Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/my1haPLTjl4OjgT1E5JAOmXoRlY.roa
File:                     my1haPLTjl4OjgT1E5JAOmXoRlY.roa (raw, json)
Hash identifier:          Q9ulAxmFH4j4bZHNBHW5r7V9U9zwvHgbWwUnIuu3rcs=
Subject key identifier:   9B:2D:61:68:F2:D3:8E:5E:0E:8E:04:F5:13:92:40:3A:65:E8:46:56
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1B6D
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/my1haPLTjl4OjgT1E5JAOmXoRlY.roa
Signing time:             Fri 07 Apr 2023 07:28:06 +0000
ROA not before:           Fri 07 Apr 2023 07:28:06 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24164
IP address blocks:        61.60.208.0/20 maxlen: 21

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7021 (0x1b6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Apr  7 07:28:06 2023 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=9B2D6168F2D38E5E0E8E04F51392403A65E84656
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f5:e2:f4:18:07:d8:e8:31:6c:0d:1e:aa:b8:
                    2f:bb:57:c4:03:01:96:1e:0c:b0:f0:b2:88:14:2e:
                    2f:6a:ac:6a:07:d5:c6:34:6a:5c:ec:44:32:86:6e:
                    48:15:f1:59:5e:2e:0e:7a:df:ea:3e:9e:5b:df:96:
                    76:80:3e:46:5d:95:91:6d:e5:26:f1:87:5e:d9:8c:
                    5e:20:17:9f:2c:1d:79:67:6b:9a:c7:25:5a:67:b1:
                    da:69:f7:f0:85:37:8e:27:38:33:36:53:15:da:c8:
                    ef:e5:33:f1:98:5f:10:21:4c:4c:60:f0:2a:04:14:
                    8a:e2:32:e1:f4:6b:af:e2:01:1a:25:f9:17:9a:49:
                    7f:90:d6:28:32:75:61:a5:ec:f5:82:2b:1c:41:96:
                    e4:38:aa:42:8c:c4:75:06:fc:15:5c:29:42:20:4c:
                    f7:24:99:2a:1b:f1:7b:b0:7b:0c:c3:bc:d2:5a:9a:
                    57:b0:4f:4b:ff:d3:92:74:e3:7d:75:d7:0f:5a:97:
                    99:c7:bb:60:e3:ee:bb:00:aa:11:d9:e7:e1:ef:4f:
                    70:b1:78:1d:06:dc:1a:19:18:f4:a9:08:f5:0c:05:
                    d6:3c:25:81:c9:b2:83:77:5c:c4:c6:01:e4:41:1a:
                    87:4c:dc:02:64:07:a6:fa:f4:f9:8b:9a:27:ca:22:
                    37:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:2D:61:68:F2:D3:8E:5E:0E:8E:04:F5:13:92:40:3A:65:E8:46:56
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/my1haPLTjl4OjgT1E5JAOmXoRlY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.60.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         17:73:40:19:2a:0c:7d:22:fd:68:b5:f6:9b:57:7f:b0:63:26:
         c2:81:6a:a2:93:90:09:cf:73:07:38:48:84:f1:02:72:0e:af:
         1a:27:d3:c1:6c:5c:92:6b:32:28:df:0a:04:bd:9e:94:0b:33:
         c2:e0:a9:30:4a:6c:c7:08:d5:a6:9d:b9:ae:23:62:fd:13:53:
         23:1a:db:65:60:16:f0:dd:ed:0e:da:e1:f9:f7:79:fd:56:94:
         98:67:8f:f6:90:4b:57:39:17:2b:eb:6c:23:a9:3e:f6:b3:ad:
         77:c8:07:18:59:f9:9c:26:0f:19:6d:77:c0:49:2d:b6:4e:92:
         cb:ff:c0:6a:07:63:9b:69:0a:75:49:47:e1:1b:fd:a1:37:99:
         0a:d1:6e:6f:30:80:a5:40:e2:1a:e1:0f:15:9b:e5:12:2e:35:
         64:d0:a5:a4:e8:74:d8:20:af:79:2b:5c:57:62:7b:22:35:c9:
         97:93:a1:c4:d1:27:d5:ae:ea:13:b5:07:68:02:eb:51:67:e8:
         9a:f8:3a:5a:cf:0d:28:6a:6b:cf:53:9d:20:c5:69:55:ce:8f:
         16:3c:10:7e:03:bb:87:10:48:04:88:79:75:42:26:9a:e3:47:
         82:df:80:b6:cb:ee:0a:3c:80:54:2b:de:f6:84:20:dc:e5:c0:
         48:b9:c1:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----