Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Zq9tCv5vSt-RhD6NSX8VM1KI_as.roa
File:                     Zq9tCv5vSt-RhD6NSX8VM1KI_as.roa (raw, json)
Hash identifier:          u7Rz4CumONAMykmHqKA484eOd4bqRj/zs7hMiUlj5ko=
Subject key identifier:   66:AF:6D:0A:FE:6F:4A:DF:91:84:3E:8D:49:7F:15:33:52:88:FD:AB
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1989
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Zq9tCv5vSt-RhD6NSX8VM1KI_as.roa
Signing time:             Sat 22 Oct 2022 06:06:39 +0000
ROA not before:           Sat 22 Oct 2022 06:06:39 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24163
IP address blocks:        180.218.124.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6537 (0x1989)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Oct 22 06:06:39 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=66AF6D0AFE6F4ADF91843E8D497F15335288FDAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9b:1e:1a:e1:6e:e2:47:c1:ce:86:6e:c7:d5:
                    5a:04:3c:d9:92:20:45:fd:02:23:0d:8d:9a:ca:19:
                    ed:1e:e2:26:0b:e0:6c:6e:b8:2f:eb:07:d8:fb:06:
                    1b:74:39:cf:3c:3e:f3:b5:20:bc:75:5d:36:8d:e3:
                    e1:83:1d:6e:c7:f5:3a:37:66:15:a8:5d:74:c8:c4:
                    be:be:da:3c:17:99:aa:4f:e8:c7:0f:d7:9e:68:6e:
                    f8:93:42:3f:16:fb:ba:8a:be:9a:97:61:90:1f:b7:
                    09:b4:7e:99:16:eb:b4:bc:45:3e:12:82:28:14:33:
                    9b:df:f1:31:ad:53:9f:93:5a:e8:8a:e6:d3:c3:6c:
                    af:90:d2:e4:5a:d6:f2:b9:d5:46:a7:ed:46:66:e3:
                    69:40:1a:93:a5:60:4b:09:17:14:40:f8:d8:27:cc:
                    f2:c2:69:26:c3:8b:51:7b:65:f3:4f:99:2e:a2:99:
                    43:ef:60:31:34:ea:4b:c0:97:23:32:d4:87:42:c5:
                    7d:6e:10:46:aa:77:9f:3a:45:d7:8f:aa:d8:9b:b6:
                    fc:7c:a0:cf:dd:c2:e4:71:90:aa:89:9c:37:30:55:
                    8f:2e:00:3e:41:39:6e:cb:7c:7b:70:c3:3c:73:f2:
                    f2:43:47:bb:e1:c1:a5:8e:14:22:be:b7:22:64:42:
                    56:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:AF:6D:0A:FE:6F:4A:DF:91:84:3E:8D:49:7F:15:33:52:88:FD:AB
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Zq9tCv5vSt-RhD6NSX8VM1KI_as.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:fd:06:07:65:a3:75:64:7a:02:28:c4:d1:6e:f0:5a:ba:87:
         19:26:17:a6:bd:a5:32:c9:9f:ab:1c:fe:e0:e7:45:5a:37:21:
         8e:72:67:af:c8:63:d8:63:49:a6:3f:d9:42:b7:10:1f:18:a9:
         79:bf:09:fa:0e:57:2c:9e:cd:2e:43:30:c0:f5:f0:c4:ac:77:
         3b:22:24:71:b9:63:c2:ff:7c:51:76:ad:17:27:69:5c:7e:43:
         62:f6:f9:84:fb:13:27:58:3e:90:48:58:e6:67:b5:0a:b0:dc:
         15:a2:1a:72:8b:84:2f:21:40:3b:0a:9e:21:3d:00:e5:2f:b2:
         43:4c:fc:e7:99:9e:84:91:e5:c6:fb:55:96:ac:09:9a:30:1c:
         12:6d:c9:4a:66:71:43:5f:b1:77:e3:01:0a:0d:ec:f8:29:39:
         c2:b7:9f:eb:39:ab:20:ed:b1:96:27:85:fc:c9:5e:93:6c:79:
         f3:eb:9c:55:87:9d:a1:92:f8:9f:bb:08:08:b2:80:da:bd:15:
         c9:cf:56:86:01:34:db:e4:7f:45:30:ff:fd:70:76:38:82:5d:
         8a:ac:e0:59:fa:2c:1f:ef:a1:35:90:ab:c7:68:8a:c3:a5:93:
         b5:20:20:f7:92:49:0c:57:6e:2b:7e:36:a1:42:af:e4:e9:b3:
         25:8d:77:6c
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGYkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjEwMjIw
NjA2MzlaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDY2QUY2RDBBRkU2RjRB
REY5MTg0M0U4RDQ5N0YxNTMzNTI4OEZEQUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCsmx4a4W7iR8HOhm7H1VoEPNmSIEX9AiMNjZrKGe0e4iYL4Gxu
uC/rB9j7Bht0Oc88PvO1ILx1XTaN4+GDHW7H9To3ZhWoXXTIxL6+2jwXmapP6McP
155obviTQj8W+7qKvpqXYZAftwm0fpkW67S8RT4SgigUM5vf8TGtU5+TWuiK5tPD
bK+Q0uRa1vK51Uan7UZm42lAGpOlYEsJFxRA+NgnzPLCaSbDi1F7ZfNPmS6imUPv
YDE06kvAlyMy1IdCxX1uEEaqd586RdePqtibtvx8oM/dwuRxkKqJnDcwVY8uAD5B
OW7LfHtwwzxz8vJDR7vhwaWOFCK+tyJkQlYFAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUZq9tCv5vSt+RhD6NSX8VM1KI/aswHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1pxOXRDdjV2U3QtUmhENk5T
WDhWTTFLSV9hcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0
2nwwDQYJKoZIhvcNAQELBQADggEBABb9Bgdlo3VkegIoxNFu8Fq6hxkmF6a9pTLJ
n6sc/uDnRVo3IY5yZ6/IY9hjSaY/2UK3EB8YqXm/CfoOVyyezS5DMMD18MSsdzsi
JHG5Y8L/fFF2rRcnaVx+Q2L2+YT7EydYPpBIWOZntQqw3BWiGnKLhC8hQDsKniE9
AOUvskNM/OeZnoSR5cb7VZasCZowHBJtyUpmcUNfsXfjAQoN7PgpOcK3n+s5qyDt
sZYnhfzJXpNsefPrnFWHnaGS+J+7CAiygNq9FcnPVoYBNNvkf0Uw//1wdjiCXYqs
4Fn6LB/voTWQq8doisOlk7UgIPeSSQxXbit+NqFCr+TpsyWNd2w=
-----END CERTIFICATE-----