Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/lPoUIOztETsWaKWOMO3nBZjWzHE.roa
File:                     lPoUIOztETsWaKWOMO3nBZjWzHE.roa (raw, json)
Hash identifier:          NB2650SROMuNobtn0n8NXa3ncVmTPnvZJpOySB2njDE=
Subject key identifier:   94:FA:14:20:EC:ED:11:3B:16:68:A5:8E:30:ED:E7:05:98:D6:CC:71
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1A2C
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/lPoUIOztETsWaKWOMO3nBZjWzHE.roa
Signing time:             Sun 23 Oct 2022 13:02:16 +0000
ROA not before:           Sun 23 Oct 2022 13:02:16 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24164
IP address blocks:        49.159.120.0/21 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6700 (0x1a2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Oct 23 13:02:16 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=94FA1420ECED113B1668A58E30EDE70598D6CC71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:86:a8:ca:7d:8b:bf:9c:e0:15:47:f6:51:58:
                    2f:49:01:2d:90:b6:c8:e2:2a:e6:25:60:05:b8:4a:
                    73:cb:fd:da:cf:2e:a6:5a:3c:9a:da:66:fc:3b:1f:
                    91:04:c9:e9:22:88:cb:fb:5b:2b:e1:af:77:f0:15:
                    93:61:d0:89:98:f6:24:d7:74:61:d0:6a:dc:44:71:
                    11:42:24:41:93:e2:b2:2b:55:54:72:15:55:b8:2b:
                    8f:6c:02:ac:ce:43:7c:75:08:85:58:ee:bb:a2:58:
                    fb:49:2d:5d:43:5f:67:2a:41:4e:39:f5:cb:91:00:
                    41:7e:0b:37:ba:62:39:cc:92:83:17:dc:41:8f:ec:
                    35:a9:3a:90:2a:4f:76:42:4f:77:dc:c7:6b:4d:1d:
                    1f:bc:fa:d9:f5:4e:22:39:ff:c0:e5:eb:9d:01:a4:
                    f4:67:74:fa:f0:a4:60:da:71:9e:ff:c2:77:2c:8e:
                    ef:ec:03:df:39:a8:4e:66:85:7b:9d:67:ba:4c:2e:
                    a3:b6:99:48:6d:44:e5:24:2f:64:38:f6:a0:70:68:
                    3a:40:28:ad:cb:29:01:c6:ea:02:18:49:d2:b2:23:
                    47:fa:68:55:9a:91:53:d9:06:30:4b:17:8a:47:c2:
                    11:d5:ec:d5:20:ec:88:91:18:62:52:39:31:3c:37:
                    6d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:FA:14:20:EC:ED:11:3B:16:68:A5:8E:30:ED:E7:05:98:D6:CC:71
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/lPoUIOztETsWaKWOMO3nBZjWzHE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.159.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         78:10:69:74:54:f3:60:95:02:52:18:fb:60:6a:83:e7:29:94:
         31:dc:cb:a4:b3:46:df:80:94:f5:7a:2a:63:55:13:36:10:60:
         ed:f4:ad:27:53:21:b8:e7:45:69:78:e3:e4:1f:12:f0:59:2e:
         ba:c0:1a:43:ef:2e:fe:27:de:c3:55:d9:e9:38:a3:89:1e:b0:
         50:8b:7e:59:12:6a:58:26:82:d8:32:3c:1d:a4:ed:0a:60:b3:
         ea:2e:de:65:5d:f0:80:05:8d:8e:19:0a:ce:89:85:c8:ac:53:
         e5:0b:e4:8c:c8:0d:16:a8:46:f0:5c:23:9e:85:6f:9e:5c:81:
         bb:cd:f9:e2:33:8e:54:27:04:a2:5d:a4:a5:70:73:c5:81:17:
         59:d8:fd:5a:cd:2f:7f:99:5a:ac:ce:dc:48:71:16:eb:11:b0:
         9d:d2:8a:2f:f7:46:da:37:27:b2:14:f9:86:19:07:82:57:9b:
         dc:bb:a7:19:f9:6c:ea:a1:81:16:82:d0:10:8d:cc:d3:bd:31:
         d2:39:df:bc:ea:36:b4:85:b7:e3:57:cd:2a:8b:ce:83:a8:69:
         5b:52:89:ce:fd:b4:71:aa:78:c8:6b:3b:e0:9c:8f:91:d1:fa:
         1b:d6:d4:73:f0:b8:a0:c9:89:61:d0:dc:ca:f8:97:36:d8:9f:
         e9:b5:cf:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----