Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/DIE1XZvURcSToW2xcshZOn2WaPc.roa
File:                     DIE1XZvURcSToW2xcshZOn2WaPc.roa (raw, json)
Hash identifier:          0XBNOKcSjX56UF/6OuCpAjBJj0gOM1WYXQF/zWx4pI0=
Subject key identifier:   0C:81:35:5D:9B:D4:45:C4:93:A1:6D:B1:72:C8:59:3A:7D:96:68:F7
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       18D3
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/DIE1XZvURcSToW2xcshZOn2WaPc.roa
Signing time:             Sat 22 Oct 2022 06:05:46 +0000
ROA not before:           Sat 22 Oct 2022 06:05:46 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24163
IP address blocks:        119.77.140.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6355 (0x18d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Oct 22 06:05:46 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=0C81355D9BD445C493A16DB172C8593A7D9668F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:26:b8:43:2d:c5:f5:ff:f1:d1:49:b8:f7:5a:
                    9d:85:18:b9:f3:b1:6f:47:36:86:37:63:77:b6:df:
                    22:b1:62:ca:ec:51:6d:f5:f8:57:3f:c1:7a:6f:4d:
                    f4:ae:d7:74:ee:8f:ac:57:4a:4d:1e:9c:40:cf:a4:
                    1d:d9:e3:6a:41:72:67:7c:b9:1e:0d:59:a4:14:6e:
                    bf:66:f1:bd:96:ce:f3:d1:a8:b9:87:ad:f2:48:1d:
                    77:7b:29:4b:5e:1d:dd:88:5e:20:70:3e:01:04:e4:
                    40:d0:e3:79:73:cf:53:74:69:aa:1b:73:82:f3:19:
                    2f:41:33:d8:41:26:75:05:c0:f2:c2:4f:52:a8:a2:
                    58:3e:54:74:80:c3:34:58:05:fb:56:51:e4:c4:9b:
                    f3:2d:04:d5:1f:3b:a3:eb:05:55:b3:97:16:49:12:
                    0b:f2:bd:61:16:bf:12:6f:da:69:fe:91:87:a2:16:
                    a1:a7:50:c0:3b:ba:80:7d:37:50:21:f7:cf:e0:a7:
                    dc:1e:e5:0e:e9:ac:7f:86:68:3b:d7:5d:46:31:2e:
                    84:f4:c3:18:2b:36:da:da:7c:1c:f4:1f:47:69:b3:
                    56:54:24:b6:ba:4c:b9:ea:ea:28:32:fc:70:80:49:
                    31:16:1c:eb:e9:1b:43:f6:4d:ab:7a:41:07:76:3b:
                    39:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:81:35:5D:9B:D4:45:C4:93:A1:6D:B1:72:C8:59:3A:7D:96:68:F7
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/DIE1XZvURcSToW2xcshZOn2WaPc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.77.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:23:2c:49:99:88:8e:77:bd:4d:cb:38:52:02:b8:2c:45:46:
         35:18:8f:e9:53:52:de:96:a6:b6:1b:cb:54:33:b1:ae:21:27:
         c8:51:dc:74:e9:c2:1d:09:a3:92:b3:4c:39:05:34:74:fd:33:
         ab:18:8a:ce:0b:58:c4:81:d5:a2:d6:b7:aa:8f:20:0b:24:fc:
         c2:03:2d:4c:b2:23:c5:59:16:28:29:b2:e1:ba:20:27:cf:63:
         04:e4:3f:e9:6e:8f:43:7b:09:1e:b2:ba:52:e1:d9:2d:df:e8:
         2a:42:b6:d1:a1:d4:e9:42:5a:16:a6:39:8f:83:c8:f4:c9:3b:
         3e:6b:a7:c4:3c:3a:bb:cb:ee:ca:d8:9f:0f:58:2c:c5:b5:fb:
         05:29:bd:14:db:2f:a3:f7:bb:5e:5e:cd:33:30:9a:8d:b0:72:
         50:3e:89:af:24:51:a2:f1:48:71:f1:17:46:b3:04:5d:26:a1:
         0d:b9:33:99:db:ef:92:f4:1f:45:78:2d:a0:b4:be:f6:18:28:
         25:c1:30:94:47:fb:bc:97:28:a7:3c:bb:ff:97:5e:d6:93:52:
         75:90:1f:b4:fc:c1:81:ed:9a:8e:09:6e:31:4f:87:ef:7c:73:
         3c:2a:bb:6d:b3:9a:b0:15:35:a2:f6:37:bc:9a:ba:92:99:13:
         bf:c0:5a:c0
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGNMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjEwMjIw
NjA1NDZaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDBDODEzNTVEOUJENDQ1
QzQ5M0ExNkRCMTcyQzg1OTNBN0Q5NjY4RjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDBJrhDLcX1//HRSbj3Wp2FGLnzsW9HNoY3Y3e23yKxYsrsUW31
+Fc/wXpvTfSu13Tuj6xXSk0enEDPpB3Z42pBcmd8uR4NWaQUbr9m8b2WzvPRqLmH
rfJIHXd7KUteHd2IXiBwPgEE5EDQ43lzz1N0aaobc4LzGS9BM9hBJnUFwPLCT1Ko
olg+VHSAwzRYBftWUeTEm/MtBNUfO6PrBVWzlxZJEgvyvWEWvxJv2mn+kYeiFqGn
UMA7uoB9N1Ah98/gp9we5Q7prH+GaDvXXUYxLoT0wxgrNtrafBz0H0dps1ZUJLa6
TLnq6igy/HCASTEWHOvpG0P2Tat6QQd2OznlAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUDIE1XZvURcSToW2xcshZOn2WaPcwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0RJRTFYWnZVUmNTVG9XMnhj
c2haT24yV2FQYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ3
TYwwDQYJKoZIhvcNAQELBQADggEBABgjLEmZiI53vU3LOFICuCxFRjUYj+lTUt6W
prYby1Qzsa4hJ8hR3HTpwh0Jo5KzTDkFNHT9M6sYis4LWMSB1aLWt6qPIAsk/MID
LUyyI8VZFigpsuG6ICfPYwTkP+luj0N7CR6yulLh2S3f6CpCttGh1OlCWhamOY+D
yPTJOz5rp8Q8OrvL7srYnw9YLMW1+wUpvRTbL6P3u15ezTMwmo2wclA+ia8kUaLx
SHHxF0azBF0moQ25M5nb75L0H0V4LaC0vvYYKCXBMJRH+7yXKKc8u/+XXtaTUnWQ
H7T8wYHtmo4JbjFPh+98czwqu22zmrAVNaL2N7yaupKZE7/AWsA=
-----END CERTIFICATE-----