Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/cwLAuNRviTX8t0vRdPYPJ35CrHI.roa
File:                     cwLAuNRviTX8t0vRdPYPJ35CrHI.roa (raw, json)
Hash identifier:          sFhiNnaaLfsgMpdplENZS4RlqGS8Acwrurgri5aEj0Q=
Subject key identifier:   73:02:C0:B8:D4:6F:89:35:FC:B7:4B:D1:74:F6:0F:27:7E:42:AC:72
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1884
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/cwLAuNRviTX8t0vRdPYPJ35CrHI.roa
Signing time:             Sat 22 Oct 2022 05:58:28 +0000
ROA not before:           Sat 22 Oct 2022 05:58:28 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24164
IP address blocks:        49.158.232.0/21 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6276 (0x1884)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Oct 22 05:58:28 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=7302C0B8D46F8935FCB74BD174F60F277E42AC72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5e:66:7b:5e:99:a1:7f:bb:27:f7:f9:09:8e:
                    db:1c:37:43:5f:96:31:08:60:1d:0f:e3:83:de:04:
                    1d:4c:f8:7e:f3:27:6b:e2:8f:c5:f2:22:07:27:b8:
                    e4:d4:bf:29:c6:da:f1:6c:62:64:58:ce:19:5f:c1:
                    d7:0a:b6:cb:a5:cf:90:fe:19:90:1a:03:58:ff:f2:
                    f6:db:64:11:91:1f:51:87:f7:52:e2:bf:1a:41:dc:
                    7c:c8:9f:84:b5:81:2a:35:52:8d:9d:cb:e4:8a:2a:
                    35:83:2f:6e:9c:84:11:cd:20:60:2d:50:cf:a1:e1:
                    7c:38:3a:0f:fa:8a:11:82:d0:8e:e3:33:b2:fb:26:
                    19:04:a0:7f:bb:aa:0a:93:ac:af:6a:b4:4a:30:13:
                    e6:86:f6:50:20:21:63:1f:fe:fe:89:60:2a:42:69:
                    7b:c9:3a:37:b3:72:3c:88:1c:f7:4b:1a:ea:ba:85:
                    28:e1:8a:41:65:e7:98:dc:4f:89:16:3e:1a:8d:85:
                    7b:5c:8d:80:34:3a:d8:7d:53:4c:05:c2:bb:5f:22:
                    85:00:91:05:8d:a5:98:d0:2e:90:34:0a:49:33:10:
                    25:76:56:eb:c5:0e:05:cd:2f:ac:16:6e:a4:03:8b:
                    94:bb:83:b6:52:a7:83:1a:f9:10:96:fc:34:5a:b1:
                    c6:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:02:C0:B8:D4:6F:89:35:FC:B7:4B:D1:74:F6:0F:27:7E:42:AC:72
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/cwLAuNRviTX8t0vRdPYPJ35CrHI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.158.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9e:09:95:7a:59:22:15:31:3d:de:43:40:12:3a:c1:a5:73:03:
         60:a0:37:43:d7:5c:cb:46:25:69:ca:4f:8c:56:1b:aa:9c:0b:
         c7:78:c5:79:06:63:2e:e0:c6:76:3d:83:b9:f0:8a:9a:cb:88:
         a9:eb:78:33:8a:2d:f8:ba:2a:49:33:f5:d5:94:25:48:d8:c4:
         81:b7:19:d2:fa:a7:76:53:01:68:3a:18:c5:d1:ee:1c:8e:f5:
         d0:06:f5:04:48:43:e4:cb:52:4d:ae:00:30:61:72:d6:cf:f2:
         b2:53:b6:d0:e8:98:36:cd:96:5d:3f:ca:b0:e3:75:94:9c:21:
         74:79:14:79:d3:b0:76:fc:5b:33:b7:b1:94:9b:68:e7:72:30:
         4b:f8:e9:19:6e:e2:49:e8:b2:58:2f:db:53:15:b2:d1:97:3f:
         ca:a8:e7:03:88:6a:92:45:b0:cf:15:0a:de:cb:7d:79:e5:8c:
         5d:55:9e:5d:63:ec:cc:c8:38:70:ff:d6:6b:0f:13:0c:48:38:
         e2:8f:29:c7:df:2c:ac:0f:e8:c5:b1:d8:25:0f:64:4e:6b:ee:
         fa:1d:46:ea:c9:df:9f:c9:f0:4d:a6:87:71:7b:90:99:0f:3f:
         2e:db:a9:65:a9:0f:bd:bf:b2:74:0e:1c:9e:d3:0b:ad:ba:70:
         e0:fa:6e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----