Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/alrTTBJeH2frdo_q4wtxCrb64dI.roa
File:                     alrTTBJeH2frdo_q4wtxCrb64dI.roa (raw, json)
Hash identifier:          yx0rwMIm1ZpaGr8qRVy5PKhmwWTe1t1C8mlZhXLr0v0=
Subject key identifier:   6A:5A:D3:4C:12:5E:1F:67:EB:76:8F:EA:E3:0B:71:0A:B6:FA:E1:D2
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/alrTTBJeH2frdo_q4wtxCrb64dI.roa
Signing time:             Thu 15 Sep 2022 02:35:52 +0000
ROA not before:           Thu 15 Sep 2022 02:35:52 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24163
IP address blocks:        180.218.224.0/21 maxlen: 21

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5374 (0x14fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 15 02:35:52 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=6A5AD34C125E1F67EB768FEAE30B710AB6FAE1D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ca:e4:e9:1a:51:4f:ec:7f:4e:0b:87:3c:e9:
                    f1:03:bb:7d:4c:01:18:b1:d6:c7:84:2c:e8:a7:cb:
                    b6:8b:a6:47:17:8b:dc:c8:fe:fb:b2:9b:9f:bc:eb:
                    50:42:c9:2e:46:82:c6:d6:42:66:4f:c5:3c:bf:89:
                    69:7c:be:69:2e:b2:a4:b9:fd:9c:58:d1:eb:2b:49:
                    fa:ff:f0:93:ac:8c:dc:a3:89:a1:88:c2:3e:47:1a:
                    a1:96:a8:20:94:80:44:d4:e6:85:d4:00:3e:ab:2e:
                    f1:05:7b:6b:ed:37:43:f7:b9:32:43:e3:8f:db:9c:
                    5f:65:0a:f0:51:bf:5d:ae:2d:d2:57:b4:39:20:25:
                    81:49:8c:11:b9:00:01:ed:e5:d3:f4:83:0b:15:0d:
                    09:c5:7e:c1:04:df:52:d6:cf:2f:1d:57:58:6c:31:
                    35:e0:1b:d4:51:26:3e:29:d6:85:e0:c3:35:b2:f4:
                    9b:58:7e:9c:eb:e1:e0:ed:63:84:fe:41:3a:7a:a2:
                    01:00:eb:ba:78:ac:5b:a7:c9:c6:4b:38:62:08:44:
                    24:c6:4b:ad:8e:b9:21:7e:d0:14:b6:75:37:c4:3b:
                    86:e9:ec:40:09:ae:7d:0c:3c:c6:2f:fb:30:89:df:
                    9c:ce:f2:8e:85:6f:6e:49:10:f1:48:56:71:73:78:
                    6a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:5A:D3:4C:12:5E:1F:67:EB:76:8F:EA:E3:0B:71:0A:B6:FA:E1:D2
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/alrTTBJeH2frdo_q4wtxCrb64dI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         13:20:cf:67:ed:67:5b:7a:1b:cf:1c:d0:80:ec:ab:69:8b:43:
         f4:30:58:d3:73:0c:3a:e5:90:1b:4b:59:5f:54:ba:f4:03:c2:
         36:ea:d0:bc:87:c9:cc:3a:73:dd:bc:e5:bb:4b:ae:a2:a8:1d:
         9e:df:03:c0:ec:4c:9e:ca:8e:f7:93:29:b1:2a:4a:08:dd:f6:
         ad:e1:b5:85:6e:60:c6:07:05:d8:15:99:a4:fa:77:69:cf:93:
         46:de:80:3b:e4:56:d7:47:15:2e:9a:97:5f:36:ef:06:55:38:
         dc:54:25:de:f3:1c:50:d0:b6:34:f4:25:de:4a:0b:56:82:ed:
         9f:40:d1:6c:65:ce:fb:d9:ee:a5:34:eb:54:9c:1c:50:07:e6:
         52:30:6f:6a:17:21:a1:3d:30:6d:3b:06:56:05:12:ce:28:d0:
         02:52:18:aa:72:f0:20:86:38:a8:42:bb:50:04:17:a0:1f:e9:
         37:0b:1d:6e:6b:22:7c:16:6c:8f:c6:27:59:d4:d2:85:c6:85:
         f4:4e:7b:cf:31:f4:c2:c0:b5:6b:74:b9:b3:fd:99:a5:39:16:
         74:3e:14:4b:5a:58:0e:e0:e2:47:b2:e1:e1:43:3d:98:0c:cb:
         39:cf:b0:11:03:fc:7e:33:27:3b:b6:cf:1a:cd:75:49:d6:aa:
         b1:25:73:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:50 2023 by rpki-client on console-fra.rpki-client.org