Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/igoZZHtnKmG7c3SFnHihPb3Zeb8.roa
File:                     igoZZHtnKmG7c3SFnHihPb3Zeb8.roa (raw, json)
Hash identifier:          nfusIDUi2ssQPVvXTh+mT1OmvkqIG1g5fNECdsop/yE=
Subject key identifier:   8A:0A:19:64:7B:67:2A:61:BB:73:74:85:9C:78:A1:3D:BD:D9:79:BF
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1AA5
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/igoZZHtnKmG7c3SFnHihPb3Zeb8.roa
Signing time:             Thu 22 Dec 2022 01:26:09 +0000
ROA not before:           Thu 22 Dec 2022 01:26:08 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24163
IP address blocks:        103.225.0.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6821 (0x1aa5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Dec 22 01:26:08 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=8A0A19647B672A61BB7374859C78A13DBDD979BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b4:86:c6:9d:29:07:46:79:00:55:85:a0:1d:
                    d5:58:31:f2:09:22:a6:d8:80:62:dc:14:11:82:28:
                    d2:1d:4b:fc:f1:13:b4:ea:1a:4a:67:2e:f7:ce:57:
                    b7:86:b4:6c:08:d9:3c:04:9a:c4:ae:2a:3a:90:d1:
                    7f:c5:1e:2f:92:4d:e2:6c:ae:47:7d:99:16:11:82:
                    26:5e:22:b2:26:a2:62:16:a1:d7:2c:61:a8:90:65:
                    1a:dc:7c:65:45:2c:ee:da:a6:c5:46:c7:65:c9:fd:
                    26:1b:f1:a2:f6:0c:a7:73:af:5e:f7:ea:38:fb:36:
                    24:af:a9:8c:53:49:4d:1b:aa:a1:30:9e:c2:5d:dd:
                    23:90:ff:b8:1c:71:35:45:3c:5d:fb:03:35:4d:b7:
                    51:6d:7c:f7:7d:b5:b7:b7:c5:3d:88:70:9b:5c:a1:
                    42:23:eb:33:34:db:d7:f9:5b:e4:8f:20:3f:5c:0a:
                    97:c4:82:ff:7f:07:2e:7f:b8:a3:5a:a9:64:64:f4:
                    60:ce:34:67:7f:d5:37:dd:70:47:27:c5:f2:3b:9b:
                    77:e5:3c:4b:34:44:0b:8e:1b:ae:2b:6f:4c:65:64:
                    46:8e:b6:a0:4b:1c:4f:b7:b4:63:65:8b:a8:cc:80:
                    16:38:8e:74:ea:ea:f4:76:f4:fd:60:ab:bc:b7:c6:
                    1d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:0A:19:64:7B:67:2A:61:BB:73:74:85:9C:78:A1:3D:BD:D9:79:BF
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/igoZZHtnKmG7c3SFnHihPb3Zeb8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.225.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:41:1d:79:a5:d5:3f:a8:4a:9a:03:d5:45:5d:e9:15:dd:86:
         68:e9:82:fe:a6:e2:1e:02:c6:c8:42:af:7d:c8:36:c3:78:7a:
         50:e7:5c:df:d3:72:fa:42:d5:54:68:68:b6:61:80:b2:08:4d:
         97:c1:29:0a:9e:03:1a:d6:9d:31:17:6a:68:7f:76:5f:a2:26:
         e8:5e:30:2b:5b:90:b9:9f:d1:57:14:d3:a1:88:aa:6f:37:8e:
         31:ed:7b:cc:bb:f2:d0:fe:c9:43:6d:c4:db:b7:d2:32:3c:c7:
         cd:b1:7d:31:67:4d:ee:bf:aa:8a:8b:ca:2d:33:e4:8c:2e:d7:
         aa:1e:a1:ea:ab:02:bc:b4:a2:ab:de:4f:73:8f:56:72:03:61:
         27:fe:f4:f0:b5:36:d8:cf:eb:11:80:65:07:96:c0:ef:2e:e1:
         9c:45:fa:fd:78:dd:70:d4:99:7f:14:d6:5a:e2:bf:a2:b6:a7:
         7d:87:b8:3f:75:90:b9:60:62:07:b0:d9:a4:b8:1c:77:93:2d:
         13:6a:87:28:bb:76:1c:91:85:88:67:c1:3f:59:0d:b4:a2:c1:
         a6:a1:a6:0b:85:94:b5:23:9e:c1:9b:c7:76:2f:bd:33:b0:ca:
         13:ff:db:36:b7:b0:22:5b:8b:02:3a:86:27:e7:1e:77:1b:20:
         fc:f9:a3:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----