Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/2RBDdPQLj8-azXOBDB8xn9bRZaM.roa
File:                     2RBDdPQLj8-azXOBDB8xn9bRZaM.roa (raw, json)
Hash identifier:          k2KmiCWlT56Wj+euSTlIkmN+XH8XeW20r9MA87CsHOw=
Subject key identifier:   D9:10:43:74:F4:0B:8F:CF:9A:CD:73:81:0C:1F:31:9F:D6:D1:65:A3
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/2RBDdPQLj8-azXOBDB8xn9bRZaM.roa
Signing time:             Thu 15 Sep 2022 02:35:15 +0000
ROA not before:           Thu 15 Sep 2022 02:35:15 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24163
IP address blocks:        49.159.176.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5374 (0x14fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 15 02:35:15 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=D9104374F40B8FCF9ACD73810C1F319FD6D165A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:eb:1c:3d:93:9c:76:c4:e6:c9:dc:0b:53:75:
                    1c:c4:d6:86:1a:4c:8a:76:49:a5:54:92:3a:c7:1f:
                    20:e5:38:3b:1a:2a:c5:0c:a3:26:be:91:02:25:21:
                    3f:75:b6:05:7d:28:c5:29:93:5d:ba:dd:c0:40:cd:
                    86:33:db:95:c2:0b:9e:29:98:14:80:2d:3b:97:16:
                    a2:ea:55:df:3b:9b:12:52:29:d2:fe:f6:1a:52:26:
                    00:80:fa:87:e9:60:53:6d:48:6d:6f:25:c5:20:f8:
                    49:56:4d:6c:e9:18:cf:3c:d3:97:2c:2b:43:4d:7c:
                    e2:74:37:8b:ca:52:c4:d5:fe:8e:a9:6e:d3:a9:c3:
                    73:fd:f8:2f:38:5b:bd:30:2d:cd:5b:36:25:9d:f4:
                    c1:ef:bf:9e:78:24:20:a4:a9:6e:2c:a0:f0:08:f4:
                    d7:5e:3f:30:12:78:91:ad:eb:ed:59:e2:74:bf:7e:
                    41:9b:d8:45:b3:5f:80:34:e7:cb:39:b8:18:d9:da:
                    f3:b0:af:c8:10:6c:e7:4a:cb:7e:6d:fe:44:58:a6:
                    c2:2b:be:42:b1:47:fb:1d:ca:52:f0:6d:48:d8:3a:
                    a7:91:c9:18:32:ff:b2:7b:e9:08:cf:94:b5:6b:13:
                    8e:ed:61:84:3e:90:a2:90:99:42:8b:db:51:7f:69:
                    06:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:10:43:74:F4:0B:8F:CF:9A:CD:73:81:0C:1F:31:9F:D6:D1:65:A3
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/2RBDdPQLj8-azXOBDB8xn9bRZaM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.159.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9a:6d:3e:a1:44:5f:32:2c:66:5b:92:2d:9e:ae:d7:16:ef:47:
         1b:bc:f1:f0:29:42:32:39:b4:05:d6:8e:59:cf:b2:60:61:09:
         72:45:71:34:aa:d7:09:a5:8d:43:e4:7a:ae:a9:bb:eb:70:04:
         ca:10:57:e7:27:d2:2a:76:be:f7:39:6c:96:6d:3c:36:84:df:
         88:02:63:11:b8:b6:f8:18:f6:3b:30:e3:bb:88:8d:b3:8a:4e:
         ab:28:44:c6:e5:4d:e8:d2:a3:dc:f9:71:61:7e:ab:15:0f:8b:
         27:15:86:f0:db:70:c8:ba:a3:1f:dc:76:51:40:3b:13:ba:e2:
         71:a8:bb:e8:7f:be:2b:66:7f:d8:d3:dc:e1:44:fc:74:b7:53:
         1e:c7:4d:b8:31:1a:8b:40:3d:99:93:36:92:a9:7d:49:98:d0:
         2d:32:5a:3f:10:eb:23:ce:35:ca:de:bf:29:60:d7:ae:95:c1:
         9c:3e:17:57:f8:d5:c6:8f:a9:fa:05:8a:75:ab:03:2b:de:28:
         ff:b2:30:1c:35:4a:ce:03:ef:17:37:d9:6c:0d:8e:77:ba:54:
         2d:d9:64:98:ae:66:94:95:8b:3d:03:02:2b:7d:da:af:63:0a:
         b6:6e:00:69:74:8f:d5:dd:28:e4:9d:49:38:45:46:bc:7c:76:
         24:9e:9f:4d
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFP4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjA5MTUw
MjM1MTVaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEQ5MTA0Mzc0RjQwQjhG
Q0Y5QUNENzM4MTBDMUYzMTlGRDZEMTY1QTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDH6xw9k5x2xObJ3AtTdRzE1oYaTIp2SaVUkjrHHyDlODsaKsUM
oya+kQIlIT91tgV9KMUpk1263cBAzYYz25XCC54pmBSALTuXFqLqVd87mxJSKdL+
9hpSJgCA+ofpYFNtSG1vJcUg+ElWTWzpGM8805csK0NNfOJ0N4vKUsTV/o6pbtOp
w3P9+C84W70wLc1bNiWd9MHvv554JCCkqW4soPAI9NdePzASeJGt6+1Z4nS/fkGb
2EWzX4A058s5uBjZ2vOwr8gQbOdKy35t/kRYpsIrvkKxR/sdylLwbUjYOqeRyRgy
/7J76QjPlLVrE47tYYQ+kKKQmUKL21F/aQZRAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU2RBDdPQLj8+azXOBDB8xn9bRZaMwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzJSQkRkUFFMajgtYXpYT0JE
Qjh4bjliUlphTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIx
n7AwDQYJKoZIhvcNAQELBQADggEBAJptPqFEXzIsZluSLZ6u1xbvRxu88fApQjI5
tAXWjlnPsmBhCXJFcTSq1wmljUPkeq6pu+twBMoQV+cn0ip2vvc5bJZtPDaE34gC
YxG4tvgY9jsw47uIjbOKTqsoRMblTejSo9z5cWF+qxUPiycVhvDbcMi6ox/cdlFA
OxO64nGou+h/vitmf9jT3OFE/HS3Ux7HTbgxGotAPZmTNpKpfUmY0C0yWj8Q6yPO
Ncrevylg166VwZw+F1f41caPqfoFinWrAyveKP+yMBw1Ss4D7xc32WwNjne6VC3Z
ZJiuZpSViz0DAit92q9jCrZuAGl0j9XdKOSdSThFRrx8diSen00=
-----END CERTIFICATE-----