Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/-hU8Fwqy7Ra9FCAkX8GuKSVzScc.roa
File:                     -hU8Fwqy7Ra9FCAkX8GuKSVzScc.roa (raw, json)
Hash identifier:          yaXo20ogYG3x5M/5KHs26cYAIlYlnyPNpRzmCjNtqKc=
Subject key identifier:   FA:15:3C:17:0A:B2:ED:16:BD:14:20:24:5F:C1:AE:29:25:73:49:C7
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1B13
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/-hU8Fwqy7Ra9FCAkX8GuKSVzScc.roa
Signing time:             Thu 02 Feb 2023 06:49:40 +0000
ROA not before:           Thu 02 Feb 2023 06:49:40 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24164
IP address blocks:        49.158.0.0/15 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6931 (0x1b13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Feb  2 06:49:40 2023 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=FA153C170AB2ED16BD1420245FC1AE29257349C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6b:ec:b9:14:a8:94:91:03:fa:bc:8a:63:27:
                    33:91:23:39:01:ae:98:58:7e:9e:8a:83:2e:30:4d:
                    94:21:86:1b:b7:53:74:06:34:22:3e:58:26:1f:64:
                    78:aa:df:ab:f0:1a:88:e9:af:85:f3:75:70:aa:f0:
                    35:42:38:52:a2:bb:60:d3:77:fb:94:ae:6c:d0:81:
                    5f:38:68:d2:08:f7:d8:8b:ca:04:a9:3a:0f:35:86:
                    c8:41:f1:7f:f7:35:5b:f4:67:48:ab:4b:0f:bc:12:
                    20:f9:8b:00:f9:04:b4:4b:e7:0d:e1:96:d4:e5:89:
                    c4:ce:7b:56:79:67:f8:7a:3e:05:d7:e3:af:8d:88:
                    b3:c8:05:87:d5:b0:53:a7:1f:06:2c:d7:87:19:00:
                    d6:7d:a2:a5:e9:14:b0:c2:a4:af:8c:2f:73:c0:08:
                    29:21:2e:4c:97:b6:b9:87:1a:50:84:93:8c:e8:67:
                    82:24:28:cc:2b:21:41:ed:be:00:49:17:79:c2:f7:
                    f3:56:ad:9c:26:5c:73:49:6e:47:ef:89:54:f1:f4:
                    66:41:76:77:27:84:67:c3:34:74:a5:a6:e4:e6:8d:
                    0c:23:63:a4:84:d0:aa:62:11:99:11:c3:b5:bc:e9:
                    25:4b:0b:5e:dc:c3:87:87:6f:37:0e:29:e1:63:b7:
                    9b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:15:3C:17:0A:B2:ED:16:BD:14:20:24:5F:C1:AE:29:25:73:49:C7
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/-hU8Fwqy7Ra9FCAkX8GuKSVzScc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.158.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         38:cb:eb:7b:b7:4d:08:97:a5:17:ea:60:11:8f:37:19:6e:69:
         c8:83:c3:73:76:42:1e:84:e1:bd:cb:5f:8f:7b:11:36:ce:15:
         96:80:db:b8:3d:a7:fd:6c:65:d5:d9:62:2d:13:66:82:43:5a:
         48:f7:06:42:aa:ed:cd:9e:0d:0f:9a:53:2b:98:87:f9:d3:26:
         1e:7f:59:7a:3a:c6:5a:69:f5:10:12:a6:0b:09:e6:48:a4:05:
         92:ed:dc:dc:27:cd:a0:e4:97:71:8c:8c:82:1b:e7:aa:2e:1b:
         4c:5f:d3:1e:a2:f2:fb:a7:1c:f4:37:47:b5:f8:dc:fc:4c:0b:
         e9:d3:07:86:9c:be:ff:fe:95:a0:fe:c1:5c:c9:de:16:40:ca:
         3f:46:79:a9:2d:1c:b5:05:8e:ba:50:b0:1f:a1:38:08:22:b6:
         70:6a:b1:be:2c:4c:e2:bf:2d:8b:cc:35:38:dd:aa:cb:59:da:
         f1:af:f7:d6:a2:10:6f:9f:c9:ec:53:0b:2d:1e:d5:d5:c3:48:
         6e:fe:0e:00:93:49:46:02:48:a9:38:a2:fe:6b:19:da:44:19:
         62:74:12:79:6c:7a:af:dd:de:ef:f3:56:30:8c:d5:55:1f:3a:
         24:8c:e3:2e:ab:fd:25:2d:e8:3f:fb:07:b9:ce:4b:0d:dc:d6:
         81:46:7c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----