Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/sFycoQYsI_71R6ETiy41xydMPTs.roa
File:                     sFycoQYsI_71R6ETiy41xydMPTs.roa (raw, json)
Hash identifier:          u0MP3NfaWweHt4dlozDXXX2lmgvHBzzpjbo1fuKqQEI=
Subject key identifier:   B0:5C:9C:A1:06:2C:23:FE:F5:47:A1:13:8B:2E:35:C7:27:4C:3D:3B
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/sFycoQYsI_71R6ETiy41xydMPTs.roa
Signing time:             Thu 15 Sep 2022 02:35:37 +0000
ROA not before:           Thu 15 Sep 2022 02:35:37 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24164
IP address blocks:        49.159.0.0/16 maxlen: 16

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5374 (0x14fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 15 02:35:37 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=B05C9CA1062C23FEF547A1138B2E35C7274C3D3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8a:d3:2d:04:3d:2c:19:75:ea:59:20:8f:ae:
                    86:66:7f:33:f7:fd:f2:16:5d:30:20:65:b6:00:94:
                    ce:37:dd:9f:b2:e7:1e:9c:56:f0:c4:a0:87:9e:d1:
                    0e:0b:67:a6:ae:78:28:0b:b1:04:6a:a7:30:85:02:
                    de:32:47:09:2a:df:a5:ce:e9:ec:41:a1:eb:45:6a:
                    cd:55:f3:32:45:bc:5a:78:b0:58:59:8a:0d:7f:0f:
                    13:28:62:37:db:92:75:c0:50:7d:b0:80:79:87:b3:
                    b2:4f:f3:39:ef:0d:f0:50:a5:ae:bf:ca:7f:ef:35:
                    2d:a5:63:22:f2:7b:e5:94:0b:99:04:f5:8e:89:dc:
                    b3:5c:e1:24:26:9f:05:74:fd:10:d0:d9:8d:bc:c9:
                    c0:5b:6d:62:d4:79:f9:3f:f5:da:0b:81:0a:db:fd:
                    ea:35:d1:36:3d:61:bb:1d:2e:31:53:c9:a8:ee:b7:
                    59:ac:2e:9d:6a:cd:b8:69:b0:86:52:1f:76:72:17:
                    02:c9:e3:47:05:5a:07:85:bd:09:4e:82:9d:89:b8:
                    49:d2:ec:9e:dc:de:4f:6b:01:2b:8a:e5:55:ea:35:
                    67:cb:72:a5:9e:ef:b9:d0:1b:b0:8f:b9:6e:93:46:
                    1b:7c:08:a9:22:cf:27:8b:97:69:5a:f9:2d:c2:c3:
                    7f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:5C:9C:A1:06:2C:23:FE:F5:47:A1:13:8B:2E:35:C7:27:4C:3D:3B
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/sFycoQYsI_71R6ETiy41xydMPTs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.159.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         28:e9:58:2e:29:f1:cf:c9:5f:18:82:69:a1:8a:34:15:e4:cb:
         cf:66:54:62:e0:6b:68:e4:b3:e9:50:12:f1:a7:d0:10:57:24:
         75:ed:37:5d:3f:f7:b3:a7:c3:cc:5b:2f:35:59:0d:d8:3a:6c:
         ae:52:69:76:42:05:cf:fe:2c:7c:9d:fd:3b:b3:a0:dc:20:17:
         16:d1:80:8d:40:c1:78:95:25:5c:05:8e:89:9a:15:d4:40:13:
         0d:34:71:be:47:47:6d:e1:6f:52:60:ee:0e:df:cc:b2:17:05:
         12:88:dc:5c:4c:08:4b:ff:3f:3e:72:21:32:61:52:b8:13:56:
         9f:a8:2f:86:00:d3:81:74:ce:bb:eb:3b:1e:71:4a:2a:0a:62:
         e3:67:e5:4e:bb:dd:e2:f1:88:02:6b:d0:b8:0b:13:b6:a6:07:
         04:fa:f0:d6:51:74:98:cd:45:6a:8d:94:19:5c:31:20:85:8b:
         9d:ec:a9:fc:22:e0:02:19:89:b2:63:e9:03:1c:3a:bf:e5:ba:
         c3:5b:5e:90:29:7e:9f:74:b9:2c:9f:96:71:64:cd:69:43:a7:
         b6:6f:1f:48:16:f9:54:27:3d:10:eb:5c:e1:78:c4:8f:45:82:
         e4:52:1e:21:bb:6c:af:fc:3d:ae:d0:b0:de:a8:1e:7d:7b:e7:
         05:9d:2b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----