Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/EYyemcyRFKR2QlqhniBbSE2KZro.roa
File:                     EYyemcyRFKR2QlqhniBbSE2KZro.roa (raw, json)
Hash identifier:          bWTnGVk1ePQyGwcV0hNNPE83iXSxtiY72WwiZI31HN0=
Subject key identifier:   11:8C:9E:99:CC:91:14:A4:76:42:5A:A1:9E:20:5B:48:4D:8A:66:BA
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/EYyemcyRFKR2QlqhniBbSE2KZro.roa
Signing time:             Thu 15 Sep 2022 02:35:32 +0000
ROA not before:           Thu 15 Sep 2022 02:35:32 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24164
IP address blocks:        119.77.128.0/17 maxlen: 17

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5374 (0x14fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 15 02:35:32 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=118C9E99CC9114A476425AA19E205B484D8A66BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8d:c9:51:5f:36:09:44:b7:be:9a:07:4d:66:
                    d8:b4:dd:20:ff:4c:87:55:d1:3e:54:c3:20:10:e4:
                    65:45:6c:c4:8b:90:5c:25:7c:0c:7f:ab:2e:bd:7c:
                    c7:0c:a9:d1:80:19:64:76:b5:0c:11:91:26:03:12:
                    d7:35:ed:e1:e8:17:1e:d3:15:dd:97:0c:4d:22:63:
                    3d:6f:0b:7d:4a:4d:9c:85:92:6a:6d:87:67:0a:3e:
                    d3:ab:54:0a:89:25:ec:0b:b7:b7:1b:7a:3a:44:c1:
                    06:b7:01:b2:05:7d:0a:ae:2b:1a:b6:1e:d4:bd:58:
                    44:40:19:7b:70:2c:6d:4f:81:9e:8d:39:2b:8d:b9:
                    f7:64:5a:61:f9:db:54:cb:c2:3c:af:95:2a:62:3f:
                    67:8f:41:44:23:30:a6:48:2b:b7:1c:31:e5:b0:ac:
                    f2:f6:b1:ef:d8:b0:c0:13:e5:ef:91:a8:2f:f1:86:
                    61:25:b2:8c:6b:15:e4:61:28:13:22:77:d6:94:e0:
                    7b:c4:4d:00:97:a1:af:56:25:a9:c7:68:08:1d:e8:
                    a2:9b:b6:22:e0:a4:c5:cd:48:d4:6c:93:b4:00:79:
                    e7:bf:29:a5:85:e9:88:54:80:52:d2:88:0c:25:18:
                    ba:ed:c2:96:ae:56:26:b9:59:97:0c:ad:dd:15:00:
                    2f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:8C:9E:99:CC:91:14:A4:76:42:5A:A1:9E:20:5B:48:4D:8A:66:BA
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/EYyemcyRFKR2QlqhniBbSE2KZro.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.77.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         9c:d6:ac:13:af:83:18:a1:46:c0:d7:90:75:ee:41:11:1c:ba:
         ff:99:8b:e5:d2:81:f8:c6:37:f6:82:3a:c9:39:67:47:bf:2a:
         ee:83:0a:b2:c7:89:ee:51:9e:6f:15:a5:32:1d:75:4f:e4:f9:
         06:5f:ca:51:51:ac:2f:c4:d3:ae:af:24:af:cd:82:e2:76:a2:
         e5:3a:05:59:0f:a6:68:e7:e0:b8:67:1f:da:a7:dd:02:75:6e:
         66:fe:11:c5:57:47:18:a4:91:e8:8b:4a:87:aa:dd:a7:c3:a2:
         ec:35:f9:b1:86:b0:4c:ac:5b:40:57:63:b5:68:f2:2e:99:c8:
         a4:8c:f9:d6:5c:73:c6:bc:b4:60:fb:de:e1:66:6e:e1:aa:19:
         74:db:4a:55:35:08:09:eb:22:a2:8d:c0:2c:23:e1:0a:8b:16:
         42:fb:9c:ac:c9:53:e2:7f:b4:a3:27:34:21:aa:61:ab:d8:49:
         87:c0:96:45:4c:65:cd:32:0a:53:97:3e:40:5e:a4:45:2d:0c:
         64:4b:c8:a2:1d:cf:16:1e:1a:7a:58:e3:e6:7d:4a:96:49:1c:
         8d:da:4a:78:3d:6a:e4:7e:53:8f:19:a9:2f:0a:13:c2:74:1d:
         f8:89:98:6e:c1:25:30:e6:81:d0:72:67:db:e7:f0:8d:f7:14:
         cb:e3:a1:f6
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFP4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjA5MTUw
MjM1MzJaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDExOEM5RTk5Q0M5MTE0
QTQ3NjQyNUFBMTlFMjA1QjQ4NEQ4QTY2QkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCwjclRXzYJRLe+mgdNZti03SD/TIdV0T5UwyAQ5GVFbMSLkFwl
fAx/qy69fMcMqdGAGWR2tQwRkSYDEtc17eHoFx7TFd2XDE0iYz1vC31KTZyFkmpt
h2cKPtOrVAqJJewLt7cbejpEwQa3AbIFfQquKxq2HtS9WERAGXtwLG1PgZ6NOSuN
ufdkWmH521TLwjyvlSpiP2ePQUQjMKZIK7ccMeWwrPL2se/YsMAT5e+RqC/xhmEl
soxrFeRhKBMid9aU4HvETQCXoa9WJanHaAgd6KKbtiLgpMXNSNRsk7QAeee/KaWF
6YhUgFLSiAwlGLrtwpauVia5WZcMrd0VAC/9AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUEYyemcyRFKR2QlqhniBbSE2KZrowHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0VZeWVtY3lSRktSMlFscWhu
aUJiU0UyS1pyby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAd3
TYAwDQYJKoZIhvcNAQELBQADggEBAJzWrBOvgxihRsDXkHXuQREcuv+Zi+XSgfjG
N/aCOsk5Z0e/Ku6DCrLHie5Rnm8VpTIddU/k+QZfylFRrC/E066vJK/NguJ2ouU6
BVkPpmjn4LhnH9qn3QJ1bmb+EcVXRxikkeiLSoeq3afDouw1+bGGsEysW0BXY7Vo
8i6ZyKSM+dZcc8a8tGD73uFmbuGqGXTbSlU1CAnrIqKNwCwj4QqLFkL7nKzJU+J/
tKMnNCGqYavYSYfAlkVMZc0yClOXPkBepEUtDGRLyKIdzxYeGnpY4+Z9SpZJHI3a
Sng9auR+U48ZqS8KE8J0HfiJmG7BJTDmgdByZ9vn8I33FMvjofY=
-----END CERTIFICATE-----