Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/QCGbJEB1Sqm4mdX3q9GmlIuH3m4.roa
File:                     QCGbJEB1Sqm4mdX3q9GmlIuH3m4.roa (raw, json)
Hash identifier:          jFxBJgAO9qW8ufPu8wqS37C0q0ZRSL25N3oZFyVY8NI=
Subject key identifier:   40:21:9B:24:40:75:4A:A9:B8:99:D5:F7:AB:D1:A6:94:8B:87:DE:6E
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1986
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/QCGbJEB1Sqm4mdX3q9GmlIuH3m4.roa
Signing time:             Sat 22 Oct 2022 06:06:38 +0000
ROA not before:           Sat 22 Oct 2022 06:06:38 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24165
IP address blocks:        122.254.48.0/21 maxlen: 21

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6534 (0x1986)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Oct 22 06:06:38 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=40219B2440754AA9B899D5F7ABD1A6948B87DE6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ec:45:41:1e:d4:ab:fe:f8:d5:4f:dd:97:fb:
                    5e:e0:ff:9a:c0:54:88:75:05:91:90:75:ed:7f:25:
                    ae:c6:33:0a:79:a2:1f:24:9a:c0:91:f5:8a:64:50:
                    8b:07:07:23:c2:c5:0d:1c:fa:6c:f0:b2:1c:9d:8c:
                    55:ec:63:40:f5:2d:14:22:22:f5:f9:03:df:a8:4a:
                    ee:36:19:dc:45:4e:5d:13:cf:64:8e:e5:cb:b3:16:
                    8e:a0:6f:c7:63:90:be:78:30:d8:dc:f3:81:f9:10:
                    f2:67:82:ea:14:dc:f2:fb:03:88:97:6a:9c:ed:7d:
                    34:86:64:ad:a7:c6:cd:f4:3e:49:7e:50:ac:1b:30:
                    a2:9d:2f:76:42:4e:d5:5c:de:e7:fb:fd:e0:e9:7f:
                    25:e6:53:23:64:8e:f4:c0:46:65:ad:f8:b6:7e:43:
                    f7:96:22:82:41:b9:69:ac:01:d0:81:33:88:d9:f1:
                    29:0c:a1:07:4c:01:bd:ff:31:e9:5b:d4:c1:47:8e:
                    bc:94:49:28:4c:05:d8:c7:29:36:06:5a:41:b9:f6:
                    76:90:4d:d6:88:37:cd:8c:a9:dc:92:f6:93:13:6c:
                    a0:ff:c5:1a:1e:d9:37:09:5e:08:55:f5:f2:96:57:
                    c6:af:0b:33:fd:95:ef:48:e1:1d:e0:e4:fe:c9:8a:
                    5a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:21:9B:24:40:75:4A:A9:B8:99:D5:F7:AB:D1:A6:94:8B:87:DE:6E
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/QCGbJEB1Sqm4mdX3q9GmlIuH3m4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.254.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0d:a0:8f:d7:62:cb:1f:3d:d0:15:99:bf:80:79:e3:19:fb:9d:
         48:6c:76:5e:13:f1:31:0a:56:59:09:12:ec:68:d5:8b:e2:09:
         bd:9f:00:bb:97:ce:11:97:61:4a:2d:5d:b1:a7:59:ae:b3:37:
         5a:f2:6f:c7:9c:06:dc:b4:8d:ff:12:05:f5:58:cb:72:68:a2:
         c9:a7:da:80:a8:c8:05:ef:76:ca:3a:bc:14:8c:8a:3b:71:de:
         74:32:e0:ed:3d:e6:1e:f9:73:10:00:7b:64:ca:ca:66:d0:9d:
         e4:8c:66:4e:ec:38:d8:65:88:a0:e4:c4:00:32:80:53:8a:36:
         c4:07:19:cf:f6:bd:12:b7:a3:a2:f1:dc:08:99:61:ef:a4:df:
         17:0f:79:8a:e0:55:90:8c:bd:13:33:a0:dd:d6:64:47:ed:da:
         63:de:2e:0a:24:13:1b:ca:00:d5:17:41:33:c6:a4:a6:ab:b1:
         ed:5d:91:cd:8a:9a:2f:6c:36:df:6a:6b:58:e3:1e:fa:ea:cf:
         fa:34:83:30:14:0d:14:e6:0f:b2:c6:43:75:a5:35:6e:b9:e6:
         50:af:63:73:03:ae:93:d1:7f:06:33:79:a9:e8:09:80:66:95:
         76:c6:2e:9a:31:20:36:ce:b5:e7:33:f5:fe:71:90:43:b2:9a:
         6a:37:77:19
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGYYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjEwMjIw
NjA2MzhaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDQwMjE5QjI0NDA3NTRB
QTlCODk5RDVGN0FCRDFBNjk0OEI4N0RFNkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDW7EVBHtSr/vjVT92X+17g/5rAVIh1BZGQde1/Ja7GMwp5oh8k
msCR9YpkUIsHByPCxQ0c+mzwshydjFXsY0D1LRQiIvX5A9+oSu42GdxFTl0Tz2SO
5cuzFo6gb8djkL54MNjc84H5EPJnguoU3PL7A4iXapztfTSGZK2nxs30Pkl+UKwb
MKKdL3ZCTtVc3uf7/eDpfyXmUyNkjvTARmWt+LZ+Q/eWIoJBuWmsAdCBM4jZ8SkM
oQdMAb3/Melb1MFHjryUSShMBdjHKTYGWkG59naQTdaIN82MqdyS9pMTbKD/xRoe
2TcJXghV9fKWV8avCzP9le9I4R3g5P7Jilo/AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUQCGbJEB1Sqm4mdX3q9GmlIuH3m4wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1FDR2JKRUIxU3FtNG1kWDNx
OUdtbEl1SDNtNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN6
/jAwDQYJKoZIhvcNAQELBQADggEBAA2gj9diyx890BWZv4B54xn7nUhsdl4T8TEK
VlkJEuxo1YviCb2fALuXzhGXYUotXbGnWa6zN1ryb8ecBty0jf8SBfVYy3Joosmn
2oCoyAXvdso6vBSMijtx3nQy4O095h75cxAAe2TKymbQneSMZk7sONhliKDkxAAy
gFOKNsQHGc/2vRK3o6Lx3AiZYe+k3xcPeYrgVZCMvRMzoN3WZEft2mPeLgokExvK
ANUXQTPGpKarse1dkc2Kmi9sNt9qa1jjHvrqz/o0gzAUDRTmD7LGQ3WlNW655lCv
Y3MDrpPRfwYzeanoCYBmlXbGLpoxIDbOtecz9f5xkEOymmo3dxk=
-----END CERTIFICATE-----