Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/54cxPCmvmOa7F70MOMr3HDStDLQ.roa
File:                     54cxPCmvmOa7F70MOMr3HDStDLQ.roa (raw, json)
Hash identifier:          tAO+IiDJphuWjz5ZJ6mKeJ0JTigDyx9AgBOf+j912fQ=
Subject key identifier:   E7:87:31:3C:29:AF:98:E6:BB:17:BD:0C:38:CA:F7:1C:34:AD:0C:B4
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/54cxPCmvmOa7F70MOMr3HDStDLQ.roa
Signing time:             Thu 15 Sep 2022 02:36:40 +0000
ROA not before:           Thu 15 Sep 2022 02:36:40 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24164
IP address blocks:        122.254.36.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5374 (0x14fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 15 02:36:40 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=E787313C29AF98E6BB17BD0C38CAF71C34AD0CB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:de:4d:03:24:a7:c7:2c:28:13:04:fe:cf:81:
                    78:f3:cd:b2:07:bc:df:fb:c2:a1:92:71:40:66:c1:
                    7b:b7:25:03:cf:3e:6c:ea:54:20:ae:30:27:2b:ab:
                    6f:ec:12:d7:7d:1b:8c:ad:7e:18:f4:91:4a:c3:39:
                    22:aa:4a:04:c3:6b:10:a8:c8:1a:6a:0f:4b:ce:38:
                    a6:9b:65:a9:f4:bd:57:90:3d:da:12:85:46:be:2a:
                    1a:65:4e:7d:2a:27:93:f8:62:77:e4:39:2d:07:27:
                    a2:21:ed:e9:03:8d:2a:08:2d:91:6f:a4:b1:8e:37:
                    75:89:86:24:34:d2:6d:77:f7:b4:5a:2e:57:e0:ce:
                    10:a3:df:4d:70:f0:66:83:b7:98:0e:07:94:6e:4c:
                    37:04:3b:15:e9:ec:88:8d:97:09:09:2f:81:56:5f:
                    47:af:98:04:c5:6e:4f:be:5f:f1:43:97:2c:0e:48:
                    cf:e4:01:b9:5a:d4:d0:e9:ed:9c:76:c4:00:78:06:
                    51:b6:d1:68:b3:55:31:ed:77:c1:69:66:11:ef:d6:
                    f6:02:50:99:f3:7e:e9:60:d2:28:9e:22:89:04:25:
                    63:f1:09:40:8d:41:09:af:9e:16:5d:49:79:97:20:
                    0b:68:56:55:7e:e8:88:6a:6d:c2:d4:bc:4d:c6:65:
                    2c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:87:31:3C:29:AF:98:E6:BB:17:BD:0C:38:CA:F7:1C:34:AD:0C:B4
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/54cxPCmvmOa7F70MOMr3HDStDLQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.254.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:3f:12:7e:e9:77:2a:fd:53:a7:67:3c:a0:05:11:82:1e:05:
         32:90:1b:15:41:d4:ee:31:57:ed:ab:6f:2f:43:99:b2:4a:a9:
         0f:b1:d6:1e:53:47:a5:c9:ee:ac:84:34:2c:fb:e2:3d:a4:79:
         29:af:d8:3f:07:59:67:10:9d:50:e2:24:4d:42:00:d8:e7:e0:
         4f:b7:cd:be:cb:2d:1a:f0:b9:23:79:c4:b9:e5:d5:01:c5:1f:
         ea:6f:56:cb:44:78:c4:9f:d0:0a:7a:47:c9:73:b3:7c:31:04:
         3f:4a:0f:4d:5a:d4:5b:6a:c3:14:a5:e7:ba:ec:1c:68:34:0c:
         ac:aa:fb:d0:38:14:50:17:98:4e:0b:73:d1:52:35:b8:c7:d1:
         73:98:75:c5:7c:de:3b:1e:7a:34:81:08:b7:f5:a5:87:c9:f7:
         8e:6b:3b:6e:5e:53:60:c6:12:44:4e:4e:44:42:d6:2b:22:7e:
         86:65:87:26:9d:30:a0:36:5d:77:30:cc:14:9d:11:59:e8:d3:
         79:20:3d:3e:d4:7a:93:8b:8e:59:39:8a:36:14:0b:14:c7:45:
         d7:21:d4:cb:fd:a9:21:24:87:f8:af:12:36:23:44:57:3a:62:
         70:47:cb:ab:6c:fb:6f:f0:80:6c:e0:67:23:83:69:76:fa:2d:
         b0:70:4c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:33 2023 by rpki-client on console-ams.rpki-client.org