Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/F-aoU_dHPFbH22xROrScQrO2LhE.roa
File:                     F-aoU_dHPFbH22xROrScQrO2LhE.roa (raw, json)
Hash identifier:          z7DBYBFvlX7HvfKaKOPgqS0QKX+f95mYsvIhRqqY340=
Subject key identifier:   17:E6:A8:53:F7:47:3C:56:C7:DB:6C:51:3A:B4:9C:42:B3:B6:2E:11
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       151A
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/F-aoU_dHPFbH22xROrScQrO2LhE.roa
Signing time:             Fri 21 Oct 2022 08:11:16 +0000
ROA not before:           Fri 21 Oct 2022 08:11:16 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24164
IP address blocks:        122.100.68.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5402 (0x151a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Oct 21 08:11:16 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=17E6A853F7473C56C7DB6C513AB49C42B3B62E11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:93:ca:86:d7:dc:e5:16:b0:b2:66:11:17:86:
                    24:d2:c0:a5:31:78:f5:35:55:d0:5d:4b:e4:b5:16:
                    74:7b:6d:bf:37:76:66:da:6d:01:3c:bc:d6:b3:59:
                    2e:d5:36:f6:32:f6:04:25:a9:b4:9c:88:32:04:ee:
                    40:59:21:95:f9:ad:9f:f6:54:89:fa:d6:27:77:bd:
                    7c:fb:ab:9a:19:d6:13:f8:f5:3d:60:e4:0e:2a:34:
                    28:4c:6c:b0:65:d4:9c:d4:fd:79:67:cd:21:4a:6a:
                    57:e9:13:99:a5:37:59:d2:b4:b1:f8:15:3b:7b:31:
                    e6:33:b0:2d:8f:81:05:0e:21:30:bf:3e:56:0c:77:
                    29:b7:65:1f:42:e0:8e:f0:c5:d6:52:56:b7:59:a7:
                    01:4e:9c:c0:17:5b:2d:d0:54:d7:0e:90:39:64:c1:
                    3c:7e:a7:1c:a9:cb:fb:d1:9d:ba:1a:17:94:87:ac:
                    f8:f9:f5:5c:cd:9d:55:c0:5b:99:61:ca:b1:d5:ac:
                    3f:5b:51:db:ce:e2:fd:ad:e5:13:31:67:25:7a:61:
                    bc:4a:ea:aa:7a:5b:75:76:84:c0:bb:4e:6b:a8:1f:
                    c0:c9:f3:8a:2d:db:38:fe:56:e2:03:af:a8:92:3d:
                    43:30:e5:f2:58:56:b9:7d:a4:8d:73:d2:0c:62:03:
                    61:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:E6:A8:53:F7:47:3C:56:C7:DB:6C:51:3A:B4:9C:42:B3:B6:2E:11
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/F-aoU_dHPFbH22xROrScQrO2LhE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.100.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:e9:d3:34:3f:04:dd:9d:9b:f4:a7:79:2f:ac:b9:e2:cf:3b:
         e0:f3:c0:bf:99:38:10:fc:71:bd:9e:78:ff:95:d3:f2:76:f2:
         86:e6:51:bf:6b:ee:15:68:1e:fb:6c:af:10:73:20:06:77:c3:
         5d:5e:dc:40:ab:9f:c7:7e:f7:42:b3:9e:0b:2d:48:8f:67:71:
         c6:eb:d7:70:20:d9:a1:d3:1b:27:5d:51:44:0d:90:69:c0:f2:
         5f:da:3c:51:36:97:8a:43:d6:5f:67:e0:b8:2e:81:9d:5a:ea:
         32:60:de:fd:20:a0:4e:78:15:1f:54:33:78:c2:60:e9:d5:1d:
         64:75:cd:83:26:bc:34:ee:b2:d8:15:04:d0:af:00:c4:de:c4:
         60:8f:b0:f0:9d:b0:81:cf:d3:ec:56:b4:5f:8b:bc:04:a9:96:
         3e:4a:16:71:44:da:af:1d:1f:7e:bd:fe:ee:bc:f1:32:2c:f5:
         bf:a6:d3:17:b8:8f:5e:ed:ba:2f:64:d1:1d:c2:81:6f:21:c4:
         72:46:58:d3:07:81:d1:67:3d:bf:88:f6:24:72:f1:b9:75:d5:
         51:76:39:ca:b7:be:06:1a:91:96:17:d9:09:2a:f1:fe:c1:a8:
         c7:9d:0e:ba:75:b3:ce:2f:37:47:fd:47:48:fa:83:1b:ae:4d:
         78:f6:a7:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----