Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/l1OAP54mZ2i-1vPG6OGaNvi0GbI.roa
File:                     l1OAP54mZ2i-1vPG6OGaNvi0GbI.roa (raw, json)
Hash identifier:          Q8TGy6l2R0z7JB9tG77PYnpAedXQ6YkEsPnCIlJMrIg=
Subject key identifier:   97:53:80:3F:9E:26:67:68:BE:D6:F3:C6:E8:E1:9A:36:F8:B4:19:B2
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       18DA
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/l1OAP54mZ2i-1vPG6OGaNvi0GbI.roa
Signing time:             Sat 22 Oct 2022 06:05:48 +0000
ROA not before:           Sat 22 Oct 2022 06:05:48 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24164
IP address blocks:        115.165.192.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6362 (0x18da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Oct 22 06:05:48 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=9753803F9E266768BED6F3C6E8E19A36F8B419B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0d:16:bb:1c:34:01:6f:9c:ef:d2:f1:e5:29:
                    a3:04:29:cc:49:8e:79:19:f3:13:7e:a3:4a:88:f2:
                    7b:9b:4d:03:dd:07:11:71:94:1e:9d:24:f2:21:4b:
                    ef:e5:f3:7d:e6:30:2e:e7:c1:69:74:e7:84:6f:f6:
                    58:c5:c5:56:9b:44:76:b7:80:f1:ee:85:7f:c1:07:
                    68:14:78:d3:39:dd:96:04:05:45:0a:a1:19:64:19:
                    df:c6:99:09:ca:6e:ea:62:09:89:9d:8d:03:71:78:
                    03:94:ac:0a:e2:e9:d2:c5:f9:70:d2:0a:53:ce:4e:
                    32:b3:e2:97:0f:f1:f1:82:e9:93:59:7d:72:55:54:
                    95:81:62:51:55:9d:3a:67:5e:f6:77:be:76:2a:96:
                    1f:29:2c:58:9a:2b:82:49:fe:b3:ce:ee:5d:e4:e6:
                    4c:41:12:cf:1a:1a:40:ad:4c:2c:3a:d1:49:19:94:
                    1b:26:a9:02:6b:42:c2:74:b7:f8:7e:26:ce:24:83:
                    d6:07:86:71:3c:e4:fb:a9:46:6b:83:61:1f:91:d9:
                    4b:34:bf:61:b9:8b:3e:8f:40:7a:16:5f:5e:3b:4d:
                    96:0d:13:cc:c3:aa:88:89:63:a7:51:c6:6e:39:01:
                    bf:8e:82:d7:cc:56:50:4a:e2:d4:e6:07:7c:02:22:
                    f8:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:53:80:3F:9E:26:67:68:BE:D6:F3:C6:E8:E1:9A:36:F8:B4:19:B2
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/l1OAP54mZ2i-1vPG6OGaNvi0GbI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.165.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:d2:75:9f:03:e8:ff:f5:cc:18:b1:14:9f:fe:3d:c9:ad:f7:
         d5:5a:19:45:24:28:73:db:ac:ab:58:40:f6:85:43:06:42:a7:
         52:34:00:2f:4d:20:e3:68:91:51:fd:67:54:c0:3a:24:b8:d0:
         86:47:e4:38:71:56:4b:e0:ae:f8:c9:b8:bd:71:ca:f9:62:b6:
         30:65:1b:30:8f:9c:19:6e:10:fe:48:75:b6:a2:cc:99:4d:d8:
         cb:30:5e:4f:dd:3d:76:ff:c9:da:75:bf:8d:57:ed:0a:88:ad:
         2a:c4:a8:98:62:64:a6:30:00:f3:ad:60:41:47:5d:2d:f5:ec:
         fd:b9:0a:fc:51:c1:98:d5:f2:f3:06:91:a3:3a:57:ae:89:bc:
         a3:d0:4d:44:25:e7:a4:e5:bf:2d:ad:7e:46:b5:76:90:bc:2a:
         06:c0:9f:64:5f:73:28:df:64:8c:94:19:25:b3:aa:3b:96:95:
         b4:88:2d:f4:cd:b5:b4:33:de:da:9b:e5:6c:e1:aa:c7:1c:1c:
         e2:a7:91:10:c6:93:33:4f:e4:78:c5:d0:50:72:87:f3:5f:e5:
         02:03:47:06:42:00:0e:68:ba:c1:8a:9e:56:fb:54:3c:30:b0:
         6c:3a:1c:88:b3:5f:ca:da:8b:20:5b:e0:e0:44:89:6b:19:22:
         15:dc:f8:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:51 2023 by rpki-client on console-fra.rpki-client.org