Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/AkEIlkZ9U73IC253joiQ1px11P4.roa
File:                     AkEIlkZ9U73IC253joiQ1px11P4.roa (raw, json)
Hash identifier:          PP+RPjzIuqweYaayskk48/tqM6bOiR2S5qUCYUiA0HQ=
Subject key identifier:   02:41:08:96:46:7D:53:BD:C8:0B:6E:77:8E:88:90:D6:9C:75:D4:FE
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/AkEIlkZ9U73IC253joiQ1px11P4.roa
Signing time:             Thu 15 Sep 2022 02:36:27 +0000
ROA not before:           Thu 15 Sep 2022 02:36:27 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24164
IP address blocks:        61.61.212.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5374 (0x14fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 15 02:36:27 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=02410896467D53BDC80B6E778E8890D69C75D4FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ff:db:99:97:20:e2:ba:9b:66:7a:c1:cf:c2:
                    53:c8:e2:7f:31:4f:cf:11:d3:c4:1f:c3:91:d1:b3:
                    9d:7f:ff:7c:f8:23:14:63:44:e5:3f:3d:2b:c7:4e:
                    bb:87:f6:8c:78:27:64:0f:7c:e2:58:96:52:c1:38:
                    ed:ff:70:43:71:e4:11:05:de:b9:1f:62:7f:00:cf:
                    0a:2d:2d:3b:6f:d3:82:76:6d:bd:99:3a:9d:9a:a8:
                    5e:f8:8d:8b:73:65:f0:eb:b9:5e:2a:cf:06:4f:d9:
                    ce:12:b2:9d:16:62:40:d2:15:4a:58:b8:24:c1:52:
                    e4:9a:f0:fd:0d:3c:9b:ca:56:24:30:0f:65:ee:60:
                    74:9d:65:56:84:56:ae:5d:8c:cf:32:81:56:db:19:
                    40:15:8b:25:77:f8:b9:f9:f7:61:eb:1b:4c:43:c9:
                    3d:f1:a5:5a:58:bd:1d:ab:11:08:59:22:09:a0:51:
                    33:29:08:24:e7:9f:aa:0c:b1:95:2c:13:7f:52:26:
                    3e:a3:6e:40:b4:94:e9:10:21:a2:c7:35:13:10:94:
                    62:aa:2d:9a:c7:19:6a:f0:ed:18:0a:9d:07:34:09:
                    13:e9:95:b6:20:a5:5e:07:e8:2e:6a:cb:c9:ad:93:
                    ea:ac:96:44:ad:e4:fb:f5:0b:36:b0:e4:93:f8:f8:
                    6d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:41:08:96:46:7D:53:BD:C8:0B:6E:77:8E:88:90:D6:9C:75:D4:FE
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/AkEIlkZ9U73IC253joiQ1px11P4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.61.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:47:5d:c6:35:76:10:2d:2e:3a:f8:18:e7:6a:41:fa:56:7c:
         6d:3a:d7:b0:11:d6:be:d6:79:aa:b3:aa:54:7f:5f:5e:76:a3:
         6b:d5:dc:76:9c:93:d1:97:d5:00:ac:f4:4a:76:78:de:d2:d7:
         b3:36:66:6d:f9:af:22:aa:48:d8:65:80:96:61:10:7f:f0:2c:
         ba:68:9f:52:03:21:84:d8:b0:82:83:f4:ee:04:8a:25:0f:ef:
         53:d0:78:9b:8f:07:b3:bc:a6:57:13:81:42:7e:45:e3:ab:7b:
         08:d8:f8:03:02:78:ab:18:24:08:d1:f1:da:c0:c6:db:86:05:
         f7:44:5f:9d:89:bb:1d:8e:f1:35:28:81:78:1e:3f:6d:a0:36:
         f2:b2:01:5a:8d:c2:ac:4c:98:13:fe:92:71:2c:d3:09:86:14:
         f0:e5:cd:98:33:b2:25:5c:a0:69:cf:1d:2d:a0:6b:11:35:db:
         12:77:1a:cf:e2:51:26:51:2b:a9:e0:a3:d1:be:a5:49:3b:0e:
         ad:10:8b:b5:bf:99:a2:20:9d:cc:30:42:33:60:77:98:38:b8:
         17:0a:ff:11:e8:64:b4:c5:ff:7e:96:00:3e:74:eb:e7:61:44:
         c8:0d:4c:c3:5a:16:9b:09:d9:77:e3:2a:c7:45:a6:8f:84:42:
         db:f2:d6:47
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFP4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjA5MTUw
MjM2MjdaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDAyNDEwODk2NDY3RDUz
QkRDODBCNkU3NzhFODg5MEQ2OUM3NUQ0RkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDR/9uZlyDiuptmesHPwlPI4n8xT88R08Qfw5HRs51//3z4IxRj
ROU/PSvHTruH9ox4J2QPfOJYllLBOO3/cENx5BEF3rkfYn8AzwotLTtv04J2bb2Z
Op2aqF74jYtzZfDruV4qzwZP2c4Ssp0WYkDSFUpYuCTBUuSa8P0NPJvKViQwD2Xu
YHSdZVaEVq5djM8ygVbbGUAViyV3+Ln592HrG0xDyT3xpVpYvR2rEQhZIgmgUTMp
CCTnn6oMsZUsE39SJj6jbkC0lOkQIaLHNRMQlGKqLZrHGWrw7RgKnQc0CRPplbYg
pV4H6C5qy8mtk+qslkSt5Pv1Czaw5JP4+G0PAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUAkEIlkZ9U73IC253joiQ1px11P4wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0FrRUlsa1o5VTczSUMyNTNq
b2lRMXB4MTFQNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAI9
PdQwDQYJKoZIhvcNAQELBQADggEBAARHXcY1dhAtLjr4GOdqQfpWfG0617AR1r7W
eaqzqlR/X152o2vV3Hack9GX1QCs9Ep2eN7S17M2Zm35ryKqSNhlgJZhEH/wLLpo
n1IDIYTYsIKD9O4EiiUP71PQeJuPB7O8plcTgUJ+ReOrewjY+AMCeKsYJAjR8drA
xtuGBfdEX52Jux2O8TUogXgeP22gNvKyAVqNwqxMmBP+knEs0wmGFPDlzZgzsiVc
oGnPHS2gaxE12xJ3Gs/iUSZRK6ngo9G+pUk7Dq0Qi7W/maIgncwwQjNgd5g4uBcK
/xHoZLTF/36WAD506+dhRMgNTMNaFpsJ2XfjKsdFpo+EQtvy1kc=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:46 2023 by rpki-client on console-fra.rpki-client.org