Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/SfgGE0V2p-VpfX-js7CjOHKNxqc.roa
File:                     SfgGE0V2p-VpfX-js7CjOHKNxqc.roa (raw, json)
Hash identifier:          eIYpzQE8ZzLOfxF2aGZ4flEZrRrR1QsXHU1soYL9mtQ=
Subject key identifier:   49:F8:06:13:45:76:A7:E5:69:7D:7F:A3:B3:B0:A3:38:72:8D:C6:A7
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/SfgGE0V2p-VpfX-js7CjOHKNxqc.roa
Signing time:             Thu 15 Sep 2022 02:35:36 +0000
ROA not before:           Thu 15 Sep 2022 02:35:36 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24164
IP address blocks:        49.158.8.0/21 maxlen: 21

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5374 (0x14fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 15 02:35:36 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=49F806134576A7E5697D7FA3B3B0A338728DC6A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:5f:7e:06:1d:08:86:52:7f:b4:84:97:25:35:
                    90:c3:c9:15:ff:01:f7:20:86:db:5c:2c:e7:81:ba:
                    bd:48:65:5a:9b:17:18:02:1b:0e:4c:ea:ea:ad:57:
                    25:c0:de:f3:7d:b5:53:2f:88:16:cf:d6:13:1d:06:
                    29:21:43:c0:66:e1:e2:7e:94:ff:cb:6c:6e:de:98:
                    df:28:92:a2:59:9c:9e:87:38:08:4d:38:51:d6:01:
                    e7:b5:17:20:71:76:ae:9d:6e:11:e6:48:91:8d:bb:
                    c4:0b:53:f4:5d:5a:7c:ac:9e:bb:38:7b:9d:c1:d8:
                    d9:2c:1a:4d:ff:2d:2a:13:93:6d:13:b5:ae:88:9d:
                    26:80:b2:64:98:90:39:1a:67:4e:2e:5f:e5:ef:23:
                    71:6a:6f:19:e3:89:da:0a:3f:ac:d8:0e:a5:03:9e:
                    32:f6:12:24:54:d7:99:f4:32:2a:99:27:04:83:5b:
                    5f:2e:ce:91:eb:47:2a:20:21:77:c4:67:b1:a1:47:
                    d0:68:3e:6e:40:64:73:46:e8:fc:6b:db:09:d8:57:
                    29:5d:59:45:9e:74:f8:85:aa:39:f5:96:fc:70:0e:
                    15:67:96:d4:af:11:6a:94:53:7e:b0:45:c5:ac:a1:
                    8d:6e:6e:5a:4c:5f:fc:52:8c:51:d2:2e:bd:77:b0:
                    79:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:F8:06:13:45:76:A7:E5:69:7D:7F:A3:B3:B0:A3:38:72:8D:C6:A7
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/SfgGE0V2p-VpfX-js7CjOHKNxqc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.158.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         95:90:6e:9b:47:2d:7c:64:95:59:6f:db:b6:1e:f2:c0:3e:20:
         6c:c5:90:24:0a:d6:22:3b:8d:fd:a8:ad:f8:23:54:bf:e4:03:
         ef:2e:e4:18:3c:23:1a:ce:ac:72:cf:19:26:b2:3f:9d:6f:0d:
         56:89:ce:1d:c4:da:d7:de:7e:6b:2c:9c:b8:27:60:31:c9:ba:
         be:41:2e:f2:c9:b0:55:77:bd:86:ad:d2:20:96:f1:9c:1c:b1:
         93:bb:d0:b8:52:78:6c:77:38:ce:9e:e6:1a:01:b0:7f:38:b9:
         32:7f:6a:cd:e1:03:c2:58:d1:83:a0:4f:a9:75:91:d2:5f:a1:
         90:d6:22:5b:92:9f:2c:75:ed:e7:32:14:2f:5a:0d:b4:46:48:
         61:63:08:72:cd:a3:8f:93:b4:3a:74:73:26:e1:fb:89:6b:43:
         f1:b6:c3:d2:d9:bd:35:1e:08:65:f6:ba:99:fa:7e:7b:90:59:
         36:e7:cf:52:45:81:1f:5a:76:f0:a2:fc:24:77:2b:70:16:76:
         7d:33:67:c9:9d:f5:9b:59:71:99:35:8b:7b:98:44:84:46:54:
         68:18:e9:85:39:c5:69:68:6e:a4:c3:0c:99:81:4e:09:83:d1:
         ca:a3:8d:47:af:6d:16:ac:12:c2:55:bd:59:36:21:62:ee:d4:
         ee:bc:97:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----