Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/S0WzsvglOzfaBh3QipAHVaBHoUk.roa
File:                     S0WzsvglOzfaBh3QipAHVaBHoUk.roa (raw, json)
Hash identifier:          vJfv5KjRqkhoW6PrJhlVSX4Vv1xPDXUnQOjj1GKXWy8=
Subject key identifier:   4B:45:B3:B2:F8:25:3B:37:DA:06:1D:D0:8A:90:07:55:A0:47:A1:49
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/S0WzsvglOzfaBh3QipAHVaBHoUk.roa
Signing time:             Thu 15 Sep 2022 02:36:21 +0000
ROA not before:           Thu 15 Sep 2022 02:36:21 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24165
IP address blocks:        122.100.96.0/21 maxlen: 21

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5374 (0x14fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 15 02:36:21 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=4B45B3B2F8253B37DA061DD08A900755A047A149
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d8:6a:07:bc:21:ae:b5:82:24:29:81:b8:bb:
                    e0:eb:a7:01:d1:64:61:d1:3b:a3:b1:88:e2:62:b4:
                    bf:4d:05:72:47:dd:16:83:0d:53:80:a1:78:4d:d6:
                    5c:98:a2:c7:c6:f9:c5:a3:bd:a6:42:52:ed:d1:65:
                    a4:0e:f4:20:30:a8:77:68:4a:ac:68:b3:19:bf:02:
                    45:73:82:8c:31:b7:ee:cb:44:4e:06:1f:1a:96:16:
                    b7:94:df:fb:ca:99:bb:3e:34:ea:82:20:0e:06:e2:
                    b9:7a:68:97:1c:84:d0:50:20:81:89:72:d5:e6:17:
                    24:7f:be:37:b1:f5:89:a3:f0:ac:30:e0:df:79:a6:
                    6d:f8:46:a4:f3:02:a5:26:51:0e:0a:11:08:87:46:
                    e2:2b:7c:33:8b:e0:0a:32:f4:75:06:a6:9d:d9:bf:
                    54:5d:11:fe:4f:8a:28:a7:cc:f6:5f:d1:02:be:5b:
                    c3:d8:47:a3:cd:0f:66:44:d9:cd:6c:ff:83:a8:0a:
                    d8:ff:4d:b4:b4:31:a3:61:ea:56:ba:30:3e:f5:a9:
                    08:7d:37:07:d5:16:b6:7c:2b:04:2f:ec:3b:05:c5:
                    bb:34:d2:0c:0e:99:68:62:94:e1:77:4a:8c:6e:39:
                    ad:58:c9:05:c5:1a:5b:9b:61:53:34:ed:81:9a:55:
                    84:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:45:B3:B2:F8:25:3B:37:DA:06:1D:D0:8A:90:07:55:A0:47:A1:49
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/S0WzsvglOzfaBh3QipAHVaBHoUk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.100.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8f:71:ad:58:cc:b2:25:8f:b5:81:be:60:1c:45:e4:01:f0:fc:
         58:9b:e8:a5:6f:88:81:20:68:8f:f8:fe:ad:f9:47:5a:fe:3e:
         bc:53:8c:0a:f1:97:df:a5:0b:6f:6b:2a:d4:ea:6f:43:cb:41:
         d4:0a:35:11:f0:7a:76:4f:cd:0c:70:a7:28:8e:76:5b:68:20:
         26:31:7d:cc:cf:52:71:8e:f8:3a:1f:cd:ee:05:72:bb:5a:65:
         cb:6c:c5:b6:b3:60:30:fb:40:4b:1f:6e:50:2c:29:be:f9:c8:
         ef:b3:74:f5:c9:9e:21:5c:a5:5a:a8:45:a6:76:82:27:d2:02:
         9e:28:fb:2c:ef:e3:f3:57:26:4d:c2:bd:9c:2e:0f:e9:81:51:
         1f:a3:31:10:b6:66:83:68:80:cc:87:5c:af:a3:32:f5:19:4d:
         e0:6e:26:a9:91:d0:3a:07:76:fc:4f:a4:f9:aa:55:3f:fb:db:
         ed:6e:e4:4a:07:33:a8:9b:d2:0d:86:74:6d:5a:c8:5f:e1:87:
         21:bd:4a:3c:01:44:bf:f0:da:4e:b9:9a:29:47:8d:96:7c:72:
         2c:b8:81:f2:cd:d2:46:27:f5:ce:6f:4b:95:90:9c:79:23:fc:
         fc:58:bc:d3:92:ef:1f:f1:01:6a:13:ee:6f:cf:0e:b1:8f:c7:
         07:e3:00:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----