Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/aUANFpjMvpAjMEj4nDuWyJetHL4.roa
File:                     aUANFpjMvpAjMEj4nDuWyJetHL4.roa (raw, json)
Hash identifier:          +yqr9RUkkHgFMI4rBAlOlhUg+i6PInDIMVBoDCi4724=
Subject key identifier:   69:40:0D:16:98:CC:BE:90:23:30:48:F8:9C:3B:96:C8:97:AD:1C:BE
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       154A
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/aUANFpjMvpAjMEj4nDuWyJetHL4.roa
Signing time:             Fri 21 Oct 2022 08:59:41 +0000
ROA not before:           Fri 21 Oct 2022 08:59:41 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24163
IP address blocks:        180.218.240.0/21 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5450 (0x154a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Oct 21 08:59:41 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=69400D1698CCBE90233048F89C3B96C897AD1CBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f3:52:38:65:47:63:52:f7:14:24:a7:1f:b7:
                    df:0b:9b:db:fe:f1:6e:be:cc:b1:fc:d3:29:cf:2e:
                    07:aa:7b:f5:ff:e4:7d:40:73:02:ac:c2:dc:55:6e:
                    23:8c:f9:ab:1f:07:e4:72:09:2d:99:71:31:1d:e7:
                    57:19:f3:36:4b:3a:d6:3e:ac:eb:21:05:47:04:a6:
                    b4:59:9d:e3:b7:ac:1e:d4:2a:17:0b:45:fa:7a:45:
                    fa:b5:cf:02:f4:63:1e:6d:45:06:30:fb:ab:4f:44:
                    79:4f:bf:f4:e4:a7:61:7e:ec:a8:df:9e:8c:3f:93:
                    05:b3:03:04:66:44:12:4a:76:2a:d0:b4:fe:7f:08:
                    55:2a:45:ed:ae:91:e2:a1:2d:6e:75:08:05:01:78:
                    ce:d0:c1:70:21:40:6f:df:3f:4f:fa:59:18:95:16:
                    8f:d6:5b:a9:ee:1c:bc:74:94:3b:2d:e7:55:cb:d6:
                    f2:fc:50:39:33:2e:5d:93:dc:b4:75:2a:82:7a:94:
                    45:2c:0b:dd:31:4e:dc:c2:fd:c6:48:78:de:a5:df:
                    a1:d3:8d:dd:0b:28:a8:52:a0:d0:af:5e:fb:80:cc:
                    f0:bf:d1:95:a4:13:59:29:c5:ee:2d:b9:29:b9:04:
                    cf:a2:ca:54:b2:1d:17:bb:bf:5a:cd:dc:88:62:f6:
                    57:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:40:0D:16:98:CC:BE:90:23:30:48:F8:9C:3B:96:C8:97:AD:1C:BE
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/aUANFpjMvpAjMEj4nDuWyJetHL4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         61:ae:07:1b:7f:dd:fb:66:55:7e:69:fa:ca:bc:ee:20:5e:bd:
         95:40:b8:16:08:9d:ae:a2:25:22:60:0a:90:a8:44:54:49:3f:
         a5:f0:f3:5e:7b:b3:e3:d6:fb:da:65:7c:dd:81:db:c6:d0:f1:
         6d:32:7e:08:aa:83:57:66:2f:1f:1c:14:71:05:4b:9c:36:3d:
         35:b9:fe:ab:e1:af:25:6d:04:94:7a:ba:80:d9:63:67:a7:e5:
         3f:0c:9e:da:61:9d:92:82:87:83:03:32:6c:b2:51:80:a0:b9:
         fd:df:68:ef:fb:7a:ac:e4:9a:03:f1:05:a1:64:7c:10:9b:fb:
         14:82:76:b3:4d:67:57:89:42:81:c9:2c:7c:ac:57:89:ca:26:
         41:8a:09:df:33:f1:21:d9:c6:c0:75:16:8b:b5:68:63:d7:9f:
         4c:73:9f:6d:86:e7:50:3f:c8:89:61:67:a6:79:40:fd:68:6e:
         8f:18:e1:cd:ef:34:b3:7d:d8:c2:fa:cf:46:45:95:45:06:0d:
         92:47:8a:d5:b0:09:c2:ac:02:d3:6d:8e:b8:f9:cf:94:c9:a4:
         47:45:43:d9:67:b7:0b:a6:c8:4f:f2:cf:94:01:9c:ee:1c:a1:
         a5:98:19:8d:ac:fc:97:56:43:d2:44:09:32:0c:18:af:8a:37:
         9f:1d:75:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----