Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/UOHP8ybLj4-jowCkqWSh-E5ekUk.roa
File:                     UOHP8ybLj4-jowCkqWSh-E5ekUk.roa (raw, json)
Hash identifier:          VLo0lJttp12/Oe+HovuCnAS7melhdQ4mgJv3HP8X6Fs=
Subject key identifier:   50:E1:CF:F3:26:CB:8F:8F:A3:A3:00:A4:A9:64:A1:F8:4E:5E:91:49
Certificate issuer:       /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial:       0D76
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/UOHP8ybLj4-jowCkqWSh-E5ekUk.roa
Signing time:             Thu 15 Sep 2022 02:48:00 +0000
ROA not before:           Thu 15 Sep 2022 02:48:00 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     3462
IP address blocks:        220.130.0.0/15 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3446 (0xd76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
        Validity
            Not Before: Sep 15 02:48:00 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=50E1CFF326CB8F8FA3A300A4A964A1F84E5E9149
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e8:e7:79:03:a7:b4:72:5d:b7:83:cc:08:d0:
                    f0:23:84:26:a6:09:0c:56:ad:fe:5d:b0:28:22:e5:
                    20:1a:3a:f0:fb:9c:db:3e:87:27:59:ce:07:77:c3:
                    b0:0d:f8:4f:9c:e8:1f:2f:45:0a:1b:bd:c0:85:b8:
                    41:a6:b7:5f:d2:b3:4f:8a:4a:32:c5:9b:1f:19:d0:
                    1d:f1:7d:6d:1e:1e:b3:f0:2b:0e:22:66:a0:4b:7a:
                    13:b9:66:8e:e2:da:83:36:28:8f:2d:f3:28:f6:12:
                    1f:99:a9:23:c2:29:ef:ce:60:e3:26:6d:d1:74:80:
                    37:f5:c1:5f:80:a3:0a:56:b1:57:84:02:ad:4c:7f:
                    5f:68:2f:07:d7:52:a4:e9:a4:5d:22:ac:39:31:46:
                    fd:0f:d4:4a:b0:96:0a:b8:eb:e4:1a:1a:f1:b3:ce:
                    17:d1:ef:e0:74:f7:b3:74:dd:d6:70:54:69:73:83:
                    30:cd:40:26:fa:50:4a:36:70:74:76:bf:e0:5e:06:
                    44:d8:22:b7:4f:14:95:bf:a8:de:aa:71:76:6f:8d:
                    35:bf:97:29:95:39:fe:12:be:c3:37:c2:f7:5c:2e:
                    03:25:ce:2e:50:a5:74:31:7d:d0:a8:df:a9:b3:e3:
                    8a:0d:11:b2:de:4a:11:cc:6c:36:d6:60:f4:c2:f8:
                    6e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:E1:CF:F3:26:CB:8F:8F:A3:A3:00:A4:A9:64:A1:F8:4E:5E:91:49
            X509v3 Authority Key Identifier:
                keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/UOHP8ybLj4-jowCkqWSh-E5ekUk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.130.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         9e:21:e1:f3:20:06:69:1c:a1:4e:da:ed:b0:f9:77:61:ef:d5:
         15:90:31:13:8c:59:4a:68:ec:9d:e8:23:43:dc:13:8e:48:d2:
         24:8f:de:ab:a0:23:24:14:a7:49:3a:70:1e:a0:44:4a:e7:24:
         19:5c:94:1c:fe:2d:8f:a4:52:a0:d7:dc:de:b5:cb:56:98:14:
         e4:ad:f1:b2:b3:a9:07:98:bf:8f:99:d0:d3:7d:4a:80:2a:fb:
         1c:3a:7b:73:5a:c8:86:5f:a3:f6:56:41:75:21:86:5b:16:21:
         2d:67:7c:c8:0b:e7:71:bc:b2:32:fa:50:da:f7:eb:32:3d:06:
         3f:d9:8d:2e:80:c4:de:eb:f5:6e:4d:43:24:92:85:2a:2e:73:
         02:b0:a7:f6:ca:dc:2c:6d:d0:1a:30:83:ba:00:8b:6c:d5:70:
         15:11:b6:e3:1c:0a:72:12:86:9f:94:81:e6:31:95:de:9c:c5:
         34:1d:7e:2d:43:19:d8:86:ef:8c:9e:e9:2a:94:dc:e5:78:fc:
         92:8c:8e:5b:5c:8d:01:7c:ea:aa:b1:81:1e:c8:ab:bd:1a:90:
         3b:db:34:22:81:e9:d8:f1:7f:c7:05:83:f5:0d:26:af:ea:24:
         6e:6d:50:4a:5d:2e:a7:0e:76:66:91:27:51:54:0d:d3:e5:76:
         e7:29:bd:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----