Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/cL_pBfdo2Gnvuox9-2_DI82dl-4.roa
File:                     cL_pBfdo2Gnvuox9-2_DI82dl-4.roa (raw, json)
Hash identifier:          1nvw1QVcSyyZg+7NvVeNdnzkJCbzRA/5aUtXjEl5ZLQ=
Subject key identifier:   70:BF:E9:05:F7:68:D8:69:EF:BA:8C:7D:FB:6F:C3:23:CD:9D:97:EE
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/cL_pBfdo2Gnvuox9-2_DI82dl-4.roa
Signing time:             Thu 15 Sep 2022 02:36:06 +0000
ROA not before:           Thu 15 Sep 2022 02:36:06 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24165
IP address blocks:        2407:4b00::/32 maxlen: 36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5374 (0x14fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 15 02:36:06 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=70BFE905F768D869EFBA8C7DFB6FC323CD9D97EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:66:c6:18:b1:49:07:3f:37:54:cf:ec:e5:f9:
                    62:ee:23:9f:89:cb:02:9f:ba:bf:c3:3a:e4:25:b9:
                    82:99:af:a7:b2:63:ce:7c:9e:d1:cd:fa:bc:1c:6f:
                    92:ee:8d:6e:c6:3a:96:3b:45:b9:1f:30:8e:c7:54:
                    b2:35:44:33:04:a6:7b:a8:2b:a2:8f:c0:23:6a:c3:
                    be:8d:c5:ac:e7:d6:b0:28:5a:ea:44:a1:88:9b:0f:
                    da:57:89:d0:cf:9e:e1:fc:27:1d:48:b7:8c:1c:ea:
                    1c:bc:a5:7b:f0:3e:9b:21:0d:55:66:cb:b9:33:56:
                    92:5e:32:5b:10:82:37:49:2b:d7:f8:d0:2c:cd:4e:
                    17:da:1e:b4:e3:a0:ec:36:54:34:7b:2d:77:d4:b2:
                    f9:23:bf:9d:78:fd:8a:3a:85:02:c0:f2:f1:79:10:
                    6b:e7:09:b8:fd:f0:2c:e3:24:1a:58:a0:29:1b:b0:
                    53:96:95:1c:da:2d:2c:95:00:1b:fb:5d:7a:36:d3:
                    ca:09:0a:0e:7d:35:ff:61:b2:1a:b1:60:cd:b0:d8:
                    bf:e2:ba:1f:6b:44:0a:bf:ac:1a:ab:c4:8b:d9:d7:
                    85:f1:cc:71:e8:51:46:6c:c6:e1:94:1e:05:e4:11:
                    43:0b:bd:b9:b4:cb:97:93:84:48:70:0d:e6:a7:4e:
                    95:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:BF:E9:05:F7:68:D8:69:EF:BA:8C:7D:FB:6F:C3:23:CD:9D:97:EE
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/cL_pBfdo2Gnvuox9-2_DI82dl-4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:4b00::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:ef:4c:3e:ac:15:47:bf:e8:9f:05:66:08:5e:ac:73:e6:a0:
         8f:6f:d7:3c:1e:c9:f5:ff:e2:2e:bf:94:3f:27:83:2a:ac:ac:
         b1:45:84:85:b2:84:b8:2c:88:ba:46:ef:ec:03:4a:75:e2:7a:
         a6:03:6f:40:9d:3b:8f:a1:de:74:74:32:65:96:f4:1f:b6:5c:
         41:e3:78:94:d0:2a:e1:99:a7:1d:26:62:06:55:c6:75:1b:9f:
         e6:75:31:0e:ba:ca:b4:45:ca:8d:ee:fc:7c:8c:0c:34:49:a8:
         e6:d6:ed:db:07:90:d5:94:c3:18:9a:9f:cd:73:b4:56:51:0b:
         ff:42:f6:4c:cd:ac:44:c3:e7:2c:84:45:55:95:e9:e0:1d:d7:
         db:41:d7:ea:f7:e5:99:ec:cb:e1:19:ad:90:2c:23:cc:91:0c:
         cb:89:e9:ae:fc:aa:85:ab:4c:4a:7c:f8:d2:32:79:6d:0b:a2:
         e9:0b:31:e5:02:fa:14:6b:17:8f:09:7c:84:2f:c6:05:f8:87:
         78:23:ca:ce:21:f0:01:6e:6f:ce:9d:77:dd:b1:7c:89:1f:dd:
         63:af:2b:64:7f:09:eb:dd:cb:64:ab:f3:0e:9e:50:0c:c4:ca:
         4e:ca:fd:3d:4b:a5:35:25:27:86:e2:18:b0:de:18:80:53:3a:
         29:26:34:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----