Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/swKAsbAPVupelyi4dG5fRvH7Uwo.roa
File:                     swKAsbAPVupelyi4dG5fRvH7Uwo.roa (raw, json)
Hash identifier:          SYSe/fUaXEwIHn1q7W2Sl6GQtoyUM/3pvep2zgckduo=
Subject key identifier:   B3:02:80:B1:B0:0F:56:EA:5E:97:28:B8:74:6E:5F:46:F1:FB:53:0A
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1B73
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/swKAsbAPVupelyi4dG5fRvH7Uwo.roa
Signing time:             Fri 07 Apr 2023 07:34:57 +0000
ROA not before:           Fri 07 Apr 2023 07:34:57 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24164
IP address blocks:        61.58.112.0/20 maxlen: 21

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7027 (0x1b73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Apr  7 07:34:57 2023 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=B30280B1B00F56EA5E9728B8746E5F46F1FB530A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:17:f3:bb:ed:ce:57:f9:00:9f:21:29:a9:c0:
                    2a:fb:c5:4f:94:5c:4a:d7:2e:be:9d:b9:dc:43:39:
                    fe:b7:c2:86:ee:ba:d1:0f:25:a7:bb:38:f6:b7:96:
                    3b:d5:ed:58:e8:5b:93:29:2c:d6:0a:0b:21:93:c4:
                    0b:80:da:a0:4c:e3:23:cf:54:63:f9:e0:5f:a0:b3:
                    4c:c2:ee:0d:ab:41:fe:9e:ef:a0:68:48:21:4d:d8:
                    4a:04:db:85:f7:b3:5b:c5:a7:89:23:6c:2f:d4:ab:
                    b4:83:32:6c:b0:40:e8:5f:35:60:e9:38:fe:74:ea:
                    62:46:7e:94:72:98:ea:8a:bb:85:c3:84:89:9b:f1:
                    83:4f:71:21:bc:85:88:5b:f5:78:a9:4a:1e:2d:d8:
                    62:07:4c:ce:aa:de:ae:10:64:e5:ff:00:8f:69:97:
                    75:bd:7f:0f:e5:c0:dc:84:1b:b8:56:65:2b:a3:ee:
                    30:52:ca:27:a0:af:51:6b:b7:53:a4:d5:74:f2:30:
                    eb:48:fa:ab:8f:d2:3d:9d:41:23:20:6c:8e:b1:24:
                    1a:7f:b7:70:b9:71:15:4b:59:1f:ab:f7:ff:15:ad:
                    3e:59:cd:66:dc:5a:5d:8d:bd:a7:c4:1c:83:94:8a:
                    a4:92:ab:6a:f3:d3:de:b2:7a:25:64:0c:be:ba:cf:
                    46:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:02:80:B1:B0:0F:56:EA:5E:97:28:B8:74:6E:5F:46:F1:FB:53:0A
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/swKAsbAPVupelyi4dG5fRvH7Uwo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.58.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         45:59:5c:6f:89:cb:af:1c:ff:e2:8b:d4:84:a2:a8:a5:77:ec:
         13:4f:23:8b:ff:a7:33:06:68:fe:0b:3d:ce:31:d4:41:c3:1a:
         f5:d2:18:0b:4c:30:29:df:e8:d2:8e:d9:78:c0:47:50:a6:b7:
         60:a3:84:56:56:bb:ee:13:19:99:39:2d:2b:2c:50:0b:a4:36:
         3b:fb:69:cd:bb:37:69:25:77:a9:0c:d2:1f:1c:2b:99:b6:c8:
         0f:37:f8:52:fa:3a:8a:61:67:9c:c3:86:f4:de:52:97:e2:f9:
         63:89:85:3a:52:d0:3b:47:53:68:e8:16:ff:c5:66:3a:2c:91:
         73:f5:7c:72:48:e4:71:4e:c1:bb:cd:cf:3b:31:b4:57:55:df:
         02:00:b1:d5:b6:5b:11:79:49:9a:c1:79:49:c9:49:94:df:10:
         f3:73:ee:b2:df:92:5a:4b:8d:8e:13:6e:20:89:71:f2:c0:35:
         ee:cf:17:5d:cf:36:75:d4:b2:48:d4:ab:c4:69:61:ff:01:9d:
         aa:e7:49:63:28:b2:d6:f2:58:ad:b5:1d:9a:70:5d:97:6b:22:
         87:af:98:4b:f3:b6:bf:8d:fa:5e:49:b2:8e:05:5f:1f:2f:71:
         b0:6e:7a:64:0d:87:c1:d6:1e:84:d0:df:ef:98:f0:e6:46:5e:
         1b:10:0e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:40 2023 by rpki-client on console-ams.rpki-client.org