Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ID0bPXqgbLu4Gq1EGlj44B2B2tM.roa
File:                     ID0bPXqgbLu4Gq1EGlj44B2B2tM.roa (raw, json)
Hash identifier:          UWXebZP5CBx23tZ69rSfmesGqzkTVNFh+kv1a3Y1PfY=
Subject key identifier:   20:3D:1B:3D:7A:A0:6C:BB:B8:1A:AD:44:1A:58:F8:E0:1D:81:DA:D3
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1976
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ID0bPXqgbLu4Gq1EGlj44B2B2tM.roa
Signing time:             Sat 22 Oct 2022 06:06:33 +0000
ROA not before:           Sat 22 Oct 2022 06:06:33 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24164
IP address blocks:        49.158.0.0/21 maxlen: 21

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6518 (0x1976)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Oct 22 06:06:33 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=203D1B3D7AA06CBBB81AAD441A58F8E01D81DAD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a8:7d:e7:95:d4:17:37:01:70:4d:1d:b1:0d:
                    b7:0a:ee:84:97:3c:ab:fe:83:5f:1c:24:c7:ff:1f:
                    4d:b7:9a:f9:29:82:2e:ea:3b:91:f0:83:19:af:f9:
                    0c:6b:13:d6:be:b1:2f:b3:96:3e:03:d2:a5:fe:37:
                    2c:16:52:fd:8a:e0:b1:d3:33:e3:10:dd:73:44:94:
                    d0:00:c6:f9:fa:bc:ac:d9:cd:85:98:14:e1:b3:ee:
                    0c:05:b7:71:37:f4:e8:7c:1b:6f:66:d8:c7:c4:bf:
                    6a:e5:15:89:1f:89:95:b8:9e:a0:d0:71:1c:e9:35:
                    f1:08:4b:02:78:e8:a0:c6:70:21:52:8f:7e:6e:7b:
                    8d:66:30:60:10:09:53:5d:a3:8d:d2:41:67:51:25:
                    d8:55:77:91:b9:ef:b6:62:cf:0d:47:34:39:0c:5a:
                    13:65:45:95:86:c0:33:91:b7:1f:3c:02:ad:a7:b8:
                    dc:e6:32:65:06:de:69:6e:a9:07:4c:dd:de:cd:f5:
                    cc:7d:11:72:1d:4e:65:eb:6f:24:aa:fb:3c:72:b1:
                    b8:38:0b:e5:eb:f7:36:55:a9:1a:8d:37:80:df:4e:
                    13:6e:8f:ad:39:74:23:b0:e9:fd:24:d4:93:7b:e4:
                    da:ae:de:b9:f0:1d:0d:1d:46:96:da:47:6b:cf:31:
                    0f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:3D:1B:3D:7A:A0:6C:BB:B8:1A:AD:44:1A:58:F8:E0:1D:81:DA:D3
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ID0bPXqgbLu4Gq1EGlj44B2B2tM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.158.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8f:98:f7:2d:9b:92:9a:cf:cf:75:8b:3a:e3:3d:40:d8:2d:4a:
         1a:db:e1:fb:30:53:43:91:1f:78:17:9c:93:62:49:d6:6b:c3:
         57:36:e5:47:25:ea:13:52:b9:71:bf:68:45:8b:62:c4:88:ec:
         d9:6b:10:e4:ff:c7:22:22:c1:a4:0a:f2:ce:e0:53:96:c0:0f:
         ba:80:4b:b7:e1:a3:a8:dc:93:a0:d9:83:42:33:db:f1:7b:74:
         d7:30:b2:bc:ad:66:bc:87:be:a7:6f:e4:bd:0e:e4:4b:75:42:
         1a:fe:c4:d3:7d:de:12:b3:80:c1:63:02:28:ee:81:b5:d1:9a:
         db:ee:63:4b:fc:e1:30:c5:82:bc:48:89:f1:f1:a1:ae:e4:94:
         bb:2d:d6:bf:82:f1:f9:56:df:17:47:bc:a3:dc:aa:dd:25:95:
         6c:fb:fb:24:d0:14:e0:dc:4c:ed:a9:7b:09:6b:26:00:c1:ba:
         38:f8:d4:b1:d9:07:98:ea:e6:c8:17:81:02:7a:bc:be:92:3d:
         39:29:3f:a8:d0:4d:42:ab:5f:c1:3c:3d:1d:d1:17:7c:1f:77:
         f0:01:a6:2c:a5:52:8a:d9:c6:fb:76:8f:7b:e2:9d:c7:91:a1:
         eb:a5:d0:28:8a:f2:70:f4:29:8d:61:6f:0e:77:f9:fe:ae:1a:
         c4:9c:f9:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----