:e6:62:f5:56:
                    0e:f1:70:4b:ce:77:c6:78:ee:12:39:5e:c6:6d:aa:
                    2f:39:06:bb:e4:47:a4:9e:9c:c2:bf:4d:ef:d9:b1:
                    83:68:8e:97:b2:28:ae:92:d6:f6:16:ec:88:32:26:
                    7f:81:79:91:bf:94:16:e6:3b:65:07:df:82:99:43:
                    f4:ab:18:a2:a7:c6:fc:9f:7b:e2:97:13:51:2a:e0:
                    a8:69:a4:79:03:e6:86:1e:f9:e2:12:22:09:16:b0:
                    a1:a9:12:7f:4e:90:98:b7:bd:ee:1f:ca:88:a5:5c:
                    48:a1:e2:68:80:61:1b:30:46:00:45:a4:26:5a:ac:
                    cb:d3:c9:7d:ce:9e:b9:f6:5c:2e:26:64:3e:f1:bc:
                    ba:8d:69:a3:a2:bc:1d:93:41:c6:8f:e3:f6:b9:fb:
                    48:3a:6a:66:0d:76:2b:3a:6e:26:ed:1e:2d:d2:58:
                    00:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:DB:69:40:8B:B4:16:22:BD:88:0E:B7:6A:6B:8B:D6:6D:98:39:57
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xttpQIu0FiK9iA63amuL1m2YOVc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:85:ed:7f:5f:8f:14:dc:91:c2:36:0e:28:78:28:9f:9c:78:
         52:61:cc:4c:63:5c:db:40:de:2b:5a:81:d7:9c:4e:fe:f2:ba:
         ba:60:64:62:f0:85:30:f1:93:43:ec:70:25:f4:b6:ac:63:3b:
         d6:1d:3c:82:57:52:93:01:09:a5:f3:36:f0:d7:c2:e2:55:7f:
         6e:87:03:58:2b:fa:bc:7f:7f:9f:27:98:80:57:85:81:c5:e1:
         4d:05:68:b4:31:fa:47:07:04:b2:b9:66:dc:83:21:45:e2:a4:
         43:85:16:ad:ea:29:b3:0f:55:4d:7a:0f:1f:00:ce:53:0b:52:
         c9:20:f5:aa:8b:37:f0:74:ee:05:c3:d8:a8:dc:7d:63:b5:21:
         21:79:eb:47:9f:d0:87:bb:4f:50:eb:21:04:37:5a:8a:22:69:
         25:02:a9:66:89:56:7e:54:67:fc:9c:a8:a2:e7:e2:21:81:d5:
         d1:c5:14:1f:aa:f7:eb:f4:e3:eb:7c:15:c7:cb:8f:64:55:d1:
         e8:17:42:72:a9:ac:57:ad:40:69:23:07:df:0f:0b:1c:4f:a8:
         70:de:94:5c:7f:27:8c:54:0a:fb:32:71:84:07:56:a2:44:3c:
         0b:7d:22:43:ea:5a:05:15:5d:0a:31:ee:ac:23:89:f6:14:d0:
         34:b6:77:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:12 2023 by rpki-client on console-fra.rpki-client.org