Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/HH6B2-awNhukJwTtoPpfnfnN-kI.roa
File:                     HH6B2-awNhukJwTtoPpfnfnN-kI.roa (raw, json)
Hash identifier:          801SzkSmJxy4fjiTHbsRUg34xWkErmbwCnDEMfx32QU=
Subject key identifier:   1C:7E:81:DB:E6:B0:36:1B:A4:27:04:ED:A0:FA:5F:9D:F9:CD:FA:42
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/HH6B2-awNhukJwTtoPpfnfnN-kI.roa
Signing time:             Thu 15 Sep 2022 02:36:30 +0000
ROA not before:           Thu 15 Sep 2022 02:36:30 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24165
IP address blocks:        180.218.104.0/21 maxlen: 21

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5374 (0x14fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 15 02:36:30 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=1C7E81DBE6B0361BA42704EDA0FA5F9DF9CDFA42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:00:3f:6a:2b:66:d4:a7:7a:7c:90:e4:cb:08:
                    0a:9c:27:70:1b:00:ef:8f:54:32:c6:4d:58:c0:41:
                    24:34:1c:4d:94:bc:e2:e5:c5:ea:e7:a7:30:6d:dc:
                    0e:56:54:f5:26:b2:cf:99:77:6c:73:e3:38:50:b0:
                    e9:1d:6f:79:1e:91:21:fd:b4:2d:e1:0c:e8:53:5c:
                    0f:11:ff:b0:51:a6:e5:73:58:44:17:64:e1:9b:2a:
                    39:76:7d:8c:18:2b:61:39:18:45:28:9c:39:73:d3:
                    bc:e4:76:04:5a:6b:0e:99:5a:d4:ac:1d:d4:cb:00:
                    c1:84:23:c8:a2:48:45:ff:f7:f3:22:e6:75:2a:a9:
                    6a:5d:b7:2c:37:7f:29:44:cc:22:5a:31:17:b8:1a:
                    9d:0b:d2:a3:17:53:3f:cf:59:e6:30:e8:c1:d2:26:
                    76:8c:9a:59:a7:98:f3:48:d4:3f:fd:e2:b5:28:15:
                    c7:33:6d:30:d6:b3:ab:9e:e0:1e:e7:69:ab:8c:8c:
                    9d:25:ac:17:a4:b6:80:f2:b1:3d:4b:e8:ce:70:5e:
                    7d:4d:82:de:55:85:9d:6c:99:18:55:8d:5f:5f:d4:
                    39:d9:84:53:d5:c5:30:1e:24:c3:9e:3b:e4:dc:4e:
                    a9:fd:e4:79:19:dc:91:7f:c3:f8:7d:f0:5e:3c:af:
                    d8:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:7E:81:DB:E6:B0:36:1B:A4:27:04:ED:A0:FA:5F:9D:F9:CD:FA:42
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/HH6B2-awNhukJwTtoPpfnfnN-kI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.104.0/21

    Signature Algorithm: sha256WithRSAEncryption
         83:77:54:90:12:c0:cd:39:23:67:58:c0:5d:63:2b:d0:15:7b:
         b2:d4:d0:1b:0d:0e:29:ec:5b:46:9e:37:e5:a3:d6:42:65:99:
         9f:02:a6:27:c9:bb:88:a7:51:46:2a:03:4e:cd:e1:2c:aa:3d:
         82:95:d9:cc:13:60:ae:4f:81:90:74:8a:3e:d0:36:ef:c1:e7:
         9e:ac:5e:f1:a8:38:c9:7c:1c:ae:2f:ba:2b:e9:bd:73:4a:fc:
         85:e3:7b:c5:ca:e5:d5:19:37:fc:66:94:ae:bb:5b:8f:39:48:
         4c:f1:79:e9:ae:27:c4:ea:76:5e:62:d7:f9:02:b8:55:af:26:
         df:e4:f7:90:df:6c:e1:e9:b7:8b:22:19:06:d5:91:86:cf:12:
         12:8a:64:8a:2e:6b:03:f7:dc:31:0d:2c:7d:a1:ad:a3:64:78:
         60:5c:fd:02:44:6a:82:6f:d1:bb:eb:bc:c5:07:26:e9:4c:7a:
         26:7f:1c:07:e6:b5:e5:47:64:42:0d:99:d0:5e:f4:94:4d:56:
         22:f9:3e:78:a6:96:24:92:6b:a4:d2:0a:92:12:e2:56:0c:84:
         8d:e2:68:68:5f:07:f2:20:e5:20:34:22:1a:28:93:0e:42:81:
         f9:8d:db:d1:d2:ae:b4:d7:d6:d3:e6:da:a8:5c:4f:2e:b0:24:
         cb:34:0e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----