Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/cAenY8qPnCFX0PlAKM-zeCYhmlA.roa
File:                     cAenY8qPnCFX0PlAKM-zeCYhmlA.roa (raw, json)
Hash identifier:          aXnNlrMR4MYBJyfm/AnKnV0NJ+dtGgwPbZ1UQqcokEE=
Subject key identifier:   70:07:A7:63:CA:8F:9C:21:57:D0:F9:40:28:CF:B3:78:26:21:9A:50
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/cAenY8qPnCFX0PlAKM-zeCYhmlA.roa
Signing time:             Thu 15 Sep 2022 02:36:37 +0000
ROA not before:           Thu 15 Sep 2022 02:36:37 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24164
IP address blocks:        61.60.216.0/21 maxlen: 21

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5374 (0x14fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 15 02:36:37 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=7007A763CA8F9C2157D0F94028CFB37826219A50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4a:7a:43:f4:26:9e:72:c1:73:27:eb:e6:d2:
                    be:da:a7:8d:54:d0:e1:b4:03:32:0d:9c:fc:1d:61:
                    98:4c:70:43:c8:52:fa:c7:fc:cd:ab:8f:fb:97:83:
                    f0:c1:14:e2:61:c5:13:e5:b9:e9:1c:48:9e:b7:91:
                    4e:72:c2:80:a3:8e:05:d4:26:94:ec:07:18:5a:97:
                    38:1e:23:59:a6:da:e0:29:79:dd:d2:af:b7:01:d3:
                    51:66:5b:1d:94:4f:e3:05:03:80:f9:f5:38:43:b1:
                    30:44:26:fc:57:60:46:b0:5b:f6:6a:b7:e0:53:4c:
                    3b:cb:57:23:f9:f6:b4:86:5e:ba:af:1c:fd:d0:da:
                    44:a1:3a:9f:12:d9:c6:73:51:47:3d:db:ad:81:d8:
                    de:b0:bd:d3:bd:ed:37:f7:42:84:e2:7b:af:9b:76:
                    bf:19:07:68:e3:c9:4b:c6:e2:cf:87:a5:bf:13:0c:
                    ef:e1:07:ca:3a:5e:05:41:42:e6:27:fa:b7:db:87:
                    90:21:b3:9d:53:25:a5:af:a1:01:67:56:a9:d6:e5:
                    ca:95:c5:0f:0c:df:7c:91:00:42:21:d6:eb:ab:b1:
                    85:51:83:e9:f3:4e:3e:8c:a7:50:8f:fe:ee:e6:20:
                    37:e2:4d:c0:66:2e:2e:e3:b8:6d:31:f9:3b:d8:9e:
                    57:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:07:A7:63:CA:8F:9C:21:57:D0:F9:40:28:CF:B3:78:26:21:9A:50
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/cAenY8qPnCFX0PlAKM-zeCYhmlA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.60.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         47:ea:00:04:c8:4a:46:9e:3f:b1:1d:6b:3e:92:c6:c6:b1:dd:
         42:ff:28:bc:7d:e6:48:ab:4c:70:d6:be:5a:e8:46:69:8f:1a:
         a8:9f:21:9d:56:fe:a7:f7:70:be:ff:38:ad:06:5d:86:be:c7:
         3e:ed:e1:17:c3:37:7a:6d:d5:7b:70:c5:f9:31:d6:a2:75:e1:
         ea:9c:4f:6c:bc:d9:04:d2:0a:00:75:06:08:b0:5b:87:e6:23:
         a0:67:d6:a9:84:84:58:75:dd:b2:b3:ee:08:70:32:10:52:68:
         af:7e:42:f5:ae:8e:80:61:5d:6d:e0:f5:f0:52:6f:c2:a0:1c:
         d4:6b:bb:58:50:dd:4e:f9:a8:c0:ac:dd:94:c5:6d:b1:9a:bb:
         fb:1f:0e:a9:7c:00:da:ca:31:55:8b:49:53:df:69:69:a2:2a:
         c7:56:0c:5e:ba:b3:dd:3b:7d:c5:31:e7:ee:b6:34:13:b5:27:
         67:f9:f6:5c:6a:e2:8c:94:c4:bb:e1:7d:a3:f8:69:21:87:43:
         79:4f:c2:5b:65:e2:8a:c7:9e:ee:b3:64:f0:f5:7b:b0:b9:e5:
         39:9d:78:a7:0c:21:7e:3f:2d:e2:6a:bc:37:98:04:ad:8a:51:
         13:ef:64:94:2a:26:8a:bf:52:3b:43:f8:cd:18:a3:ec:02:95:
         93:a4:9f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:50 2023 by rpki-client on console-fra.rpki-client.org