Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mpNdVvO6g1BKG1d854pq40cvwj0.roa
File:                     mpNdVvO6g1BKG1d854pq40cvwj0.roa (raw, json)
Hash identifier:          1U9zyX2w62lopRx8DJwZYKlA3JQU1OtGyMg2WIm1lu4=
Subject key identifier:   9A:93:5D:56:F3:BA:83:50:4A:1B:57:7C:E7:8A:6A:E3:47:2F:C2:3D
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mpNdVvO6g1BKG1d854pq40cvwj0.roa
Signing time:             Thu 15 Sep 2022 02:36:44 +0000
ROA not before:           Thu 15 Sep 2022 02:36:44 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24165
IP address blocks:        180.218.88.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5374 (0x14fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 15 02:36:44 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=9A935D56F3BA83504A1B577CE78A6AE3472FC23D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:9e:dc:1b:6f:e6:62:94:fd:d6:8f:e7:07:e0:
                    68:d6:79:10:6c:ab:65:5b:94:14:0c:32:00:0d:d6:
                    5d:d3:3d:7e:07:4a:c0:f1:0c:ce:d5:ab:62:81:90:
                    6c:7a:19:f3:4d:f9:f2:0a:43:94:c3:d4:ad:22:b3:
                    b8:9b:01:fd:69:d8:a6:da:43:08:d9:56:2f:a3:a3:
                    d9:b5:73:21:d4:5c:b1:ed:5e:d6:ff:85:a7:e8:91:
                    75:2a:d7:16:40:1e:72:7d:f4:51:3e:f5:6e:cd:ff:
                    20:b1:78:6c:3c:ad:a5:33:38:44:22:1c:97:ab:a1:
                    09:c6:b4:7f:b1:af:eb:43:0b:eb:75:53:81:81:2c:
                    5a:ed:b8:a8:80:41:70:ab:73:af:bc:3e:fd:eb:5e:
                    fb:87:f0:28:1c:81:4e:a1:45:9e:ce:72:61:a6:03:
                    c1:de:20:37:af:f3:42:ff:60:02:da:8e:df:04:83:
                    1f:7e:82:b8:e8:ba:1f:33:8a:65:50:ad:e9:88:74:
                    71:81:35:f3:ef:a1:3f:fa:a3:43:ee:ba:45:cc:82:
                    80:8a:d9:6f:9a:9d:e7:60:c6:bd:27:af:29:f2:c1:
                    43:7d:c2:65:3e:23:80:f0:f0:0b:c3:9c:ea:ac:ad:
                    c4:bc:1b:45:69:80:a0:f6:0e:79:c7:9e:82:f4:91:
                    16:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:93:5D:56:F3:BA:83:50:4A:1B:57:7C:E7:8A:6A:E3:47:2F:C2:3D
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mpNdVvO6g1BKG1d854pq40cvwj0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:80:41:df:80:33:61:c7:6e:da:ca:d5:46:04:d2:d6:bd:66:
         71:87:48:4c:26:d1:4f:53:a9:50:5c:a5:91:4e:ec:76:96:53:
         0c:7d:89:ae:4b:d3:c5:94:08:a3:62:48:ea:04:37:56:d0:11:
         20:e8:96:d3:0c:cf:5b:bd:13:fa:f0:9b:3d:57:d9:fc:e8:0c:
         6d:ab:f6:e8:f5:65:2e:87:66:b2:21:3f:b5:e8:d4:e5:c9:23:
         22:69:13:5a:e3:07:99:9a:a2:e0:34:5e:0f:7c:6c:6d:09:c6:
         f3:30:87:f4:d7:4a:43:32:76:45:6e:6d:ee:0b:ce:b8:9b:3a:
         29:c6:c6:b4:da:41:f8:9d:e7:34:4a:4c:9b:8c:9d:f2:6a:72:
         bb:50:17:49:f8:0a:d3:c1:18:c9:77:7c:06:84:00:62:f4:74:
         4a:97:d7:53:14:7f:f7:b8:19:9e:cf:c4:7d:2a:b6:f6:37:3a:
         bc:4f:d0:75:09:a2:f5:79:52:c3:38:b9:11:b1:cc:69:6e:60:
         ba:5d:3a:62:ee:f2:e5:d9:05:d3:c6:3b:bf:dc:b7:51:c4:18:
         ae:9f:8e:75:98:0f:ea:1b:3d:07:17:54:d1:ee:af:68:30:18:
         22:6e:28:6a:55:9c:39:73:33:49:14:02:8f:29:b2:ed:25:a7:
         fc:e9:9b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----