Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/36E0SPdp75J32qgzVd53tr_c-Qo.roa
File:                     36E0SPdp75J32qgzVd53tr_c-Qo.roa (raw, json)
Hash identifier:          r1MOh7cnNFTqa5Iehb0DqHuc6k0GRpP+vm3T/qGmciA=
Subject key identifier:   DF:A1:34:48:F7:69:EF:92:77:DA:A8:33:55:DE:77:B6:BF:DC:F9:0A
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1936
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/36E0SPdp75J32qgzVd53tr_c-Qo.roa
Signing time:             Sat 22 Oct 2022 06:06:14 +0000
ROA not before:           Sat 22 Oct 2022 06:06:14 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24165
IP address blocks:        124.6.8.0/21 maxlen: 21

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6454 (0x1936)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Oct 22 06:06:14 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=DFA13448F769EF9277DAA83355DE77B6BFDCF90A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8f:2a:2e:e3:57:78:f5:aa:14:c0:bc:07:14:
                    e7:87:77:91:27:07:43:20:a1:b3:92:33:77:da:c9:
                    7a:9d:84:bd:cd:59:56:2f:a0:a5:05:ab:b1:ea:33:
                    6a:c2:40:57:95:a2:4e:f5:ed:10:13:1e:47:96:43:
                    3d:9a:58:64:f0:a1:01:65:4b:9f:b0:89:00:43:21:
                    4e:1d:cc:f2:b5:60:78:bc:f1:4e:27:9b:09:dd:7b:
                    11:d2:74:f4:a1:ae:ea:33:bd:83:2d:3b:aa:e2:27:
                    8e:e2:f3:b6:05:f3:89:ab:0d:29:cd:67:da:66:7a:
                    5d:c2:b5:21:aa:58:ef:c3:6c:e9:1e:0e:5c:fb:52:
                    4c:f1:9e:c2:1b:d9:f3:d5:b2:ea:76:13:1f:84:1e:
                    f9:13:9c:60:0c:47:05:1c:26:cf:f1:f6:12:b9:19:
                    58:f4:01:cf:5d:9d:26:78:7b:bf:ef:af:3a:ac:a2:
                    0f:b6:4c:ec:41:09:62:ef:81:c2:f5:f5:61:b6:35:
                    73:93:42:40:72:19:f2:18:8b:58:5e:b5:7f:01:fe:
                    2e:f4:d2:d6:5e:f1:75:e1:5d:30:60:dc:b9:90:2f:
                    e9:b5:08:6d:f7:5d:c1:15:e7:36:df:ec:1c:29:99:
                    30:ed:cc:79:b7:5b:79:b6:a9:6c:dd:77:3c:3d:d2:
                    1b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:A1:34:48:F7:69:EF:92:77:DA:A8:33:55:DE:77:B6:BF:DC:F9:0A
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/36E0SPdp75J32qgzVd53tr_c-Qo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.6.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6b:cb:29:b1:95:22:37:bd:03:73:7f:53:33:36:eb:f2:b7:2b:
         d1:22:1c:19:d1:c8:42:ed:16:89:3c:c9:50:29:d9:fc:11:97:
         71:ba:55:43:bd:ee:d3:16:fc:2f:9c:ec:39:8a:4e:fe:0e:69:
         70:ad:8e:70:76:0b:b1:6b:44:b2:54:6b:d2:82:a1:48:9a:af:
         f6:f6:32:b0:14:df:42:bf:4b:18:1f:00:26:66:15:1e:c9:93:
         e9:12:64:3b:47:a6:c8:18:72:40:e7:58:8f:04:1f:70:a7:9b:
         be:d2:1d:5b:b8:3e:a3:7e:07:4f:05:eb:ca:ef:6f:3a:d9:7e:
         23:95:a5:c0:4a:5e:ed:4d:ee:99:b9:b3:c7:46:62:e4:d3:eb:
         94:64:bc:49:3c:d6:8f:91:54:ad:c8:ba:b0:1c:ea:4c:81:e9:
         4f:6e:59:f8:be:a2:37:6a:3b:d7:94:91:90:12:7c:ae:f3:23:
         2a:4a:6d:81:94:e0:7c:69:22:7c:b5:e7:75:69:be:3b:e5:93:
         9a:2f:57:11:52:f9:38:8b:2b:3a:67:e6:b8:1f:85:15:be:74:
         e2:41:d9:b1:3c:12:2b:29:f2:65:a7:06:f9:25:eb:ff:0c:a3:
         f2:84:a6:92:00:60:af:75:78:9e:2c:db:b5:d2:43:03:1f:42:
         9a:f7:69:75
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGTYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjEwMjIw
NjA2MTRaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKERGQTEzNDQ4Rjc2OUVG
OTI3N0RBQTgzMzU1REU3N0I2QkZEQ0Y5MEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDAjyou41d49aoUwLwHFOeHd5EnB0MgobOSM3fayXqdhL3NWVYv
oKUFq7HqM2rCQFeVok717RATHkeWQz2aWGTwoQFlS5+wiQBDIU4dzPK1YHi88U4n
mwndexHSdPShruozvYMtO6riJ47i87YF84mrDSnNZ9pmel3CtSGqWO/DbOkeDlz7
UkzxnsIb2fPVsup2Ex+EHvkTnGAMRwUcJs/x9hK5GVj0Ac9dnSZ4e7/vrzqsog+2
TOxBCWLvgcL19WG2NXOTQkByGfIYi1hetX8B/i700tZe8XXhXTBg3LmQL+m1CG33
XcEV5zbf7BwpmTDtzHm3W3m2qWzddzw90huhAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU36E0SPdp75J32qgzVd53tr/c+QowHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzM2RTBTUGRwNzVKMzJxZ3pW
ZDUzdHJfYy1Rby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN8
BggwDQYJKoZIhvcNAQELBQADggEBAGvLKbGVIje9A3N/UzM26/K3K9EiHBnRyELt
Fok8yVAp2fwRl3G6VUO97tMW/C+c7DmKTv4OaXCtjnB2C7FrRLJUa9KCoUiar/b2
MrAU30K/SxgfACZmFR7Jk+kSZDtHpsgYckDnWI8EH3Cnm77SHVu4PqN+B08F68rv
bzrZfiOVpcBKXu1N7pm5s8dGYuTT65RkvEk81o+RVK3IurAc6kyB6U9uWfi+ojdq
O9eUkZASfK7zIypKbYGU4HxpIny153Vpvjvlk5ovVxFS+TiLKzpn5rgfhRW+dOJB
2bE8Eisp8mWnBvkl6/8Mo/KEppIAYK91eJ4s27XSQwMfQpr3aXU=
-----END CERTIFICATE-----