Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/GUZ56cfaTDTyMz8G8a9dDs7UNnE.roa
File:                     GUZ56cfaTDTyMz8G8a9dDs7UNnE.roa (raw, json)
Hash identifier:          h5SLB4jLrwTK0FRG13aYbfmluUUC8gorHlappxkj9zE=
Subject key identifier:   19:46:79:E9:C7:DA:4C:34:F2:33:3F:06:F1:AF:5D:0E:CE:D4:36:71
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/GUZ56cfaTDTyMz8G8a9dDs7UNnE.roa
Signing time:             Thu 15 Sep 2022 02:35:40 +0000
ROA not before:           Thu 15 Sep 2022 02:35:40 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24164
IP address blocks:        49.158.72.0/21 maxlen: 21

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5374 (0x14fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 15 02:35:40 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=194679E9C7DA4C34F2333F06F1AF5D0ECED43671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c5:0e:c2:42:ad:70:e1:18:d6:be:c4:42:3b:
                    92:0c:19:8d:94:c6:87:62:1b:bc:7c:97:c8:9c:52:
                    96:fe:ae:11:75:84:51:7b:32:92:ea:79:48:66:5e:
                    9e:11:83:bf:e2:42:3e:10:a0:a3:69:f8:df:92:31:
                    66:6f:0d:f7:cf:c0:4d:a8:69:45:23:8d:90:0d:a9:
                    0e:84:1a:5f:43:46:b7:cd:e3:8c:e9:16:f6:8f:91:
                    37:61:44:9f:1f:08:8e:3f:6e:10:39:6a:81:00:76:
                    01:9c:9c:67:56:13:87:96:5a:20:13:95:da:95:b9:
                    b5:40:de:7a:b4:60:47:08:fe:e7:93:25:31:5d:d7:
                    fd:4c:20:4d:ce:92:cc:a7:1d:39:04:7c:4f:1f:38:
                    51:af:b9:f8:ba:94:ea:ff:cc:cf:f9:82:84:64:18:
                    1c:ba:42:a0:7b:f5:26:3c:69:c8:24:dc:61:77:02:
                    99:b9:46:51:73:e0:57:c2:3d:bd:53:cc:a6:53:56:
                    56:2d:8f:6f:0f:47:2e:e7:04:f6:0c:68:21:4c:c0:
                    09:e3:28:1a:33:05:fa:bf:f0:4d:76:25:c9:af:07:
                    d5:fd:cd:b6:fa:0a:b9:ba:70:c1:37:77:2c:f2:2a:
                    3d:05:bc:31:44:fc:ee:65:e4:69:dc:f0:95:a3:18:
                    25:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:46:79:E9:C7:DA:4C:34:F2:33:3F:06:F1:AF:5D:0E:CE:D4:36:71
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/GUZ56cfaTDTyMz8G8a9dDs7UNnE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.158.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         73:83:e4:f9:cb:dc:16:ec:16:b4:6a:8a:09:38:f3:ce:f7:da:
         17:94:8a:3e:c3:bc:9d:a2:fd:0a:ab:25:73:f0:54:2f:35:7f:
         58:7d:cb:6b:f6:7c:d3:cb:0e:12:17:98:2b:8c:9b:78:6e:06:
         bb:cd:41:f7:f1:af:c6:ba:08:56:08:7d:65:bd:d4:b5:96:1c:
         da:11:1a:b9:c4:a2:c5:98:7f:e6:f9:29:ae:33:84:51:f8:93:
         51:51:cd:17:46:4f:b9:df:91:c0:bf:2a:39:5e:99:74:c8:9d:
         61:21:f2:93:f1:c6:47:a8:51:68:a0:34:3e:74:10:91:7f:b7:
         f7:53:e7:19:ee:2f:3c:ab:1b:f4:fc:51:9e:40:2d:32:72:8e:
         d8:a8:d1:02:1b:a3:ed:52:0a:e0:6b:5f:60:f4:aa:60:01:3f:
         11:42:a4:56:bc:26:02:3c:0a:05:63:2d:4d:69:6f:05:60:f7:
         67:7d:db:53:e8:37:f0:cc:ae:86:b4:22:4b:ff:96:3d:2f:58:
         94:3d:04:9a:8f:ca:1f:d7:53:90:87:88:f4:2b:b2:f9:6b:b7:
         87:88:5f:6b:ec:70:67:61:99:c5:da:6b:4e:8d:6d:01:e3:80:
         e3:7a:6c:20:48:dd:d3:03:85:42:92:03:0e:42:6d:8c:1e:93:
         3e:68:60:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:46 2023 by rpki-client on console-fra.rpki-client.org