Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/GYcfcqCvc1USQ6cJMATqw3XBfLY.roa
File:                     GYcfcqCvc1USQ6cJMATqw3XBfLY.roa (raw, json)
Hash identifier:          6G05pjugFHAhsDZ9mYeXpZaiIeiToyO646AWDvMQHk0=
Subject key identifier:   19:87:1F:72:A0:AF:73:55:12:43:A7:09:30:04:EA:C3:75:C1:7C:B6
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       19A1
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/GYcfcqCvc1USQ6cJMATqw3XBfLY.roa
Signing time:             Sat 22 Oct 2022 06:06:45 +0000
ROA not before:           Sat 22 Oct 2022 06:06:45 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24164
IP address blocks:        49.158.216.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6561 (0x19a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Oct 22 06:06:45 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=19871F72A0AF73551243A7093004EAC375C17CB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5f:07:ea:b5:a3:7b:ff:ad:c4:24:86:f3:04:
                    7e:f9:41:e8:01:a6:94:08:18:7b:c0:12:41:05:d4:
                    e6:9d:ef:48:49:c1:ae:b7:92:b0:50:95:6a:4f:29:
                    ba:71:25:4a:b3:74:ed:15:ca:67:eb:f4:c0:18:f3:
                    cc:09:83:dc:dd:d7:f5:fa:23:56:de:26:0c:cd:09:
                    cd:55:70:4d:2d:8d:93:f1:66:8a:44:31:1e:8f:a1:
                    a1:3d:f0:9d:00:c8:0f:cd:71:53:61:cc:bf:9d:7e:
                    b5:05:8a:76:0d:40:ad:c0:e4:dc:d7:1b:c7:ba:d4:
                    31:2b:3d:13:3c:93:e7:b5:9f:16:f9:35:83:d6:61:
                    74:8f:37:e5:e0:af:47:44:12:23:a5:d0:65:b0:db:
                    44:18:db:92:b3:a3:2c:7e:9a:a6:cb:60:87:c0:58:
                    6f:13:6b:15:28:a7:4b:0d:5e:e3:9a:24:a8:57:32:
                    aa:fe:ba:59:9a:9b:03:ac:bb:46:4b:9b:97:69:0e:
                    86:8e:9d:f5:40:2e:52:89:18:2d:3f:01:38:e4:c1:
                    59:63:c1:dd:8f:5d:ef:f3:36:7a:86:89:d4:f9:c4:
                    2f:9d:a3:86:e2:c6:d5:55:b4:9c:ee:3b:64:f3:92:
                    31:0b:18:b5:17:5e:8d:3b:5c:64:e3:b3:9f:9f:71:
                    a6:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:87:1F:72:A0:AF:73:55:12:43:A7:09:30:04:EA:C3:75:C1:7C:B6
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/GYcfcqCvc1USQ6cJMATqw3XBfLY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.158.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:9c:1b:98:75:a8:7a:bd:27:54:07:99:0d:89:b2:d6:11:7a:
         5f:dc:9d:f6:b3:01:17:0d:15:f7:eb:98:2a:18:6a:fb:a1:76:
         97:70:15:aa:d2:c6:0e:e6:2e:54:99:c9:52:e9:62:d7:a9:16:
         1f:d9:6d:3f:bf:7b:6c:84:17:9f:50:12:ea:73:6b:dd:ce:9a:
         d2:20:a2:6e:01:4c:10:ac:6f:7d:fb:73:89:d9:38:01:97:0f:
         50:f1:2b:53:e2:3b:33:46:dc:50:57:77:a2:49:59:d4:73:22:
         7d:be:ce:76:97:a3:95:e6:e2:78:79:c9:4e:b8:a8:b3:28:8d:
         6d:79:79:6a:ae:59:ed:eb:18:ac:8f:41:ca:0e:92:7e:2a:32:
         5d:bc:a9:05:c7:13:be:04:97:fd:0e:6b:36:b3:d6:36:00:d0:
         7e:af:3d:1f:cb:4d:a8:98:aa:0f:d0:81:38:c9:c1:1c:fe:16:
         54:43:22:c3:07:94:39:dd:30:bc:0c:a0:fc:4a:d1:45:f5:88:
         a9:cb:08:86:02:81:5a:63:53:b6:dd:f3:d1:3a:f4:44:53:80:
         21:c2:df:fc:36:ac:af:28:2f:39:17:71:6a:ea:92:2d:cb:93:
         1c:e3:e8:aa:15:f2:0c:a7:e7:12:6d:a1:a0:2c:4b:42:1c:9b:
         b2:cc:5d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----