Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/D6xugxI1qMw256uIUu5MPdbcB6s.roa
File:                     D6xugxI1qMw256uIUu5MPdbcB6s.roa (raw, json)
Hash identifier:          aWJBV2tDTY6M3ZdiGnHtBb36P1F7amoQajA9lRtJ1FQ=
Subject key identifier:   0F:AC:6E:83:12:35:A8:CC:36:E7:AB:88:52:EE:4C:3D:D6:DC:07:AB
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       19CA
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/D6xugxI1qMw256uIUu5MPdbcB6s.roa
Signing time:             Sat 22 Oct 2022 06:11:07 +0000
ROA not before:           Sat 22 Oct 2022 06:11:07 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24164
IP address blocks:        49.159.4.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6602 (0x19ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Oct 22 06:11:07 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=0FAC6E831235A8CC36E7AB8852EE4C3DD6DC07AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:39:97:e1:24:a4:e2:08:c9:33:4f:77:4e:0d:
                    dd:d7:a0:f8:37:a0:04:0e:4a:ac:90:d7:93:f5:77:
                    50:ce:81:ae:39:a6:f2:db:35:95:88:23:88:a1:2e:
                    77:a4:9f:f4:17:5f:a8:10:ed:4c:3b:dc:da:7c:40:
                    e9:8a:c4:46:c5:5e:ef:fc:7b:e6:27:91:cc:48:02:
                    d9:10:bb:6a:b6:2e:ff:4e:33:e7:94:d3:39:dc:4f:
                    6f:44:51:a0:30:a1:fa:d2:e3:86:7b:dc:bc:a3:ec:
                    d9:1d:69:af:ae:0c:a3:3c:d9:9f:a0:18:ac:de:a9:
                    fd:b8:8a:67:77:75:68:da:05:00:42:a3:f3:bf:63:
                    7e:63:ed:2e:27:48:8c:22:78:48:d3:af:d3:de:c7:
                    e6:27:47:a1:4d:81:f3:00:fa:14:52:b8:2f:ad:19:
                    18:35:58:2f:00:2c:f6:86:b6:dc:5b:ef:1c:64:2c:
                    74:ad:b6:d5:96:7c:6a:0e:20:f4:63:51:64:0d:c7:
                    78:6b:5b:b9:3f:89:58:92:b7:bc:94:99:58:dc:5d:
                    cd:25:47:0b:0e:b0:e3:14:f0:ff:49:34:d9:dc:18:
                    19:1a:27:ec:66:15:e1:49:b4:fe:88:ab:0e:9d:fc:
                    ae:88:59:f9:68:4d:f2:24:c6:5e:42:77:ad:f7:f7:
                    ef:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:AC:6E:83:12:35:A8:CC:36:E7:AB:88:52:EE:4C:3D:D6:DC:07:AB
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/D6xugxI1qMw256uIUu5MPdbcB6s.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.159.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:cb:ba:d6:50:3a:d8:c6:2d:54:f2:38:9b:1b:9a:b4:f3:23:
         9e:80:b6:f4:af:32:22:cc:af:3b:dd:2e:91:ad:85:71:66:9a:
         43:99:aa:a8:85:e5:3a:ea:df:5f:d5:ad:38:b0:1b:97:d2:f7:
         1d:30:bb:c9:30:2a:0f:e5:b7:59:78:6c:d2:ae:a1:ee:8a:ce:
         e2:a7:b0:d2:6c:ab:80:d8:07:bb:6e:4d:df:b1:a0:8e:64:11:
         01:e1:6a:5a:a2:41:b2:c8:d5:04:46:29:e8:af:9d:55:fe:f4:
         a2:b2:6e:70:f9:7a:17:99:71:cd:9e:00:1a:22:ca:69:5f:c1:
         77:9f:10:a3:4b:bc:5b:69:eb:80:18:f2:2f:9f:d6:30:96:19:
         36:21:bf:55:30:2d:99:54:0a:b2:57:80:5c:79:51:b9:2f:05:
         04:ca:c9:67:0e:10:f4:6d:35:f5:ad:d8:ba:9d:31:7b:16:57:
         06:9a:84:0f:f7:52:9a:0a:26:bb:6e:86:f0:0b:e2:10:a8:e5:
         85:d2:4a:b0:28:9d:9b:26:a2:c8:90:4d:41:d0:8f:b5:79:40:
         6e:27:0a:16:96:cd:97:25:12:14:bb:b8:8c:b8:b1:17:3e:3c:
         a1:b7:76:b7:17:48:c5:3e:71:09:09:55:2e:b2:1e:54:86:34:
         7f:8b:af:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----