Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/lwTDtGhBk90mMNSux9Djl_lNHAc.roa
File:                     lwTDtGhBk90mMNSux9Djl_lNHAc.roa (raw, json)
Hash identifier:          b0PmFd4nq1ASOA9N8fDbtfRi7dRzOlTa/dd2PZJyuPA=
Subject key identifier:   97:04:C3:B4:68:41:93:DD:26:30:D4:AE:C7:D0:E3:97:F9:4D:1C:07
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       18EA
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/lwTDtGhBk90mMNSux9Djl_lNHAc.roa
Signing time:             Sat 22 Oct 2022 06:05:52 +0000
ROA not before:           Sat 22 Oct 2022 06:05:52 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24164
IP address blocks:        49.158.168.0/21 maxlen: 21

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6378 (0x18ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Oct 22 06:05:52 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=9704C3B4684193DD2630D4AEC7D0E397F94D1C07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:6a:e7:58:d8:38:32:fe:c6:bf:dd:df:aa:92:
                    08:d6:e7:20:6a:73:a6:95:39:4f:4c:4d:64:dd:5d:
                    ce:e4:d1:a5:76:05:76:c3:e5:12:c5:5a:83:6d:59:
                    7c:0a:05:e5:d9:bf:cc:f1:f3:8b:92:6f:e7:1f:37:
                    88:2e:26:9e:02:76:36:76:f3:41:0e:88:8a:7e:7d:
                    94:49:11:21:4b:c2:9f:c9:37:d2:d0:1a:e7:98:bd:
                    6c:c2:ed:59:c7:80:71:60:35:8e:28:ef:7a:3f:b0:
                    8b:22:06:a9:f4:2a:e0:22:00:71:1f:b1:d4:b2:73:
                    de:c6:90:f2:7c:1b:f1:14:84:9d:24:0d:5c:ee:39:
                    4c:53:e1:f1:de:c9:a9:d3:1e:3f:83:92:41:a8:a6:
                    fe:64:90:b8:7d:b2:09:cf:5e:5c:c2:9a:e3:97:cc:
                    85:bf:95:c7:7a:90:23:7f:d6:a3:f8:46:1d:55:38:
                    fe:39:e3:a5:02:1e:2c:0f:fb:7e:50:88:dc:c5:74:
                    c6:c3:60:ec:c3:11:44:85:32:e3:58:50:de:8a:b5:
                    3f:c1:07:ee:7c:f7:74:cb:d3:f4:82:6f:12:a4:fb:
                    28:34:a4:32:e5:f6:82:2f:b8:ed:52:63:7f:b4:ac:
                    b3:93:16:12:2f:4d:36:14:89:88:d3:d5:e4:da:ec:
                    b3:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:04:C3:B4:68:41:93:DD:26:30:D4:AE:C7:D0:E3:97:F9:4D:1C:07
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/lwTDtGhBk90mMNSux9Djl_lNHAc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.158.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         51:ff:97:17:0e:97:29:42:20:9a:30:be:92:9a:22:0c:9b:21:
         98:3f:22:05:02:b7:84:46:23:75:e3:a1:96:d1:3d:01:63:9a:
         de:d4:8b:8d:26:a3:af:1a:09:1a:fa:3e:2c:2b:63:ca:4a:23:
         68:5f:08:b3:15:42:5a:b8:85:e3:6d:74:41:6b:c8:29:7f:ec:
         58:70:99:96:c6:ae:cd:be:86:32:65:6d:04:df:22:41:2a:0c:
         71:cd:4c:b6:50:4e:e3:f2:ce:63:a8:dd:a4:ed:09:1d:61:be:
         45:e1:2d:5b:bc:bf:35:87:a4:73:d0:f0:e6:ac:d8:15:02:60:
         2d:b9:43:31:bd:be:80:a4:2f:c8:09:f3:25:85:ff:fd:f1:66:
         f7:2c:27:ee:58:34:75:d6:0f:20:b0:8d:8d:8f:57:f3:42:bf:
         20:c5:3a:53:12:23:28:9f:f3:48:81:2c:ba:20:6b:84:b2:12:
         b9:51:c1:72:d6:99:1a:2a:f0:a1:62:84:ae:b9:42:c0:32:82:
         0b:f4:c9:2e:4b:e1:f0:1c:a8:9e:a6:ac:8c:b5:24:4d:71:32:
         21:f8:17:fb:8f:33:93:b1:06:ec:a5:e5:de:3f:bb:92:07:57:
         57:66:50:35:04:69:7b:c8:56:e7:7f:a2:b6:63:4f:ff:42:dc:
         19:14:93:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:40 2023 by rpki-client on console-ams.rpki-client.org