Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/oqe3xOToFRdh9AJ0d47dx9IyQUg.roa
File:                     oqe3xOToFRdh9AJ0d47dx9IyQUg.roa (raw, json)
Hash identifier:          XCXJ48c4d+nJYVPGWvWIoX8IQX8QPdrJWJJPeWQI/H4=
Subject key identifier:   A2:A7:B7:C4:E4:E8:15:17:61:F4:02:74:77:8E:DD:C7:D2:32:41:48
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       197F
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/oqe3xOToFRdh9AJ0d47dx9IyQUg.roa
Signing time:             Sat 22 Oct 2022 06:06:35 +0000
ROA not before:           Sat 22 Oct 2022 06:06:35 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24163
IP address blocks:        122.100.120.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6527 (0x197f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Oct 22 06:06:35 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=A2A7B7C4E4E8151761F40274778EDDC7D2324148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:80:b4:01:88:63:d2:56:ba:07:01:fd:8b:45:
                    86:1e:0e:c2:6a:a1:59:af:28:a8:b1:45:90:df:59:
                    a0:37:6c:1d:ae:97:94:78:1e:6a:ac:1d:4b:ce:68:
                    79:83:d5:ec:ba:3c:7c:5b:e4:78:1e:96:9d:5c:d1:
                    27:7e:64:20:1f:24:66:55:a0:69:bf:cf:03:fc:3d:
                    3e:d5:b5:c3:37:88:c5:0f:f3:bf:c2:6d:02:25:25:
                    88:b3:20:67:52:1e:e6:63:b2:79:76:39:12:03:22:
                    42:f2:44:2f:2f:ee:99:74:88:5d:22:2a:4c:44:c9:
                    ff:a3:74:f2:bc:89:a1:1b:0f:2e:6e:de:e4:95:3a:
                    31:26:bc:81:86:f0:15:f2:a7:bd:71:91:d3:8f:23:
                    72:f7:c6:7c:0e:09:90:30:94:b3:70:51:f1:92:76:
                    c9:cb:49:65:ff:50:b8:27:fb:66:ea:7c:47:d0:04:
                    f1:40:5d:51:f3:6c:1d:d6:a4:62:ae:a4:cb:6f:6d:
                    8c:c8:af:9f:ce:81:92:27:2a:12:d2:42:3f:f6:5c:
                    da:50:1a:83:ad:9b:52:51:4b:3e:58:73:6d:58:24:
                    7d:db:ae:d3:ed:11:f7:24:6d:ce:18:09:0b:f6:07:
                    4c:b1:8d:96:d5:30:c2:0b:28:1f:57:83:09:d7:0e:
                    d5:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:A7:B7:C4:E4:E8:15:17:61:F4:02:74:77:8E:DD:C7:D2:32:41:48
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/oqe3xOToFRdh9AJ0d47dx9IyQUg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.100.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:ff:a0:4c:cc:a0:c9:ae:cf:f4:43:d2:49:82:7a:be:95:6f:
         f0:94:a4:da:fc:61:f1:0a:cf:5a:7a:51:0a:e0:61:93:29:97:
         44:1d:e4:dc:24:8c:de:66:eb:23:06:39:30:1d:14:f5:fe:53:
         6e:cf:23:82:12:89:d2:ba:43:79:e8:0a:44:49:01:d7:21:ea:
         35:5c:15:b5:69:07:e8:7e:45:66:e8:3d:05:28:f3:15:b4:98:
         cb:2e:f8:46:0c:16:e2:5a:d8:8b:63:c1:cf:2e:e9:58:ca:23:
         16:02:fd:c5:13:7d:46:af:6f:47:d3:57:e5:87:bf:3e:b2:2c:
         15:8d:9e:b9:4d:92:ec:28:a3:01:5b:29:60:8e:7e:dc:12:2f:
         6a:0b:6a:70:7e:ca:a9:1a:2d:49:c6:80:68:a9:24:4e:ec:f8:
         62:26:45:b4:12:db:5e:62:aa:49:08:b0:8a:89:5b:a2:fa:d6:
         f4:51:0d:65:54:7a:45:54:07:47:9d:97:b0:c6:0a:ae:d7:db:
         11:fb:d5:6d:48:f3:a4:8c:3b:c3:77:b1:3e:1f:86:12:cb:cc:
         5a:60:64:d4:f6:0c:6e:37:e2:1b:dd:5c:a0:c4:b7:a7:9a:b9:
         63:d8:0c:44:d0:35:fe:c2:49:0d:9d:2b:ad:b4:ad:11:13:b9:
         75:77:38:8c
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGX8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjEwMjIw
NjA2MzVaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEEyQTdCN0M0RTRFODE1
MTc2MUY0MDI3NDc3OEVEREM3RDIzMjQxNDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC0gLQBiGPSVroHAf2LRYYeDsJqoVmvKKixRZDfWaA3bB2ul5R4
HmqsHUvOaHmD1ey6PHxb5Hgelp1c0Sd+ZCAfJGZVoGm/zwP8PT7VtcM3iMUP87/C
bQIlJYizIGdSHuZjsnl2ORIDIkLyRC8v7pl0iF0iKkxEyf+jdPK8iaEbDy5u3uSV
OjEmvIGG8BXyp71xkdOPI3L3xnwOCZAwlLNwUfGSdsnLSWX/ULgn+2bqfEfQBPFA
XVHzbB3WpGKupMtvbYzIr5/OgZInKhLSQj/2XNpQGoOtm1JRSz5Yc21YJH3brtPt
Efckbc4YCQv2B0yxjZbVMMILKB9XgwnXDtWZAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUoqe3xOToFRdh9AJ0d47dx9IyQUgwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL29xZTN4T1RvRlJkaDlBSjBk
NDdkeDlJeVFVZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ6
ZHgwDQYJKoZIhvcNAQELBQADggEBAFT/oEzMoMmuz/RD0kmCer6Vb/CUpNr8YfEK
z1p6UQrgYZMpl0Qd5NwkjN5m6yMGOTAdFPX+U27PI4ISidK6Q3noCkRJAdch6jVc
FbVpB+h+RWboPQUo8xW0mMsu+EYMFuJa2Itjwc8u6VjKIxYC/cUTfUavb0fTV+WH
vz6yLBWNnrlNkuwoowFbKWCOftwSL2oLanB+yqkaLUnGgGipJE7s+GImRbQS215i
qkkIsIqJW6L61vRRDWVUekVUB0edl7DGCq7X2xH71W1I86SMO8N3sT4fhhLLzFpg
ZNT2DG434hvdXKDEt6eauWPYDETQNf7CSQ2dK620rRETuXV3OIw=
-----END CERTIFICATE-----