Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/lPWAg9bN6nv1zKnPOn5LOREAcXI.roa
File:                     lPWAg9bN6nv1zKnPOn5LOREAcXI.roa (raw, json)
Hash identifier:          X/IfSLPtenU8MbPtArylODGth7QwQGdbnQMyRZvHkxg=
Subject key identifier:   94:F5:80:83:D6:CD:EA:7B:F5:CC:A9:CF:3A:7E:4B:39:11:00:71:72
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1718
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/lPWAg9bN6nv1zKnPOn5LOREAcXI.roa
Signing time:             Sat 22 Oct 2022 05:31:26 +0000
ROA not before:           Sat 22 Oct 2022 05:31:26 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24163
IP address blocks:        122.100.104.0/21 maxlen: 21

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5912 (0x1718)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Oct 22 05:31:26 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=94F58083D6CDEA7BF5CCA9CF3A7E4B3911007172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:0a:02:ce:a9:db:e5:89:5c:e7:eb:6a:2e:cd:
                    e9:6e:ad:52:50:a6:6d:15:1b:2d:4f:84:74:cc:47:
                    09:24:f9:c0:59:87:67:3b:93:aa:e8:52:ea:87:da:
                    4b:dd:ed:10:13:d1:4e:f6:d6:84:6d:95:23:2b:6f:
                    fd:70:17:d1:4c:32:5c:4a:bf:8d:a0:23:38:b4:b2:
                    d2:f2:47:aa:6f:1d:de:72:0d:f3:39:1a:21:ee:5e:
                    18:08:c3:d3:14:dc:6c:bd:6b:93:42:a0:fb:1e:8c:
                    41:da:c6:0d:56:15:8e:61:27:57:05:fc:11:8a:03:
                    0b:4d:8f:9f:71:c4:8a:4b:38:64:e2:7d:85:3b:cf:
                    40:33:8d:0d:5e:0a:1a:93:fa:0c:43:0d:30:28:62:
                    c1:c4:c9:3b:a1:6f:97:16:5f:05:a6:63:8a:fe:5f:
                    bf:b3:37:99:03:89:2f:9e:75:ef:e9:cc:dc:5f:c4:
                    53:53:c0:eb:e1:57:bb:76:4c:68:b3:d0:eb:7a:71:
                    5c:5f:da:78:e1:b4:c8:68:f1:d8:f3:39:da:88:f3:
                    a8:40:15:e9:8f:11:77:0f:d6:b3:89:95:f9:b6:b9:
                    2a:85:07:ed:de:02:2b:59:cc:3b:1f:a9:71:83:41:
                    eb:a6:4e:04:24:10:a7:9c:3e:18:96:ab:d5:69:8f:
                    55:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:F5:80:83:D6:CD:EA:7B:F5:CC:A9:CF:3A:7E:4B:39:11:00:71:72
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/lPWAg9bN6nv1zKnPOn5LOREAcXI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.100.104.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6a:99:4d:b9:0c:47:f9:fd:95:b4:de:e5:76:fd:cb:f5:9f:60:
         0b:b2:3a:c3:98:21:72:9a:64:44:5f:a6:6c:e3:d4:72:1e:e7:
         1f:66:a3:c8:8c:f8:1e:b3:d0:e0:3d:ed:35:f9:df:91:24:ee:
         35:0d:93:5f:25:da:fb:31:48:6e:74:49:49:99:5f:4f:ac:c9:
         fd:3f:4f:eb:b0:18:6f:cf:68:4e:60:ae:a1:c4:93:72:74:b1:
         95:eb:63:10:3c:dc:2b:9f:0f:c2:8a:5c:8f:98:c3:46:f2:ee:
         63:3f:89:31:52:b1:7e:71:24:df:c2:af:88:dc:07:f0:99:12:
         de:ae:ec:0d:ea:e0:20:88:00:95:99:f7:10:db:d2:97:fe:cf:
         69:6c:f6:ca:83:15:18:15:dd:26:3c:1f:6a:ee:1a:b2:f8:fc:
         53:c1:2d:32:23:7e:62:9a:79:e2:13:fb:2e:82:1e:ee:17:c3:
         be:a6:22:74:82:a2:ab:de:81:45:60:a4:95:07:de:f3:a8:49:
         0f:05:c6:9a:35:17:e3:e8:d5:5f:17:af:00:36:dc:03:6b:dc:
         63:e5:73:8f:1b:82:90:a3:23:e9:5e:19:b6:2d:4e:0b:b9:a4:
         c2:20:e8:30:55:5c:da:a3:c0:fa:d6:4e:36:0c:f4:40:aa:76:
         c5:8e:80:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----