Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/4aqdf8jbJerFr4DwNP6V0gLGJrk.roa
File:                     4aqdf8jbJerFr4DwNP6V0gLGJrk.roa (raw, json)
Hash identifier:          oEw58tX5UNYdSMS6WWDF4cQPhB9IAza97PZCvypsSIk=
Subject key identifier:   E1:AA:9D:7F:C8:DB:25:EA:C5:AF:80:F0:34:FE:95:D2:02:C6:26:B9
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       18FB
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/4aqdf8jbJerFr4DwNP6V0gLGJrk.roa
Signing time:             Sat 22 Oct 2022 06:05:57 +0000
ROA not before:           Sat 22 Oct 2022 06:05:57 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24164
IP address blocks:        180.218.152.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6395 (0x18fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Oct 22 06:05:57 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=E1AA9D7FC8DB25EAC5AF80F034FE95D202C626B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:dc:59:2c:97:9b:49:de:9e:63:65:2e:33:9b:
                    99:9b:8c:b7:93:f2:5e:38:e4:1c:bb:db:ef:83:30:
                    69:9b:5c:bc:41:78:ff:86:c9:fc:c7:df:f0:ee:bb:
                    28:66:69:a8:65:66:5c:a4:77:80:1a:32:72:99:1d:
                    78:4e:8c:2f:eb:9d:68:d2:06:00:ad:57:69:2a:5c:
                    98:ba:33:8f:7b:50:81:bd:31:17:04:b5:3c:cc:75:
                    fb:af:48:06:20:70:e6:1f:32:cb:09:2f:1c:24:15:
                    6f:79:fd:af:f1:65:ac:9a:12:1f:0a:7b:1e:69:3c:
                    7c:9f:e5:7d:60:0d:00:00:88:3e:d5:ce:06:92:b8:
                    af:8c:0d:f2:49:94:81:a6:9a:e3:26:c7:a0:22:2d:
                    06:ef:07:01:90:45:01:b8:a3:dc:5b:39:75:fb:a4:
                    83:7f:de:fe:d7:ee:23:ec:63:05:f1:5b:f5:a4:f7:
                    2e:df:b5:cf:b7:11:fc:ee:ca:fd:99:71:9a:00:26:
                    54:9f:72:52:05:4a:c3:7e:6f:59:44:2d:7b:42:e8:
                    a1:9f:5c:52:50:e3:b4:80:8f:06:d5:12:23:10:f5:
                    6d:4b:7f:5f:84:2b:0d:9f:7e:18:99:e8:2f:89:75:
                    19:5f:8c:7e:50:66:89:52:e3:aa:3e:fa:a5:ea:ff:
                    1c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:AA:9D:7F:C8:DB:25:EA:C5:AF:80:F0:34:FE:95:D2:02:C6:26:B9
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/4aqdf8jbJerFr4DwNP6V0gLGJrk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:c4:2e:4e:2e:4f:33:5d:0a:dd:a4:f1:49:8c:d1:c9:25:b0:
         23:12:c6:1a:f8:22:78:57:d3:eb:81:cb:bc:70:b3:dc:18:ad:
         fc:a7:72:1d:65:d6:ec:36:5e:cd:7c:89:da:c6:08:6f:da:81:
         d9:de:3c:69:be:91:e2:b1:e2:b5:e5:81:4b:2e:cd:ae:41:fb:
         4b:6d:4f:ee:7c:fd:17:72:87:ae:38:5f:65:25:b9:81:ba:be:
         71:81:f0:8e:56:25:ac:84:a5:13:31:08:71:70:af:da:d9:6b:
         8f:a0:67:a9:ff:42:68:8e:27:0d:6c:dc:5f:6a:44:61:22:26:
         55:1d:91:57:d0:dc:76:c4:e6:c0:ba:9f:df:4e:a8:a7:d6:52:
         26:32:0e:21:24:41:96:91:6b:bf:a2:1c:58:89:e2:aa:52:cd:
         fa:15:e7:dd:57:3c:b0:6f:a4:42:a5:56:20:3e:73:5c:61:41:
         0a:a1:ea:f4:cc:37:9b:fa:03:42:dd:98:13:b8:9f:e6:28:c6:
         0d:59:25:88:8d:46:aa:c3:93:4e:37:3a:ed:69:ee:2b:89:73:
         a7:67:66:17:bf:64:cd:6a:3e:19:95:be:ef:70:94:a8:43:2b:
         65:10:42:f0:89:40:32:c8:c4:ef:8e:f6:d7:d0:81:e5:ad:b4:
         e4:6a:93:9e
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGPswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjEwMjIw
NjA1NTdaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEUxQUE5RDdGQzhEQjI1
RUFDNUFGODBGMDM0RkU5NUQyMDJDNjI2QjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD33Fksl5tJ3p5jZS4zm5mbjLeT8l445By72++DMGmbXLxBeP+G
yfzH3/DuuyhmaahlZlykd4AaMnKZHXhOjC/rnWjSBgCtV2kqXJi6M497UIG9MRcE
tTzMdfuvSAYgcOYfMssJLxwkFW95/a/xZayaEh8Kex5pPHyf5X1gDQAAiD7VzgaS
uK+MDfJJlIGmmuMmx6AiLQbvBwGQRQG4o9xbOXX7pIN/3v7X7iPsYwXxW/Wk9y7f
tc+3Efzuyv2ZcZoAJlSfclIFSsN+b1lELXtC6KGfXFJQ47SAjwbVEiMQ9W1Lf1+E
Kw2ffhiZ6C+JdRlfjH5QZolS46o++qXq/xxnAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU4aqdf8jbJerFr4DwNP6V0gLGJrkwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzRhcWRmOGpiSmVyRnI0RHdO
UDZWMGdMR0pyay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0
2pgwDQYJKoZIhvcNAQELBQADggEBAGzELk4uTzNdCt2k8UmM0cklsCMSxhr4InhX
0+uBy7xws9wYrfynch1l1uw2Xs18idrGCG/agdnePGm+keKx4rXlgUsuza5B+0tt
T+58/Rdyh644X2UluYG6vnGB8I5WJayEpRMxCHFwr9rZa4+gZ6n/QmiOJw1s3F9q
RGEiJlUdkVfQ3HbE5sC6n99OqKfWUiYyDiEkQZaRa7+iHFiJ4qpSzfoV591XPLBv
pEKlViA+c1xhQQqh6vTMN5v6A0LdmBO4n+Yoxg1ZJYiNRqrDk043Ou1p7iuJc6dn
Zhe/ZM1qPhmVvu9wlKhDK2UQQvCJQDLIxO+O9tfQgeWttORqk54=
-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:38 2023 by rpki-client on console-ams.rpki-client.org