Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/uJNBCMZw_h3O2ver4AsolLGX_1k.roa
File:                     uJNBCMZw_h3O2ver4AsolLGX_1k.roa (raw, json)
Hash identifier:          PgJUuP0lj2VW6QpJPjhT7NCfZd6Z7+CTYdIx9p+bNGo=
Subject key identifier:   B8:93:41:08:C6:70:FE:1D:CE:DA:F7:AB:E0:0B:28:94:B1:97:FF:59
Certificate issuer:       /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Certificate serial:       107E
Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/uJNBCMZw_h3O2ver4AsolLGX_1k.roa
Signing time:             Thu 13 Oct 2022 08:50:38 +0000
ROA not before:           Thu 13 Oct 2022 08:50:38 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     131621
IP address blocks:        101.102.103.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4222 (0x107e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
        Validity
            Not Before: Oct 13 08:50:38 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=B8934108C670FE1DCEDAF7ABE00B2894B197FF59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:6b:74:22:02:ec:fe:8a:80:7d:32:5b:47:81:
                    eb:40:0d:1d:f7:30:d3:c6:67:7f:89:73:c3:1b:ea:
                    67:2f:7a:63:e3:e9:20:7b:d3:d9:12:84:0a:ad:b3:
                    7c:23:78:8f:0e:ae:39:45:84:57:4b:24:09:39:e8:
                    58:f5:91:9f:48:6a:bc:49:4c:13:03:41:91:29:2e:
                    db:0a:68:ae:f7:6e:8b:6e:1d:ea:77:ac:3c:6b:b9:
                    52:cc:f5:23:a7:e1:ce:b0:41:33:d3:61:d6:ce:62:
                    0a:a3:d9:1c:cc:96:3d:85:6c:7a:9d:67:dc:3c:f0:
                    62:37:96:19:55:39:d7:28:52:9b:1f:71:58:77:9e:
                    29:7d:04:3f:f3:b6:09:a7:37:d5:c1:21:1e:14:cc:
                    67:7e:32:32:7c:35:5e:43:dc:a0:e0:14:c8:e3:e8:
                    88:3c:18:64:09:04:3c:10:91:57:de:ef:da:00:22:
                    34:00:ad:64:25:24:83:12:25:9b:43:43:c0:de:4f:
                    a3:ef:c1:53:87:55:9a:fa:53:2f:a7:c5:03:43:e0:
                    37:f4:40:ef:b3:fb:c9:0b:29:7a:6e:33:bc:ba:bc:
                    41:c7:0e:6b:ca:76:a2:c8:a9:cb:79:53:16:1c:af:
                    b1:2c:13:d9:a6:80:21:2b:ab:90:31:68:61:36:e1:
                    18:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:93:41:08:C6:70:FE:1D:CE:DA:F7:AB:E0:0B:28:94:B1:97:FF:59
            X509v3 Authority Key Identifier:
                keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/uJNBCMZw_h3O2ver4AsolLGX_1k.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.102.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:61:71:29:ec:fa:fb:56:01:79:cd:55:5e:cc:d0:6f:2b:fe:
         c1:2f:a8:8d:ad:7f:9f:9e:cb:b5:a8:d2:63:50:09:7c:20:44:
         be:84:d5:94:ad:47:ec:29:8e:00:66:00:68:06:5f:98:b7:80:
         7f:c8:16:b7:1e:78:34:06:6e:7a:a4:bd:c8:85:e6:b3:0b:15:
         1d:bb:c4:f3:15:12:09:55:d9:94:94:d8:03:10:a3:c8:9c:e0:
         b0:3e:6c:22:97:22:82:d0:85:24:2b:59:e0:b9:d8:21:a4:ac:
         a3:f4:2f:a3:87:55:70:5c:af:06:cb:0b:c1:3a:1b:d9:4f:2a:
         9e:63:9a:08:e5:ac:ac:91:60:de:28:c6:24:f1:4f:e9:37:6b:
         ec:fa:a3:91:bb:ad:86:ca:ee:85:f7:3e:70:d3:93:6f:2d:26:
         af:14:ec:c5:d6:39:77:e8:88:ce:24:3a:01:98:01:74:42:b7:
         99:43:df:47:a9:6a:16:f9:ec:bb:a6:e5:38:cf:dc:4a:4a:d4:
         3f:60:0c:0b:9d:ed:52:bb:a2:33:97:b0:9f:3a:8f:ab:e9:5b:
         8c:3d:37:69:21:31:cc:b7:2c:fc:93:de:3b:43:02:7a:54:13:
         d2:2b:84:61:03:4b:99:37:1b:36:b9:c9:2f:95:9f:80:74:a8:
         13:af:3b:46
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICEH4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREZB
OEM0NTQ4MTVDMzAxNzQ1NkVBM0I0QTdEMDAyMTNCQjg1Qzk2NTAeFw0yMjEwMTMw
ODUwMzhaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEI4OTM0MTA4QzY3MEZF
MURDRURBRjdBQkUwMEIyODk0QjE5N0ZGNTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDma3QiAuz+ioB9MltHgetADR33MNPGZ3+Jc8Mb6mcvemPj6SB7
09kShAqts3wjeI8OrjlFhFdLJAk56Fj1kZ9IarxJTBMDQZEpLtsKaK73botuHep3
rDxruVLM9SOn4c6wQTPTYdbOYgqj2RzMlj2FbHqdZ9w88GI3lhlVOdcoUpsfcVh3
nil9BD/ztgmnN9XBIR4UzGd+MjJ8NV5D3KDgFMjj6Ig8GGQJBDwQkVfe79oAIjQA
rWQlJIMSJZtDQ8DeT6PvwVOHVZr6Uy+nxQND4Df0QO+z+8kLKXpuM7y6vEHHDmvK
dqLIqct5UxYcr7EsE9mmgCErq5AxaGE24RiBAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUuJNBCMZw/h3O2ver4AsolLGX/1kwHwYDVR0jBBgwFoAU36jEVIFcMBdFbqO0
p9ACE7uFyWUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFdOSUMv
MzZqRVZJRmNNQmRGYnFPMHA5QUNFN3VGeVdVLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS8zNmpFVklGY01CZEZicU8wcDlBQ0U3dUZ5V1UuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UV05JQy91Sk5CQ01ad19oM08ydmVyNEFz
b2xMR1hfMWsucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZWZn
MA0GCSqGSIb3DQEBCwUAA4IBAQAoYXEp7Pr7VgF5zVVezNBvK/7BL6iNrX+fnsu1
qNJjUAl8IES+hNWUrUfsKY4AZgBoBl+Yt4B/yBa3Hng0Bm56pL3IheazCxUdu8Tz
FRIJVdmUlNgDEKPInOCwPmwilyKC0IUkK1ngudghpKyj9C+jh1VwXK8GywvBOhvZ
TyqeY5oI5ayskWDeKMYk8U/pN2vs+qORu62Gyu6F9z5w05NvLSavFOzF1jl36IjO
JDoBmAF0QreZQ99HqWoW+ey7puU4z9xKStQ/YAwLne1Su6Izl7CfOo+r6VuMPTdp
ITHMtyz8k947QwJ6VBPSK4RhA0uZNxs2uckvlZ+AdKgTrztG
-----END CERTIFICATE-----