Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/OtFmugDH2J5DfdiwJ0GvADss47U.roa
File:                     OtFmugDH2J5DfdiwJ0GvADss47U.roa (raw, json)
Hash identifier:          1vlJy4UTmamaX27HZjkSKqCzHQMyGGBrsgQ6IsKbxdE=
Subject key identifier:   3A:D1:66:BA:00:C7:D8:9E:43:7D:D8:B0:27:41:AF:00:3B:2C:E3:B5
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/OtFmugDH2J5DfdiwJ0GvADss47U.roa
Signing time:             Thu 15 Sep 2022 02:36:23 +0000
ROA not before:           Thu 15 Sep 2022 02:36:23 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24163
IP address blocks:        49.159.180.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5374 (0x14fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 15 02:36:23 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=3AD166BA00C7D89E437DD8B02741AF003B2CE3B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:23:fd:e3:a8:71:2d:14:5a:98:64:b1:e2:44:
                    53:ab:27:97:25:07:21:a0:f4:07:d0:c4:6d:41:74:
                    c5:27:1a:0c:13:e4:d4:01:19:02:92:86:0b:72:49:
                    28:ae:71:d3:a4:3c:8f:db:db:b6:1e:c1:a1:92:8a:
                    f9:93:9c:b0:3d:8c:f8:3e:cf:32:d2:cb:59:3b:5e:
                    6b:49:49:43:0e:9b:79:e7:97:10:4a:73:91:51:5e:
                    ee:a5:cd:6f:a0:e3:81:57:e5:83:2b:26:ce:15:2f:
                    3d:9f:7d:0e:e6:5f:f6:55:1e:1b:df:32:cb:3c:56:
                    43:e9:75:92:be:42:25:5a:3d:c9:22:ca:55:39:dd:
                    f1:12:fa:80:93:b7:b6:a7:94:8d:65:73:ac:0b:f9:
                    99:70:f4:83:7e:c9:75:50:45:ad:72:47:ca:59:3a:
                    93:5e:4c:c0:b8:b4:6a:c6:45:ee:f4:97:c4:5d:be:
                    96:7b:bf:32:64:6c:03:19:15:b9:0b:98:29:31:be:
                    2b:f0:af:c8:a2:60:53:52:3b:88:c1:34:30:15:b9:
                    54:35:9c:74:a5:d2:9a:9c:2f:43:1a:d6:22:81:26:
                    2c:db:cb:ac:f6:9c:53:28:d8:a8:51:82:79:a0:d6:
                    36:f6:51:1a:3a:e8:bf:cb:97:5a:3e:23:43:e1:c5:
                    e3:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:D1:66:BA:00:C7:D8:9E:43:7D:D8:B0:27:41:AF:00:3B:2C:E3:B5
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/OtFmugDH2J5DfdiwJ0GvADss47U.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.159.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:a8:63:f7:d2:fc:c3:6a:ad:a6:dc:5b:c4:e0:f1:17:3f:7a:
         a2:2d:47:e4:7c:b9:c6:67:4e:3d:c2:2a:b3:67:4a:22:41:9d:
         b8:9a:fe:03:3b:88:1d:56:36:d5:05:e1:4d:ff:f1:90:d2:29:
         d8:0d:0b:d5:0e:73:12:d3:97:ca:a1:00:e7:52:cb:9f:31:ce:
         6c:bf:d1:49:02:c8:4e:02:89:39:9a:d9:6e:c5:d2:82:7c:64:
         4b:e2:36:f8:7b:63:62:7c:e1:1e:ad:0a:73:f4:04:d4:6b:68:
         00:4b:67:28:9f:fb:d6:bc:5c:26:bb:07:ce:81:e1:c1:a7:34:
         af:df:d6:8c:53:e1:01:b7:b6:cd:eb:78:4a:2e:10:e0:35:6d:
         4d:e6:e3:c6:61:e0:04:72:c6:60:af:d3:ae:fe:4c:a2:2e:ec:
         ae:14:57:a8:53:69:c2:31:2f:72:41:05:83:60:e6:ba:d7:25:
         27:d3:03:07:25:cd:5f:29:56:eb:29:56:77:b6:9b:09:3a:8e:
         9b:90:e3:1e:b7:33:51:93:fa:9e:cd:04:73:cd:1d:b1:9e:0d:
         28:47:dd:fb:86:56:4c:a2:9a:5b:51:56:28:1e:3d:ff:c6:7f:
         b8:4a:50:93:94:46:94:29:71:43:c5:9d:eb:16:62:e9:c8:61:
         0d:2c:d5:52
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFP4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjA5MTUw
MjM2MjNaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDNBRDE2NkJBMDBDN0Q4
OUU0MzdERDhCMDI3NDFBRjAwM0IyQ0UzQjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDyI/3jqHEtFFqYZLHiRFOrJ5clByGg9AfQxG1BdMUnGgwT5NQB
GQKShgtySSiucdOkPI/b27YewaGSivmTnLA9jPg+zzLSy1k7XmtJSUMOm3nnlxBK
c5FRXu6lzW+g44FX5YMrJs4VLz2ffQ7mX/ZVHhvfMss8VkPpdZK+QiVaPckiylU5
3fES+oCTt7anlI1lc6wL+Zlw9IN+yXVQRa1yR8pZOpNeTMC4tGrGRe70l8RdvpZ7
vzJkbAMZFbkLmCkxvivwr8iiYFNSO4jBNDAVuVQ1nHSl0pqcL0Ma1iKBJizby6z2
nFMo2KhRgnmg1jb2URo66L/Ll1o+I0PhxePdAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUOtFmugDH2J5DfdiwJ0GvADss47UwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL090Rm11Z0RIMko1RGZkaXdK
MEd2QURzczQ3VS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIx
n7QwDQYJKoZIhvcNAQELBQADggEBAJuoY/fS/MNqrabcW8Tg8Rc/eqItR+R8ucZn
Tj3CKrNnSiJBnbia/gM7iB1WNtUF4U3/8ZDSKdgNC9UOcxLTl8qhAOdSy58xzmy/
0UkCyE4CiTma2W7F0oJ8ZEviNvh7Y2J84R6tCnP0BNRraABLZyif+9a8XCa7B86B
4cGnNK/f1oxT4QG3ts3reEouEOA1bU3m48Zh4ARyxmCv067+TKIu7K4UV6hTacIx
L3JBBYNg5rrXJSfTAwclzV8pVuspVne2mwk6jpuQ4x63M1GT+p7NBHPNHbGeDShH
3fuGVkyimltRVigePf/Gf7hKUJOURpQpcUPFnesWYunIYQ0s1VI=
-----END CERTIFICATE-----