Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/tWJpbbFQbPWyhjgiCyHN3uD4o7M.roa
File:                     tWJpbbFQbPWyhjgiCyHN3uD4o7M.roa (raw, json)
Hash identifier:          pNOwpa54L74fq2rf571olLmOj8I9TWHaSZD5hN0H/ks=
Subject key identifier:   B5:62:69:6D:B1:50:6C:F5:B2:86:38:22:0B:21:CD:DE:E0:F8:A3:B3
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       154E
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/tWJpbbFQbPWyhjgiCyHN3uD4o7M.roa
Signing time:             Fri 21 Oct 2022 09:06:01 +0000
ROA not before:           Fri 21 Oct 2022 09:06:01 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24163
IP address blocks:        180.218.248.0/21 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5454 (0x154e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Oct 21 09:06:01 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=B562696DB1506CF5B28638220B21CDDEE0F8A3B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:37:6f:89:6f:2e:f0:bc:37:5e:41:79:99:1e:
                    48:14:ba:0f:97:c4:f8:6e:77:6b:94:b5:e4:e0:93:
                    68:3c:17:0d:ed:44:eb:79:ec:66:ee:d6:02:c8:7e:
                    cd:75:99:8d:c3:c5:6e:9e:9a:5f:f5:30:17:e8:d7:
                    fa:f2:21:cc:2a:bb:44:8a:52:26:87:2e:f3:3f:27:
                    b5:2e:cf:ad:85:87:9e:62:b7:cd:68:b0:30:f4:91:
                    0a:b1:9b:8c:7b:bc:bf:0d:52:10:f0:b0:6a:37:6a:
                    77:84:a5:ad:49:32:a4:3b:a4:78:ea:f0:82:27:6b:
                    2e:63:d4:81:1c:51:ce:11:8e:ce:11:54:68:83:1d:
                    57:c7:80:a9:a8:fa:f3:1b:21:c0:e7:3c:aa:62:eb:
                    d9:82:df:e8:c8:c8:76:0d:06:fc:19:03:25:ad:f4:
                    86:c6:8d:f2:a1:dc:bf:b0:3c:b2:89:44:c6:b7:d4:
                    60:3c:5a:cb:ef:6b:e6:dc:bd:1c:1f:72:43:f9:dd:
                    56:37:ba:b9:72:0f:53:7b:85:5f:98:ec:89:5c:1e:
                    d9:4f:5b:39:ca:ac:37:81:1c:54:c3:d8:65:54:ab:
                    d7:c0:97:13:da:4a:0d:b8:d2:23:1b:07:2c:6c:c8:
                    ce:b1:02:3b:af:ca:19:e8:5c:8b:c7:f8:1f:e6:2f:
                    b9:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:62:69:6D:B1:50:6C:F5:B2:86:38:22:0B:21:CD:DE:E0:F8:A3:B3
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/tWJpbbFQbPWyhjgiCyHN3uD4o7M.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3f:4b:d1:ed:a5:c1:01:2a:9e:7c:96:0d:ff:36:07:f9:19:e1:
         96:da:88:e8:5f:d1:63:60:ce:d0:c1:0e:66:c7:53:f6:ab:49:
         43:7f:13:83:ef:68:08:f2:c2:ac:84:31:bb:f5:67:f2:3a:06:
         04:a5:ae:54:35:48:08:7d:47:e8:f9:0d:fe:54:e8:ae:84:4a:
         97:b2:aa:e6:ad:54:84:d4:b1:8c:43:17:88:38:71:45:45:42:
         f8:77:6b:41:0e:07:37:93:43:7e:cc:f5:c9:36:90:1f:5c:99:
         3e:bd:38:00:be:af:6c:9f:68:ae:c5:b4:17:10:c9:a6:15:8d:
         ad:9b:3a:ee:e2:70:15:aa:e9:09:b5:70:10:72:42:8b:27:d4:
         4d:f7:f1:64:55:1a:45:d4:c1:5f:16:07:ea:4c:c3:5d:71:5c:
         3b:4d:d8:ac:02:51:98:cb:25:f0:56:f8:58:bd:ae:0b:31:54:
         45:72:61:97:1f:25:b3:9b:0e:86:55:74:3e:6a:0a:91:df:8a:
         0a:66:63:b1:3c:6a:50:83:84:b5:81:3c:d1:96:20:26:3d:1b:
         fd:3c:ee:8f:99:5a:cc:49:73:52:12:5c:f9:65:5b:9a:b5:bf:
         e0:f7:71:e6:03:61:f1:6c:6d:cf:89:fe:f5:31:07:09:c1:b0:
         87:79:d9:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----