Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/y3npGH35TdeDqtXzJjMWE7Ja0to.roa
File:                     y3npGH35TdeDqtXzJjMWE7Ja0to.roa (raw, json)
Hash identifier:          uiOGJfvS47SBBueqDgdzjEe6vJYPCYKoilULDRoEarc=
Subject key identifier:   CB:79:E9:18:7D:F9:4D:D7:83:AA:D5:F3:26:33:16:13:B2:5A:D2:DA
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       19F4
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/y3npGH35TdeDqtXzJjMWE7Ja0to.roa
Signing time:             Sat 22 Oct 2022 06:13:26 +0000
ROA not before:           Sat 22 Oct 2022 06:13:26 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     4662
IP address blocks:        61.60.208.0/20 maxlen: 20

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6644 (0x19f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Oct 22 06:13:26 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=CB79E9187DF94DD783AAD5F326331613B25AD2DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:12:8a:50:71:a5:86:d2:47:f6:65:f3:ec:3a:
                    8b:45:5a:4c:0e:36:0b:1a:3d:14:e1:fb:b4:a9:76:
                    b8:e2:9d:61:c8:24:8d:7e:52:2e:49:ef:6c:aa:6f:
                    54:d4:72:19:8e:b5:8b:06:d4:c8:93:6b:40:10:b3:
                    0b:c4:ab:e9:39:b3:8c:65:26:7d:58:bd:92:57:3e:
                    99:35:82:5d:22:98:da:d2:67:23:61:5a:0c:30:45:
                    88:43:5a:f1:c9:75:50:cb:f8:9f:8d:c2:8e:cf:da:
                    b1:cc:0b:c6:03:be:d1:79:af:ee:ae:b6:3b:cf:13:
                    de:39:f7:67:11:3b:0c:9b:23:92:f9:4d:64:9f:f9:
                    f3:ce:f2:04:36:d0:69:07:2f:20:55:e0:a0:53:a0:
                    fb:ae:41:cc:3b:a7:f2:cf:b2:19:5d:2a:dc:5f:64:
                    44:17:cc:89:10:2c:df:22:b2:0e:37:b3:cc:d7:c0:
                    5a:c4:5b:d6:33:1b:5f:9e:27:cb:a0:e6:36:a0:f1:
                    c8:cc:92:37:ab:43:c9:30:2a:55:a5:ce:32:9e:a8:
                    f8:47:1d:d8:0f:99:4e:38:17:1b:44:fe:22:e9:09:
                    58:24:88:aa:f1:58:93:ab:39:86:24:8a:35:e5:d4:
                    62:6c:6e:56:ea:07:fc:31:50:36:a4:cb:11:1c:d4:
                    41:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:79:E9:18:7D:F9:4D:D7:83:AA:D5:F3:26:33:16:13:B2:5A:D2:DA
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/y3npGH35TdeDqtXzJjMWE7Ja0to.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.60.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         68:29:5d:6e:a6:68:fe:35:2e:67:e0:0f:71:89:2e:f3:97:51:
         dd:45:a8:5a:09:96:10:1a:72:81:ef:3d:4a:bd:c6:6b:c9:6c:
         90:6a:61:eb:7a:0a:a3:ce:80:f8:17:86:2f:df:70:72:12:ea:
         ea:ae:7f:cc:84:1f:e1:c9:f8:4f:0a:09:6f:0b:93:37:06:5f:
         c9:7c:fb:47:69:91:76:5d:51:5b:e0:1a:f3:f8:49:d0:c7:09:
         fa:3a:98:0d:75:73:cc:fb:58:22:74:0a:07:b7:38:e1:6b:9e:
         43:78:ab:59:03:72:88:32:97:4f:2a:a5:a8:01:5c:1b:3c:af:
         64:bc:0f:e5:dc:e2:76:56:8b:12:c5:f4:3a:48:d1:11:20:e2:
         eb:63:8c:59:1a:d2:73:76:c9:06:e1:76:f8:c1:96:a8:7b:3a:
         ee:e9:86:64:6a:a5:4e:b1:46:88:36:e9:16:28:c8:77:1d:18:
         db:59:27:e8:a3:0d:03:2d:b2:be:54:5b:b6:e4:2f:9d:7f:63:
         a5:4a:fd:7b:2c:18:76:71:59:b2:e8:31:5d:c0:41:1a:f9:c3:
         e0:8f:a3:ba:b4:c4:8f:da:f7:21:c6:dc:e2:cd:af:79:69:a2:
         f4:0a:ac:d3:40:db:28:85:56:35:dc:8b:d1:5d:0f:27:8c:e4:
         27:5b:58:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----