Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/xy6ZwG56nq5JW4vXH-vs5q2AVTY.roa
File:                     xy6ZwG56nq5JW4vXH-vs5q2AVTY.roa (raw, json)
Hash identifier:          PgxFRyUaXLqmEIY+pM6cl+QqD5QzBnT0KaSQSVII21M=
Subject key identifier:   C7:2E:99:C0:6E:7A:9E:AE:49:5B:8B:D7:1F:EB:EC:E6:AD:80:55:36
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/xy6ZwG56nq5JW4vXH-vs5q2AVTY.roa
Signing time:             Thu 15 Sep 2022 02:36:24 +0000
ROA not before:           Thu 15 Sep 2022 02:36:24 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24163
IP address blocks:        49.158.148.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5374 (0x14fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 15 02:36:24 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=C72E99C06E7A9EAE495B8BD71FEBECE6AD805536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0b:d6:98:84:a7:04:38:95:55:83:ce:d7:00:
                    f8:b8:28:c7:39:bd:d8:fe:59:5a:7d:31:fe:dc:8c:
                    5a:bb:57:90:e3:5b:c1:6e:9d:87:79:24:dc:a1:23:
                    06:eb:fb:b4:61:cf:4d:be:43:b8:ce:3a:1c:18:72:
                    6b:c6:e7:42:e7:df:e4:96:74:3c:70:b3:18:8e:25:
                    b5:7d:66:df:67:90:4e:00:7c:34:30:90:4e:cb:b7:
                    be:22:95:68:e6:f9:ce:b6:99:ce:5e:03:7d:f3:65:
                    aa:07:c7:aa:64:f1:fb:bd:23:09:2b:db:64:2e:d9:
                    bb:9e:bd:98:f1:0e:1b:99:5b:71:9d:c0:7c:b9:4c:
                    bc:8f:0d:ad:9a:8e:33:8e:a4:39:88:1b:75:2b:05:
                    d7:45:69:08:0e:7f:cd:a7:1b:1c:13:be:27:a2:cf:
                    c3:a6:3d:05:95:a9:07:93:5d:a7:3d:a0:fc:50:84:
                    9d:77:b3:6e:d5:58:6c:f3:1e:0f:24:9d:82:95:41:
                    0b:75:82:37:4e:32:d2:99:09:86:b3:09:4c:ac:94:
                    19:1e:6d:b3:ac:f6:08:9e:b0:0f:b7:36:5b:1c:f7:
                    ef:d2:b8:28:88:37:21:4a:18:f3:f9:40:af:41:3e:
                    da:1f:e2:07:a9:9f:77:82:d1:5b:2b:81:c4:1f:84:
                    31:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:2E:99:C0:6E:7A:9E:AE:49:5B:8B:D7:1F:EB:EC:E6:AD:80:55:36
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/xy6ZwG56nq5JW4vXH-vs5q2AVTY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.158.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:0d:bf:ed:f0:a7:5b:30:4b:c9:15:1e:13:a0:33:56:e4:b7:
         53:38:98:83:1c:1c:de:00:c4:33:b4:47:f6:fe:c5:42:56:cc:
         8f:77:05:1c:50:e4:1f:0e:8b:b8:91:a4:10:1a:2b:75:a2:6b:
         64:6b:22:09:7d:af:23:25:31:45:37:b7:7c:52:5a:3e:3e:d8:
         48:aa:34:4d:0a:d0:94:0c:79:6f:ab:1f:99:27:ba:8c:11:f4:
         2b:c0:48:66:ee:5f:7d:20:8c:40:4f:39:0f:70:bb:fb:59:d9:
         6e:0e:22:9e:c8:f7:37:d9:45:dd:44:cf:fc:99:11:b6:bb:e5:
         20:46:2b:a8:ad:01:ce:64:65:4b:82:d5:4f:dc:6f:b8:7b:91:
         0b:2a:29:2f:fd:32:98:92:63:13:2c:de:6b:99:d9:5b:69:d7:
         7f:39:aa:32:c8:12:08:cd:f4:19:df:79:0e:c1:94:5c:3b:89:
         23:04:88:0e:38:56:41:0b:2c:1f:3c:4e:a5:10:57:36:2e:f2:
         9e:ea:f0:3f:5e:6a:86:52:ca:78:7a:c4:3f:85:4b:da:4e:bf:
         4b:e8:9e:94:14:28:e1:af:c7:0b:e2:d1:e1:b3:31:a9:ef:c6:
         fd:57:a9:51:80:39:6d:d1:7b:88:51:54:b7:e7:cf:6d:ca:40:
         f4:80:21:c8
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFP4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjA5MTUw
MjM2MjRaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEM3MkU5OUMwNkU3QTlF
QUU0OTVCOEJENzFGRUJFQ0U2QUQ4MDU1MzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCpC9aYhKcEOJVVg87XAPi4KMc5vdj+WVp9Mf7cjFq7V5DjW8Fu
nYd5JNyhIwbr+7Rhz02+Q7jOOhwYcmvG50Ln3+SWdDxwsxiOJbV9Zt9nkE4AfDQw
kE7Lt74ilWjm+c62mc5eA33zZaoHx6pk8fu9Iwkr22Qu2buevZjxDhuZW3GdwHy5
TLyPDa2ajjOOpDmIG3UrBddFaQgOf82nGxwTvieiz8OmPQWVqQeTXac9oPxQhJ13
s27VWGzzHg8knYKVQQt1gjdOMtKZCYazCUyslBkebbOs9giesA+3Nlsc9+/SuCiI
NyFKGPP5QK9BPtof4gepn3eC0VsrgcQfhDHRAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUxy6ZwG56nq5JW4vXH+vs5q2AVTYwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3h5Nlp3RzU2bnE1Slc0dlhI
LXZzNXEyQVZUWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIx
npQwDQYJKoZIhvcNAQELBQADggEBAIINv+3wp1swS8kVHhOgM1bkt1M4mIMcHN4A
xDO0R/b+xUJWzI93BRxQ5B8Oi7iRpBAaK3Wia2RrIgl9ryMlMUU3t3xSWj4+2Eiq
NE0K0JQMeW+rH5knuowR9CvASGbuX30gjEBPOQ9wu/tZ2W4OIp7I9zfZRd1Ez/yZ
Eba75SBGK6itAc5kZUuC1U/cb7h7kQsqKS/9MpiSYxMs3muZ2Vtp1385qjLIEgjN
9BnfeQ7BlFw7iSMEiA44VkELLB88TqUQVzYu8p7q8D9eaoZSynh6xD+FS9pOv0vo
npQUKOGvxwvi0eGzManvxv1XqVGAOW3Re4hRVLfnz23KQPSAIcg=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:41 2023 by rpki-client on console-ams.rpki-client.org