Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Y2e5R1ZN2kBHOt9GnAOSTry3yJs.roa
File:                     Y2e5R1ZN2kBHOt9GnAOSTry3yJs.roa (raw, json)
Hash identifier:          qCKVh9T3Fx+YM5Me9eOx4Fp/N3fj5amwdqWuvLzG3EI=
Subject key identifier:   63:67:B9:47:56:4D:DA:40:47:3A:DF:46:9C:03:92:4E:BC:B7:C8:9B
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Y2e5R1ZN2kBHOt9GnAOSTry3yJs.roa
Signing time:             Thu 15 Sep 2022 02:36:16 +0000
ROA not before:           Thu 15 Sep 2022 02:36:16 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     4662
IP address blocks:        124.6.0.0/19 maxlen: 19

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5374 (0x14fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 15 02:36:16 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=6367B947564DDA40473ADF469C03924EBCB7C89B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b6:b0:b2:0b:64:e2:e3:1a:cf:bb:76:86:0b:
                    5a:64:31:16:a5:10:28:39:e1:e4:ba:24:47:9a:2e:
                    31:ba:3b:71:37:98:5c:3e:90:4d:af:da:8a:62:08:
                    73:ff:8a:40:d6:17:d2:54:85:61:82:65:ba:99:58:
                    38:3f:0f:80:99:89:c2:14:19:51:79:b6:67:ea:2c:
                    58:30:57:5c:ed:0e:9c:f8:84:40:64:0f:48:29:57:
                    ba:f0:b8:ff:4a:bb:91:0a:ab:f0:ed:46:ad:b0:b9:
                    a6:40:cc:6e:8c:32:62:9d:ae:15:25:c5:87:51:24:
                    15:a1:d4:af:1a:6b:e7:c9:06:2f:b1:06:ea:55:84:
                    7b:c7:65:6a:1b:80:0e:7d:37:78:42:08:a8:13:20:
                    f6:bc:a1:f6:a5:c8:28:a5:08:b4:78:b0:42:43:11:
                    8e:89:66:dc:da:4e:99:2a:a2:52:9e:ac:8a:2e:c3:
                    d6:76:21:8b:50:30:eb:1e:53:4c:16:05:b2:a1:06:
                    85:99:3f:cb:b5:1b:da:5b:e5:31:04:bc:43:0a:ee:
                    fc:99:fb:25:2e:77:af:95:cf:7c:45:d6:a8:2f:ba:
                    1e:17:dd:70:c3:01:92:7a:7e:c4:ea:c5:61:c3:72:
                    44:a2:f6:e3:23:ab:9d:d4:58:f0:8f:c5:f8:75:e4:
                    74:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:67:B9:47:56:4D:DA:40:47:3A:DF:46:9C:03:92:4E:BC:B7:C8:9B
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Y2e5R1ZN2kBHOt9GnAOSTry3yJs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.6.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         33:68:e3:f6:68:e2:32:d7:2e:7a:db:0f:0c:8c:e2:9b:fd:59:
         c9:eb:d8:d7:93:db:55:64:0b:d6:f8:e2:37:80:97:7e:2d:67:
         de:7a:1f:67:be:69:3c:0a:c4:97:69:0d:a8:35:88:f2:d0:18:
         21:ae:b9:b1:24:ba:0d:07:49:3f:d2:34:07:d5:e1:88:92:d7:
         70:60:f7:a4:f9:d1:a5:c8:60:d3:f8:bd:86:54:95:c4:7a:cd:
         8f:bc:be:92:4f:61:48:8e:3d:c6:0b:f1:70:1c:7b:69:b6:60:
         65:f5:ad:23:93:1b:03:81:84:42:91:b3:91:26:df:3f:3e:21:
         d4:4a:2c:5b:d1:df:5c:9c:f1:74:1e:26:fe:59:a2:a8:e3:c7:
         8e:fd:3f:24:95:8b:f8:31:e9:b3:e5:b9:69:de:2a:72:1d:c9:
         ba:7b:b3:fc:3a:4e:7a:47:59:15:c5:be:e8:8b:a6:84:c1:55:
         54:7f:4d:a8:86:ba:7f:6f:77:fd:c5:63:25:87:99:fb:91:d1:
         0d:0d:10:ab:e8:fe:65:0b:02:56:56:1f:98:51:01:01:4d:6c:
         6c:31:c0:f6:8d:8e:a0:9c:d4:80:e8:86:86:08:4b:98:92:d8:
         e3:11:39:4d:a1:19:33:c3:23:db:ea:6d:21:c8:74:38:ce:5d:
         7d:e6:9c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----