Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/MsJLfhg1-AkKsfmlm7EQj9yWiV8.roa
File:                     MsJLfhg1-AkKsfmlm7EQj9yWiV8.roa (raw, json)
Hash identifier:          UYxBOHLktfBWDqKFdXd8u6Lmz/z/hgnIIOKjqA5KyVI=
Subject key identifier:   32:C2:4B:7E:18:35:F8:09:0A:B1:F9:A5:9B:B1:10:8F:DC:96:89:5F
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/MsJLfhg1-AkKsfmlm7EQj9yWiV8.roa
Signing time:             Thu 15 Sep 2022 02:35:37 +0000
ROA not before:           Thu 15 Sep 2022 02:35:37 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24164
IP address blocks:        122.254.56.0/21 maxlen: 21

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5374 (0x14fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 15 02:35:37 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=32C24B7E1835F8090AB1F9A59BB1108FDC96895F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:65:f5:55:c5:9b:d0:4e:63:9f:70:2c:10:6a:
                    e7:b6:c1:e5:76:93:80:81:a5:40:06:70:19:d0:0c:
                    4f:2c:04:47:22:a5:bf:51:51:59:23:64:8b:a7:5c:
                    70:66:73:e0:9c:ad:7a:96:6c:87:7a:4b:9f:30:1c:
                    f7:1b:6a:fd:3a:fa:b2:10:04:d4:e4:ad:91:24:b9:
                    23:d9:0e:a0:41:66:42:40:bf:4d:0f:f0:fe:d2:26:
                    aa:1c:cf:0f:ce:b0:ec:a6:fd:13:6c:a6:85:3f:11:
                    ed:f3:27:57:9d:5f:50:36:90:f0:76:6c:b6:5f:d4:
                    13:6c:11:e7:d3:f7:08:39:ac:f7:ac:1e:91:dd:81:
                    2a:68:fe:72:48:9e:c6:b2:10:b5:d3:20:77:20:36:
                    91:78:98:a4:cc:93:3a:fe:e6:bf:ae:f9:91:c2:a7:
                    09:7d:e2:18:e2:ec:76:0f:1c:a3:c6:7a:4e:11:69:
                    31:19:4b:a1:90:42:76:b6:1d:2a:f7:f3:02:79:38:
                    06:49:65:05:31:02:e3:ca:b8:50:24:f1:28:d3:c3:
                    af:ec:4c:3b:9d:30:ed:f8:d2:4c:c0:17:c1:c6:30:
                    ab:b6:c8:92:79:8a:cc:82:9c:d0:48:58:1c:ba:57:
                    3c:3c:78:3a:d7:6e:1a:cd:15:9b:37:a1:d4:f5:75:
                    53:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:C2:4B:7E:18:35:F8:09:0A:B1:F9:A5:9B:B1:10:8F:DC:96:89:5F
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/MsJLfhg1-AkKsfmlm7EQj9yWiV8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.254.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9b:be:c1:dc:91:46:0b:15:04:27:21:7f:6b:e7:b9:ff:27:e3:
         de:7e:c8:d3:29:83:f1:c7:65:9a:29:96:41:d0:92:f8:89:6d:
         24:98:06:36:b7:3d:9a:d7:31:40:c9:d5:3a:9f:b7:1f:74:94:
         78:6d:4c:30:f5:a4:d2:df:99:e1:e5:54:bb:9e:72:7f:29:59:
         14:7c:08:1f:df:3b:7d:4e:4f:87:3c:65:bd:f4:0c:86:09:fd:
         81:9a:d2:67:b2:f6:46:f3:a2:e5:1f:66:12:49:c0:82:b1:5c:
         6f:fb:09:fb:b2:48:37:75:64:13:bb:b8:2e:b7:a6:8c:82:2c:
         c7:4d:00:e4:c6:8c:61:d3:0b:ee:75:d9:7e:f2:06:52:1a:08:
         a2:e7:a4:57:db:8f:be:41:e1:ba:bc:c5:91:1b:d6:ed:9c:f7:
         24:a0:21:50:56:3f:14:3d:11:85:ab:19:de:6e:8c:d2:d0:0e:
         a3:3a:1b:e2:03:cd:1c:8b:3f:16:67:8f:2a:ed:b9:05:be:ad:
         5b:6a:a8:cc:cf:24:fd:66:0b:a9:e6:b9:60:c2:21:86:86:46:
         48:82:15:5c:af:7c:7f:27:88:7e:4b:a4:c0:22:d4:48:9d:3a:
         09:55:13:0e:46:8f:6b:ce:7f:0a:49:8d:35:a5:53:ab:25:e8:
         92:25:4a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----