Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/lCv7WgHyMCxfkvGidyIIkLIK0vE.roa
File:                     lCv7WgHyMCxfkvGidyIIkLIK0vE.roa (raw, json)
Hash identifier:          41DTidQAZ/P64QpTczI54/qaz/vTvFvxHL8+qDI/sXk=
Subject key identifier:   94:2B:FB:5A:01:F2:30:2C:5F:92:F1:A2:77:22:08:90:B2:0A:D2:F1
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/lCv7WgHyMCxfkvGidyIIkLIK0vE.roa
Signing time:             Thu 15 Sep 2022 02:35:24 +0000
ROA not before:           Thu 15 Sep 2022 02:35:24 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24163
IP address blocks:        2407:4b00::/32 maxlen: 36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5374 (0x14fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 15 02:35:24 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=942BFB5A01F2302C5F92F1A277220890B20AD2F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:64:f1:c0:50:54:d0:3b:1e:b3:64:40:0e:f7:
                    4e:b2:19:04:26:3a:65:19:25:4d:b4:7a:54:29:85:
                    0d:fd:94:8d:b4:14:0f:23:9e:f8:54:4a:4e:35:71:
                    16:78:c8:b8:f7:40:1c:67:f4:36:be:f2:67:2f:b5:
                    04:25:e2:60:2e:38:88:11:3e:1f:0d:63:64:46:bd:
                    ed:87:22:3d:d3:35:65:62:ff:1f:07:9f:44:60:92:
                    63:e5:49:4b:c9:f7:ad:06:85:61:9c:0d:d1:1c:f4:
                    60:b9:27:ac:12:03:d3:88:52:9e:3a:1e:92:d4:ef:
                    a1:cd:de:a1:ab:cb:35:a7:20:73:46:78:86:7c:86:
                    0f:03:67:a9:2b:88:37:d7:77:64:73:20:8c:ce:a4:
                    65:bd:bc:6f:33:65:89:6a:c1:fb:9a:13:a7:32:0e:
                    31:c6:d5:c8:16:de:13:9b:ab:9d:62:6a:45:2a:d6:
                    5b:21:f8:b2:46:7d:10:5a:eb:45:4e:75:c0:23:2e:
                    26:bd:dc:c0:eb:62:63:71:db:4f:30:8c:0e:3e:02:
                    af:6c:a3:05:a7:6f:8a:97:53:0f:a9:73:b2:e0:47:
                    1a:d9:5f:dd:ed:c6:bf:89:2f:db:f4:52:7f:ee:85:
                    5b:de:96:ca:05:61:1e:07:56:30:3b:72:8c:18:7b:
                    78:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:2B:FB:5A:01:F2:30:2C:5F:92:F1:A2:77:22:08:90:B2:0A:D2:F1
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/lCv7WgHyMCxfkvGidyIIkLIK0vE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:4b00::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:89:de:e5:3e:11:48:e4:a2:99:f7:d8:b1:27:f9:70:dd:0c:
         85:99:75:48:3b:a7:22:c9:2a:b9:23:ba:72:f3:14:ba:ac:a3:
         2a:0f:3f:14:c5:98:2e:a0:6a:04:fc:47:27:e2:5d:fd:19:2b:
         9a:89:30:ef:96:53:38:4b:12:0a:a9:64:13:19:85:f3:b5:7d:
         f7:9a:fd:78:4c:24:9d:88:21:c4:e3:e7:16:b4:52:8f:f7:f5:
         bc:b2:71:b1:30:03:07:0d:d2:66:bb:ef:5c:e3:28:6a:0e:9e:
         d7:2d:df:2a:6a:12:f9:d6:03:bf:ed:b3:91:75:3b:f7:42:fd:
         65:94:be:4f:49:b6:bd:58:4c:c8:6a:d2:b2:81:a0:f2:f0:b8:
         16:d8:ba:fd:16:79:1e:7d:1e:43:61:e4:49:6a:0f:72:81:0a:
         bf:6d:9e:de:0f:9f:be:c3:0f:af:f7:40:50:a1:f1:aa:20:e3:
         60:a8:9c:f0:4e:dc:2e:d1:1c:7c:ee:ea:a5:19:29:71:2d:f7:
         f1:ad:fe:49:d2:d5:6f:6a:d0:f6:27:3d:b5:07:39:ed:93:3b:
         15:cf:f4:85:ea:e8:43:c6:34:d5:95:a5:cb:1f:17:3b:86:1b:
         e3:42:2c:65:6c:6a:a8:97:54:3a:a2:21:eb:f4:34:e1:2e:28:
         b7:b6:f0:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----