Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Uglq6gAlwQejbJxs1dh3QAaW5u8.roa
File:                     Uglq6gAlwQejbJxs1dh3QAaW5u8.roa (raw, json)
Hash identifier:          hiDcS5aOIzQrH6+ulYiux+e2lbJHOGqQW3VaMapowE0=
Subject key identifier:   52:09:6A:EA:00:25:C1:07:A3:6C:9C:6C:D5:D8:77:40:06:96:E6:EF
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Uglq6gAlwQejbJxs1dh3QAaW5u8.roa
Signing time:             Thu 15 Sep 2022 02:35:43 +0000
ROA not before:           Thu 15 Sep 2022 02:35:43 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24164
IP address blocks:        61.64.0.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5374 (0x14fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 15 02:35:43 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=52096AEA0025C107A36C9C6CD5D877400696E6EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:47:7d:1d:62:4b:e4:c3:de:6f:cc:4c:71:0a:
                    5e:0e:62:a1:78:5e:20:d9:16:ca:04:f8:be:89:89:
                    f0:f0:b8:c0:f0:d9:b7:9a:7b:22:7b:ca:9e:bc:04:
                    c5:d9:f1:39:a3:72:0e:ea:a2:24:fa:a5:b1:46:96:
                    89:4d:1a:d9:73:ef:d3:0e:0a:41:6b:87:30:1b:8c:
                    f7:76:a8:49:3e:0a:bb:58:f0:db:67:65:42:6f:d6:
                    61:e1:26:a4:a2:09:cc:37:15:c2:19:7c:d5:65:0c:
                    cd:a8:b9:d8:10:2b:6e:49:9b:0a:6f:c8:63:41:b8:
                    4a:8e:92:97:24:a5:0b:70:f6:2d:5f:45:99:b7:ca:
                    73:02:15:04:64:5a:69:04:7b:2b:3f:3a:ff:92:db:
                    8e:5d:af:f6:41:3e:49:2c:ab:cd:ee:f3:7c:98:74:
                    33:0d:ed:42:ef:63:33:90:75:c1:e9:50:92:56:69:
                    57:b9:a4:99:c2:98:70:47:58:94:79:b6:de:54:11:
                    15:6a:ac:3d:3f:0c:bc:02:52:82:bf:37:cf:9f:0e:
                    05:65:4e:b8:d4:c0:7e:3d:1a:c8:85:0d:78:f3:df:
                    92:62:01:01:4f:e7:eb:89:4e:cf:55:98:41:dc:39:
                    35:49:ce:6d:e6:37:e3:89:e0:f7:8f:20:a1:50:8b:
                    ad:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:09:6A:EA:00:25:C1:07:A3:6C:9C:6C:D5:D8:77:40:06:96:E6:EF
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Uglq6gAlwQejbJxs1dh3QAaW5u8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.64.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:d4:6c:78:c8:a6:b3:40:f0:a7:2a:bc:7a:cb:a3:72:5d:e1:
         57:9a:87:b1:20:20:b2:b2:91:1c:8a:37:25:36:80:b4:09:83:
         da:b5:03:6a:0d:4e:22:6b:16:35:db:08:5f:5d:34:6c:14:d9:
         2f:54:6a:e2:54:ed:b5:05:f9:ab:29:17:51:02:ab:7f:95:e4:
         08:d4:4d:2b:04:e3:7b:89:f6:10:7e:f7:72:de:1b:ce:d5:a5:
         7f:f3:b9:ba:a1:de:13:e4:4e:8f:54:4c:e6:5b:9b:b2:c5:47:
         cc:09:17:3f:64:70:e3:e6:12:21:fa:60:43:a1:f4:e6:4a:70:
         93:c3:9f:64:ff:6d:07:aa:0c:21:cd:49:71:e0:4c:e3:cd:0d:
         53:44:01:9b:16:34:0d:cd:f6:64:75:7b:8c:ee:1a:f9:eb:da:
         ef:7e:cf:1b:c4:7a:41:c4:64:08:fc:70:c6:b0:90:eb:ec:73:
         87:67:60:33:f4:0b:a6:88:01:c3:9c:f7:e3:75:a6:c7:66:07:
         37:1f:26:5d:db:d2:2e:a4:c9:43:da:ff:ba:1b:45:a8:bf:5a:
         07:c7:36:79:dc:9d:75:c1:5a:6c:0a:d3:dc:b2:ed:2b:f4:08:
         ca:69:9a:d1:51:99:af:2e:ea:48:05:a9:ec:65:01:91:1f:ce:
         fe:8a:a2:37
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFP4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjA5MTUw
MjM1NDNaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDUyMDk2QUVBMDAyNUMx
MDdBMzZDOUM2Q0Q1RDg3NzQwMDY5NkU2RUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDAR30dYkvkw95vzExxCl4OYqF4XiDZFsoE+L6JifDwuMDw2bea
eyJ7yp68BMXZ8Tmjcg7qoiT6pbFGlolNGtlz79MOCkFrhzAbjPd2qEk+CrtY8Ntn
ZUJv1mHhJqSiCcw3FcIZfNVlDM2oudgQK25JmwpvyGNBuEqOkpckpQtw9i1fRZm3
ynMCFQRkWmkEeys/Ov+S245dr/ZBPkksq83u83yYdDMN7ULvYzOQdcHpUJJWaVe5
pJnCmHBHWJR5tt5UERVqrD0/DLwCUoK/N8+fDgVlTrjUwH49GsiFDXjz35JiAQFP
5+uJTs9VmEHcOTVJzm3mN+OJ4PePIKFQi60BAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUUglq6gAlwQejbJxs1dh3QAaW5u8wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1VnbHE2Z0Fsd1FlamJKeHMx
ZGgzUUFhVzV1OC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAI9
QAAwDQYJKoZIhvcNAQELBQADggEBABXUbHjIprNA8KcqvHrLo3Jd4Veah7EgILKy
kRyKNyU2gLQJg9q1A2oNTiJrFjXbCF9dNGwU2S9UauJU7bUF+aspF1ECq3+V5AjU
TSsE43uJ9hB+93LeG87VpX/zubqh3hPkTo9UTOZbm7LFR8wJFz9kcOPmEiH6YEOh
9OZKcJPDn2T/bQeqDCHNSXHgTOPNDVNEAZsWNA3N9mR1e4zuGvnr2u9+zxvEekHE
ZAj8cMawkOvsc4dnYDP0C6aIAcOc9+N1psdmBzcfJl3b0i6kyUPa/7obRai/WgfH
NnncnXXBWmwK09yy7Sv0CMppmtFRma8u6kgFqexlAZEfzv6Kojc=
-----END CERTIFICATE-----