Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/oTLYf7qJok4Wo0i5CPYqJLDr9Bw.roa
File:                     oTLYf7qJok4Wo0i5CPYqJLDr9Bw.roa (raw, json)
Hash identifier:          9QTrdSqhjn8SlOJH9K8NA6WDJrt3nFZ0skrjLxJl+6I=
Subject key identifier:   A1:32:D8:7F:BA:89:A2:4E:16:A3:48:B9:08:F6:2A:24:B0:EB:F4:1C
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       198C
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/oTLYf7qJok4Wo0i5CPYqJLDr9Bw.roa
Signing time:             Sat 22 Oct 2022 06:06:40 +0000
ROA not before:           Sat 22 Oct 2022 06:06:40 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24164
IP address blocks:        49.159.0.0/16 maxlen: 16

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6540 (0x198c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Oct 22 06:06:40 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=A132D87FBA89A24E16A348B908F62A24B0EBF41C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ab:b6:82:84:4c:32:69:81:99:16:64:97:7d:
                    78:4a:ad:a1:c5:70:c5:0b:d3:3e:7f:c6:91:f1:84:
                    0a:65:31:a6:e6:be:59:98:f2:3e:77:c4:ba:88:26:
                    a3:2b:be:11:f6:5c:ca:3d:cc:13:91:be:f1:4c:71:
                    e3:cb:1f:a1:41:58:89:f3:4c:d8:75:6b:64:40:81:
                    6e:9b:2e:d0:7f:4a:86:f0:99:4b:97:b9:5d:5d:8a:
                    ee:aa:f5:16:32:05:1c:77:4f:40:af:18:48:11:e6:
                    5e:cd:82:4e:98:e0:1b:2b:13:c2:59:40:ff:13:30:
                    27:9c:79:d4:74:8f:3c:d5:f8:98:1b:d1:c3:52:5b:
                    92:36:38:39:5c:4d:68:9e:a7:4a:c9:0a:30:61:d9:
                    02:c1:f0:9f:c5:8c:93:d1:00:1c:72:e3:c7:95:a8:
                    d5:43:7e:2d:24:3d:9d:7e:2f:9d:95:1d:2e:de:36:
                    7f:33:9a:32:a4:b0:33:38:c6:49:d0:5c:dd:70:73:
                    6d:aa:c4:e4:40:7b:dd:7d:d2:a4:d5:40:a1:3e:00:
                    f9:73:62:6e:d7:57:b3:53:98:65:9d:4d:f4:c3:9b:
                    e5:db:e2:e2:66:e2:2d:18:f9:70:27:6e:f1:68:e9:
                    06:01:71:25:de:9f:c1:81:d3:15:84:7d:7d:97:48:
                    cd:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:32:D8:7F:BA:89:A2:4E:16:A3:48:B9:08:F6:2A:24:B0:EB:F4:1C
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/oTLYf7qJok4Wo0i5CPYqJLDr9Bw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.159.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         65:95:f8:19:02:ae:4d:8d:ba:65:9f:d7:c1:bd:95:72:2d:fb:
         1f:aa:b4:09:24:ef:88:cc:11:d3:8a:3e:45:5c:de:04:2a:0c:
         61:85:63:20:1c:d9:d2:6f:d3:b1:e9:ed:81:10:68:ab:f3:9b:
         7d:bd:17:92:39:9e:cc:8c:e8:af:e9:ff:5d:6d:dc:1f:50:3c:
         b4:4e:85:bc:f0:34:79:32:d2:24:2d:53:0a:91:54:a3:ed:0f:
         39:2b:a3:a6:51:86:ab:9e:08:f0:cd:78:ca:95:b5:91:b0:3b:
         37:2e:73:08:b8:bd:e9:d4:49:7b:0c:b3:29:44:ae:4d:9e:df:
         6e:8f:dc:df:56:44:9b:38:a3:f4:ea:6c:f0:e3:b9:42:a4:82:
         51:a4:7e:bc:c9:57:04:91:d0:12:e8:02:e1:21:3f:7b:55:d5:
         7c:9e:90:7b:5f:b7:45:e3:8c:5d:a2:52:cc:fb:0b:a2:1d:98:
         1c:3a:0f:3f:fd:b8:5b:17:20:8a:55:00:0b:f6:c2:10:85:ab:
         69:f3:ca:9d:c3:74:a3:32:14:fe:58:fb:ec:4d:04:4e:ee:c4:
         f7:37:d2:7d:e8:6d:d6:d4:0c:ea:31:c7:42:ee:7b:fe:85:f4:
         16:6c:2e:8b:eb:ef:84:fc:3d:4a:ee:14:e6:15:5d:b5:4a:a1:
         d2:56:37:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----