Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7sgXDEvbvmeu-1fcR4jAacNvlA4.roa
File:                     7sgXDEvbvmeu-1fcR4jAacNvlA4.roa (raw, json)
Hash identifier:          RcmxVEiRjl9PsrO+reZt8W/qn9ejYdMi4rSYByXhx+Y=
Subject key identifier:   EE:C8:17:0C:4B:DB:BE:67:AE:FB:57:DC:47:88:C0:69:C3:6F:94:0E
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7sgXDEvbvmeu-1fcR4jAacNvlA4.roa
Signing time:             Thu 15 Sep 2022 02:36:14 +0000
ROA not before:           Thu 15 Sep 2022 02:36:14 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24164
IP address blocks:        49.158.100.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5374 (0x14fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 15 02:36:14 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=EEC8170C4BDBBE67AEFB57DC4788C069C36F940E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:c4:8c:f2:85:a9:90:7f:ca:84:aa:04:e4:5c:
                    d3:be:70:0b:01:7b:a4:fb:e4:c2:31:6d:4a:57:cd:
                    fa:3f:81:77:1e:64:19:95:3e:a8:3a:22:ef:03:be:
                    e3:2e:52:7e:cf:1a:c5:f1:bc:c5:1d:3f:fe:b2:67:
                    23:4c:38:3a:54:93:ae:ca:f5:a7:37:27:80:63:1e:
                    1e:45:ce:69:85:9c:83:77:d1:f8:ac:29:e9:48:44:
                    13:fc:25:81:e0:ff:f1:7d:2f:63:9e:53:c8:3c:98:
                    92:41:24:45:cc:90:15:51:41:87:43:e2:d1:04:30:
                    c8:d1:2e:7a:cf:13:a8:20:4f:31:4e:c4:92:19:41:
                    df:1c:43:d5:f9:83:07:af:61:15:f7:ec:6c:2b:1c:
                    41:33:3e:a0:96:cd:4f:f7:bc:92:cd:de:6d:ad:28:
                    96:5a:60:ba:0e:16:b2:18:25:3b:79:c9:12:43:32:
                    94:26:62:4b:2c:f9:88:40:0f:76:e1:cc:7c:6f:65:
                    d4:97:80:16:29:de:78:ff:33:ab:58:af:c7:ba:fe:
                    5a:f1:ab:b1:70:24:d9:c6:62:7c:f4:3a:9b:c2:0c:
                    91:98:f1:fa:1f:1a:86:0d:37:2d:1a:f7:9d:85:b5:
                    0d:af:60:85:d0:18:16:4e:9e:85:38:c4:49:25:f4:
                    77:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:C8:17:0C:4B:DB:BE:67:AE:FB:57:DC:47:88:C0:69:C3:6F:94:0E
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7sgXDEvbvmeu-1fcR4jAacNvlA4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.158.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:69:9d:c9:13:12:c3:9e:ac:78:8b:89:e4:22:62:75:ab:1c:
         be:06:b2:0c:69:fe:0c:ad:7c:74:88:78:b8:1c:90:07:31:55:
         99:2a:37:d7:3c:ee:68:d3:58:d0:2d:e9:61:da:08:b7:6a:b5:
         d1:eb:96:ab:1d:e1:cb:43:e1:19:d1:83:ad:9d:b8:55:76:1b:
         a8:f4:74:64:7c:0e:72:0e:0b:a8:e7:d1:3e:6f:e4:5a:87:a6:
         d7:49:f3:1e:60:c6:ae:92:e3:56:83:99:23:0d:52:1f:36:52:
         1d:63:bd:06:d3:b7:5b:01:9e:19:23:ef:bb:47:1b:e0:e5:0d:
         3f:7d:ca:f5:fe:39:bd:ed:4e:e2:4e:d8:25:49:16:bf:d6:bf:
         a5:f2:2f:e1:ee:42:08:38:11:0d:d9:73:fd:c8:85:6d:84:02:
         a6:d9:48:25:eb:99:51:dd:f4:d5:bb:c6:59:4d:c4:d5:74:7a:
         09:a7:e7:5b:50:62:e9:8b:bf:3a:5d:f7:cd:fb:7b:a1:f5:8a:
         41:a5:37:45:b8:7d:f9:ea:9a:a9:c2:c6:3a:0a:9c:6f:36:59:
         22:98:ee:ea:64:0b:eb:38:32:68:f5:1d:39:a5:91:70:8e:fa:
         a1:66:55:f4:e1:36:26:f3:7b:f4:bd:fb:ab:d5:66:ef:01:77:
         93:1d:5f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----