Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/yhZmkewbTzCsJfEu3gZj87a4GcI.roa
File:                     yhZmkewbTzCsJfEu3gZj87a4GcI.roa (raw, json)
Hash identifier:          dww5cOpHqL5nJaF2s5j7Z9iOkwtBAvCCrCOVRfVevws=
Subject key identifier:   CA:16:66:91:EC:1B:4F:30:AC:25:F1:2E:DE:06:63:F3:B6:B8:19:C2
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/yhZmkewbTzCsJfEu3gZj87a4GcI.roa
Signing time:             Thu 15 Sep 2022 02:36:17 +0000
ROA not before:           Thu 15 Sep 2022 02:36:17 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24164
IP address blocks:        180.218.64.0/20 maxlen: 20

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5374 (0x14fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 15 02:36:17 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=CA166691EC1B4F30AC25F12EDE0663F3B6B819C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:cc:e3:77:2d:ef:6c:fc:c6:59:47:b7:c4:e2:
                    68:7f:46:b9:f3:d6:25:47:c8:b9:e1:07:b7:94:66:
                    f9:46:6a:7a:7f:64:25:58:9d:dc:a2:6f:ea:37:f2:
                    91:78:2f:9b:da:34:6e:ff:b1:d9:c4:90:86:40:d1:
                    5b:13:2d:bd:19:dc:34:82:81:78:d4:5c:ef:34:ca:
                    09:51:27:a4:e5:12:f9:85:b3:0d:97:52:ae:55:18:
                    3e:57:f8:fd:74:8b:41:b6:d7:98:0a:32:83:ea:0b:
                    70:d7:c4:61:95:a5:ca:b5:ec:9c:91:f1:28:63:09:
                    df:ad:43:f4:3f:4a:d1:05:63:53:91:1b:1d:1c:df:
                    8b:2a:3a:3c:2a:1d:c6:c9:dc:66:51:0a:29:92:d6:
                    04:5b:cb:b2:05:5c:65:a6:48:27:3b:a1:03:e0:17:
                    a6:75:a5:72:ce:e3:ed:01:29:6f:69:40:40:05:93:
                    67:e4:0b:ad:b3:ed:94:d4:fc:72:f3:16:1e:ce:0d:
                    cf:53:1d:26:0c:8f:a1:bd:e6:25:36:e0:6a:ee:96:
                    8c:08:18:16:d1:d7:53:dd:04:91:a8:53:44:ef:17:
                    cb:d1:a0:f2:78:df:70:30:7a:67:bf:00:74:bd:6c:
                    b6:c5:ab:3c:5e:a4:60:82:77:68:4f:69:7e:35:f9:
                    65:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:16:66:91:EC:1B:4F:30:AC:25:F1:2E:DE:06:63:F3:B6:B8:19:C2
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/yhZmkewbTzCsJfEu3gZj87a4GcI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9f:a6:bc:96:41:44:aa:fc:7d:86:8f:1c:93:f1:ef:99:61:3c:
         4c:69:c5:c7:0f:2b:aa:b8:38:3d:6b:14:db:ad:fb:98:73:60:
         5e:2e:64:a4:68:41:23:b5:19:81:ef:cc:91:30:b3:4d:1b:66:
         1a:67:ba:00:71:b1:5f:10:ad:47:a8:89:8d:6c:bf:22:a0:27:
         08:a4:28:07:b1:0b:9a:22:f7:f6:5f:44:d4:c8:d9:68:b9:49:
         55:d8:53:b2:17:9d:12:15:de:f3:63:c5:79:97:e1:ef:d2:bc:
         fb:af:1d:c5:cd:9e:a7:66:50:36:07:d7:aa:f0:4f:b1:9a:d9:
         97:d5:2f:9e:54:25:06:bb:d8:34:3d:5b:e0:a3:37:87:a0:40:
         2b:5f:08:3a:fc:73:82:22:38:1f:52:9c:cb:03:7e:ae:bc:f9:
         8f:72:78:c4:53:cd:55:73:b9:b5:05:6f:5b:07:34:a2:ba:28:
         d0:14:ab:2e:52:bb:53:ab:b7:2b:d2:14:db:fc:40:68:aa:7d:
         9b:2f:f8:99:4a:84:cb:ff:dc:d3:b5:72:61:16:96:8e:79:36:
         dd:2e:d1:bd:82:2f:5f:f2:d7:90:44:a1:da:54:dc:a1:c2:d7:
         e9:b6:72:4a:d7:7a:51:53:b4:e5:f1:cd:97:db:36:74:c7:a8:
         3a:5a:fb:41
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFP4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjA5MTUw
MjM2MTdaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKENBMTY2NjkxRUMxQjRG
MzBBQzI1RjEyRURFMDY2M0YzQjZCODE5QzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDIzON3Le9s/MZZR7fE4mh/Rrnz1iVHyLnhB7eUZvlGanp/ZCVY
ndyib+o38pF4L5vaNG7/sdnEkIZA0VsTLb0Z3DSCgXjUXO80yglRJ6TlEvmFsw2X
Uq5VGD5X+P10i0G215gKMoPqC3DXxGGVpcq17JyR8ShjCd+tQ/Q/StEFY1ORGx0c
34sqOjwqHcbJ3GZRCimS1gRby7IFXGWmSCc7oQPgF6Z1pXLO4+0BKW9pQEAFk2fk
C62z7ZTU/HLzFh7ODc9THSYMj6G95iU24GrulowIGBbR11PdBJGoU0TvF8vRoPJ4
33Aweme/AHS9bLbFqzxepGCCd2hPaX41+WULAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUyhZmkewbTzCsJfEu3gZj87a4GcIwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3loWm1rZXdiVHpDc0pmRXUz
Z1pqODdhNEdjSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAS0
2kAwDQYJKoZIhvcNAQELBQADggEBAJ+mvJZBRKr8fYaPHJPx75lhPExpxccPK6q4
OD1rFNut+5hzYF4uZKRoQSO1GYHvzJEws00bZhpnugBxsV8QrUeoiY1svyKgJwik
KAexC5oi9/ZfRNTI2Wi5SVXYU7IXnRIV3vNjxXmX4e/SvPuvHcXNnqdmUDYH16rw
T7Ga2ZfVL55UJQa72DQ9W+CjN4egQCtfCDr8c4IiOB9SnMsDfq68+Y9yeMRTzVVz
ubUFb1sHNKK6KNAUqy5Su1OrtyvSFNv8QGiqfZsv+JlKhMv/3NO1cmEWlo55Nt0u
0b2CL1/y15BEodpU3KHC1+m2ckrXelFTtOXxzZfbNnTHqDpa+0E=
-----END CERTIFICATE-----