Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/A7FpeC3bGQE5NtLSumbZdt6aZvo.roa
File:                     A7FpeC3bGQE5NtLSumbZdt6aZvo.roa (raw, json)
Hash identifier:          iJ05sBg2VUDvfMMZNsqkiwUx4w18DusgKzk29NsHRbw=
Subject key identifier:   03:B1:69:78:2D:DB:19:01:39:36:D2:D2:BA:66:D9:76:DE:9A:66:FA
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/A7FpeC3bGQE5NtLSumbZdt6aZvo.roa
Signing time:             Thu 15 Sep 2022 02:35:46 +0000
ROA not before:           Thu 15 Sep 2022 02:35:46 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24164
IP address blocks:        122.100.95.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5374 (0x14fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 15 02:35:46 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=03B169782DDB19013936D2D2BA66D976DE9A66FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c7:4b:d1:6f:9b:44:f0:23:40:1a:7e:b8:1d:
                    af:00:df:22:a9:2b:1b:9a:e2:d7:0b:db:0c:9c:fd:
                    83:24:05:05:6c:5c:3b:72:08:4b:b0:31:82:9d:80:
                    a4:24:67:ac:34:f4:74:d8:14:23:e9:03:21:5d:13:
                    9e:c5:db:e5:82:57:ab:2a:ef:1e:4e:90:81:91:23:
                    ed:37:c4:28:72:c4:f2:39:66:e6:9a:19:2d:80:59:
                    22:d7:30:26:cd:29:1f:e8:72:0c:a6:21:30:a9:15:
                    3f:c0:64:0c:c2:37:9a:b2:fe:8b:98:de:0f:11:6b:
                    7e:f2:3b:0e:d5:f9:1d:47:8b:7c:d4:ce:94:3c:fb:
                    87:85:78:98:24:31:da:92:d5:7e:cf:2d:04:05:0b:
                    70:8d:01:a9:ad:f7:50:e7:56:b1:e6:04:42:51:88:
                    33:ea:f4:97:4e:f9:22:3b:de:4b:0c:09:95:a9:12:
                    88:3e:1b:0b:3b:39:9a:6a:9c:fe:36:62:c7:ec:e1:
                    a3:71:1f:80:68:d6:41:04:f9:9c:b4:33:6c:97:3e:
                    b5:0f:46:4b:28:aa:6a:b6:35:fd:56:24:fd:80:b3:
                    e6:9e:7f:f5:74:80:33:83:5d:a6:bb:cb:69:75:91:
                    fb:88:6b:38:67:d6:ba:2e:fd:bf:dc:fb:63:c1:fd:
                    fc:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:B1:69:78:2D:DB:19:01:39:36:D2:D2:BA:66:D9:76:DE:9A:66:FA
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/A7FpeC3bGQE5NtLSumbZdt6aZvo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.100.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:b9:d1:fa:3a:6e:6d:62:57:d7:86:67:9e:53:79:47:4b:fd:
         6b:b5:d1:f3:1d:35:12:a0:d3:c2:04:74:cd:a4:e9:79:7d:38:
         93:16:a8:a9:5b:dd:6d:f7:a0:8d:6e:93:2e:0e:f3:77:28:21:
         e1:ea:2c:c9:73:c9:ab:e2:b2:94:b4:2c:b8:62:d8:a1:3a:dd:
         99:b8:1d:09:2e:da:22:d6:9b:5c:dc:a5:f6:f5:b2:01:69:28:
         83:b5:54:5e:8d:6a:bb:a6:8f:2f:22:d0:0c:fc:8c:7e:b8:a9:
         5a:d2:9a:d2:56:c2:43:df:34:bb:33:35:10:0e:84:6a:d2:b6:
         26:33:18:01:59:0e:6a:7c:6f:86:cd:8c:a6:70:bb:aa:a9:33:
         3c:af:50:6a:28:11:0a:b4:b6:05:ff:08:89:53:9a:a7:7b:70:
         9f:7d:b4:b4:a4:54:69:c9:42:fe:74:99:57:8a:61:c6:3c:f2:
         ce:38:80:97:84:04:11:e0:bc:c0:87:96:e4:cc:a6:8d:00:b5:
         fb:4c:97:d0:80:30:95:1a:58:61:4e:09:8e:cd:ff:6e:10:e7:
         bc:dc:ec:8f:fe:58:b8:4c:70:3f:fe:d2:ee:74:ea:33:22:b5:
         07:66:88:60:d2:4b:50:fe:65:ef:d0:4b:5b:ce:0d:4b:7a:51:
         32:e3:af:c6
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFP4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjA5MTUw
MjM1NDZaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDAzQjE2OTc4MkREQjE5
MDEzOTM2RDJEMkJBNjZEOTc2REU5QTY2RkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDMx0vRb5tE8CNAGn64Ha8A3yKpKxua4tcL2wyc/YMkBQVsXDty
CEuwMYKdgKQkZ6w09HTYFCPpAyFdE57F2+WCV6sq7x5OkIGRI+03xChyxPI5Zuaa
GS2AWSLXMCbNKR/ocgymITCpFT/AZAzCN5qy/ouY3g8Ra37yOw7V+R1Hi3zUzpQ8
+4eFeJgkMdqS1X7PLQQFC3CNAamt91DnVrHmBEJRiDPq9JdO+SI73ksMCZWpEog+
Gws7OZpqnP42Ysfs4aNxH4Bo1kEE+Zy0M2yXPrUPRksoqmq2Nf1WJP2As+aef/V0
gDODXaa7y2l1kfuIazhn1rou/b/c+2PB/fypAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUA7FpeC3bGQE5NtLSumbZdt6aZvowHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0E3RnBlQzNiR1FFNU50TFN1
bWJaZHQ2YVp2by5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB6
ZF8wDQYJKoZIhvcNAQELBQADggEBAJu50fo6bm1iV9eGZ55TeUdL/Wu10fMdNRKg
08IEdM2k6Xl9OJMWqKlb3W33oI1uky4O83coIeHqLMlzyavispS0LLhi2KE63Zm4
HQku2iLWm1zcpfb1sgFpKIO1VF6Narumjy8i0Az8jH64qVrSmtJWwkPfNLszNRAO
hGrStiYzGAFZDmp8b4bNjKZwu6qpMzyvUGooEQq0tgX/CIlTmqd7cJ99tLSkVGnJ
Qv50mVeKYcY88s44gJeEBBHgvMCHluTMpo0AtftMl9CAMJUaWGFOCY7N/24Q57zc
7I/+WLhMcD/+0u506jMitQdmiGDSS1D+Ze/QS1vODUt6UTLjr8Y=
-----END CERTIFICATE-----