Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fWP6PgISLiuuL34C7lsTHv-eDVw.roa
File:                     fWP6PgISLiuuL34C7lsTHv-eDVw.roa (raw, json)
Hash identifier:          a9SFChaas21X98pWCOGN0pl/99bDkMwJNYoXWdqMVkw=
Subject key identifier:   7D:63:FA:3E:02:12:2E:2B:AE:2F:7E:02:EE:5B:13:1E:FF:9E:0D:5C
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1906
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fWP6PgISLiuuL34C7lsTHv-eDVw.roa
Signing time:             Sat 22 Oct 2022 06:06:01 +0000
ROA not before:           Sat 22 Oct 2022 06:06:01 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24164
IP address blocks:        122.100.80.0/21 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6406 (0x1906)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Oct 22 06:06:01 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=7D63FA3E02122E2BAE2F7E02EE5B131EFF9E0D5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:24:b2:2a:0a:45:c7:3c:7c:8e:c0:17:9f:c7:
                    e5:6b:35:c0:2f:8e:3b:cb:38:19:8e:dc:84:5a:31:
                    88:f6:81:4e:9e:5b:26:17:51:4b:78:8c:42:5d:60:
                    29:3e:ab:a4:1c:10:86:c1:57:ce:c8:2c:5a:f1:49:
                    56:19:24:e4:97:e1:38:88:a5:f5:b5:78:d7:af:15:
                    eb:93:cc:34:b0:3b:10:d6:06:95:29:ae:64:cd:58:
                    85:2c:f1:56:a8:89:00:6d:d8:f8:73:9d:41:69:4e:
                    e5:7d:db:72:32:84:8f:eb:e5:0b:2a:23:73:35:ef:
                    7d:67:ca:95:68:ef:4c:07:d2:af:ff:c5:54:59:b5:
                    ad:a0:48:f3:46:cb:68:79:c0:a7:c1:75:0b:26:d9:
                    d4:fc:78:7a:64:3e:26:c8:56:b8:b0:e8:52:23:f0:
                    bc:51:65:28:73:0c:48:bc:ba:1a:21:b7:47:5d:e4:
                    20:f7:66:85:9e:b1:69:7b:2c:7e:ae:a7:f8:5f:22:
                    68:ed:72:ad:61:77:11:3d:63:ab:8f:b7:d6:68:76:
                    d9:26:e1:ac:69:14:c5:60:3d:7c:e0:76:75:10:f6:
                    b0:be:97:77:1d:e4:76:f1:11:90:c3:f5:28:e2:4b:
                    51:af:a2:ba:19:8a:ef:e4:59:87:3b:71:0f:1a:d8:
                    a2:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:63:FA:3E:02:12:2E:2B:AE:2F:7E:02:EE:5B:13:1E:FF:9E:0D:5C
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fWP6PgISLiuuL34C7lsTHv-eDVw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.100.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         43:93:e8:ed:c4:0b:fb:d0:1f:9b:86:58:39:27:79:1a:ed:6c:
         d9:43:01:53:b0:6f:54:46:cb:91:3e:a5:dd:59:db:ef:e2:c7:
         5a:36:8c:b6:88:19:d8:81:3d:9f:ab:8a:fa:05:fe:ad:c6:ec:
         84:1b:70:99:45:ba:a6:70:3b:d6:84:b5:85:52:99:50:30:a7:
         ea:61:2f:63:f4:b6:fe:ef:c7:36:3c:4d:88:c4:c3:f5:3d:ca:
         7b:70:e5:7a:c6:17:89:a5:18:3c:4f:f4:9b:35:1a:93:18:c0:
         dd:ce:75:db:58:5e:62:93:25:f7:0e:d2:60:89:54:a8:88:08:
         10:e6:bb:93:6b:b9:1f:3e:bb:10:81:96:4e:8e:ce:d6:43:cd:
         36:ac:33:91:df:dd:48:8d:b7:f4:7a:6c:5a:81:a0:5c:0c:e6:
         29:ad:75:06:bd:a7:25:68:50:61:2b:e1:fa:58:01:1b:4f:e4:
         fb:3c:7d:a2:e0:90:03:e5:ad:28:b6:19:7b:98:13:ae:0c:04:
         65:c2:82:fc:2a:b5:7e:da:29:bd:81:f7:4a:32:6e:55:49:b8:
         ff:58:66:4a:d7:54:2f:ef:aa:15:16:d0:ea:99:ea:17:80:91:
         66:f6:c3:34:3a:4c:21:bf:fe:2f:d9:89:90:e5:73:5a:55:21:
         7a:9f:e9:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:40 2023 by rpki-client on console-ams.rpki-client.org