Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/bgur1TD1LXmOEc2Mrppc6Ym5jTg.roa
File:                     bgur1TD1LXmOEc2Mrppc6Ym5jTg.roa (raw, json)
Hash identifier:          qEyGA+iVi4HHyBeNQRNozQfhlw4uLitojxgPo3EEL2A=
Subject key identifier:   6E:0B:AB:D5:30:F5:2D:79:8E:11:CD:8C:AE:9A:5C:E9:89:B9:8D:38
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1540
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/bgur1TD1LXmOEc2Mrppc6Ym5jTg.roa
Signing time:             Fri 21 Oct 2022 08:50:47 +0000
ROA not before:           Fri 21 Oct 2022 08:50:47 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24163
IP address blocks:        211.76.44.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5440 (0x1540)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Oct 21 08:50:47 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=6E0BABD530F52D798E11CD8CAE9A5CE989B98D38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:8c:e8:9d:8e:1a:ae:75:a3:a5:f5:02:76:81:
                    d4:4d:25:a1:d7:f0:e2:be:a0:bb:ed:9e:78:27:39:
                    99:3a:1d:b8:f2:ad:2e:87:41:3a:6a:9f:92:b2:33:
                    ee:6c:db:16:19:f5:d2:92:1f:77:03:c1:74:96:5b:
                    f5:27:ea:a1:b6:d3:25:b2:82:6f:7d:ac:7b:34:42:
                    c4:20:cc:d9:4e:34:d3:7d:e7:0d:0c:bb:4c:4c:72:
                    89:7a:23:51:fb:8b:bd:a9:ce:ee:10:b2:a9:91:46:
                    d3:fe:05:27:25:59:4c:a3:1a:22:8a:dd:dd:c1:44:
                    9c:ff:a5:cb:52:57:13:80:72:c1:59:e5:a8:e3:9d:
                    2c:ef:a8:3f:93:e6:e2:45:8d:c2:c7:de:24:2b:91:
                    aa:c1:ae:ac:e6:b6:c8:2f:1d:44:14:4c:a4:4b:2c:
                    0e:5a:ac:30:69:04:ec:76:04:7f:26:f2:33:87:db:
                    2e:7e:bf:cc:ab:70:08:a4:0c:64:07:fe:dd:9f:89:
                    3e:c1:b5:03:45:a9:ec:15:ea:17:e8:82:7f:b6:69:
                    90:78:4e:eb:e3:ac:d2:44:35:06:8a:9c:66:d3:a2:
                    a8:24:bc:98:c8:b4:c7:44:a5:87:59:35:99:45:1c:
                    86:7c:80:c9:17:e4:ff:5a:76:1a:71:41:4e:f0:22:
                    4e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:0B:AB:D5:30:F5:2D:79:8E:11:CD:8C:AE:9A:5C:E9:89:B9:8D:38
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/bgur1TD1LXmOEc2Mrppc6Ym5jTg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.76.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:6d:9a:df:48:9f:52:da:4e:b7:ff:c9:f0:23:6c:9a:87:63:
         e5:a3:1c:a1:49:f4:48:3e:00:13:6b:8c:f8:75:d0:68:5f:e7:
         bc:c8:c8:49:60:9b:a0:92:d2:a5:55:f5:f4:50:95:04:77:f4:
         8f:3e:3a:af:c5:55:c3:10:9b:49:49:ba:aa:3a:b4:93:fe:b0:
         c1:81:db:ef:e9:97:bd:c0:72:6b:48:50:5b:bd:a6:5b:88:1f:
         83:db:a7:7f:45:b1:7a:f6:73:21:e6:0f:fc:7d:50:2b:e2:a6:
         cd:c7:17:ad:6a:8f:e9:2c:da:f2:11:1c:ae:c2:9f:bf:2b:f0:
         b0:bc:bf:8c:db:8f:47:65:42:ef:eb:ec:b5:48:3a:76:cb:74:
         ae:be:7a:18:39:06:f2:23:f8:ae:0f:2e:14:30:4e:92:56:b5:
         03:ed:90:97:28:61:c4:2f:9c:6e:ab:82:b2:b3:4b:2f:86:a5:
         4e:55:60:83:59:43:01:b2:1e:c5:2f:52:2b:0c:f7:11:9a:52:
         03:76:3c:ef:34:43:53:5c:56:60:b1:ff:1d:be:16:13:f4:2d:
         16:6e:c5:06:f2:72:e5:4c:c5:14:e1:8a:0c:7d:79:f8:89:58:
         d8:5e:e2:ff:f2:d6:14:51:aa:c2:71:fd:92:15:48:59:54:ad:
         16:1a:9d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:50 2023 by rpki-client on console-fra.rpki-client.org