Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/s7mkwZ1ySOA5RoTvLYrk5c5he7c.roa
File:                     s7mkwZ1ySOA5RoTvLYrk5c5he7c.roa (raw, json)
Hash identifier:          1ScHjTl/5RoAAF/yenqRNqZ2Dxr/EypUMpuH3g7LMLE=
Subject key identifier:   B3:B9:A4:C1:9D:72:48:E0:39:46:84:EF:2D:8A:E4:E5:CE:61:7B:B7
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/s7mkwZ1ySOA5RoTvLYrk5c5he7c.roa
Signing time:             Thu 15 Sep 2022 02:36:10 +0000
ROA not before:           Thu 15 Sep 2022 02:36:10 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24164
IP address blocks:        115.165.248.0/21 maxlen: 21

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5374 (0x14fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 15 02:36:10 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=B3B9A4C19D7248E0394684EF2D8AE4E5CE617BB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ac:a7:ab:ba:f0:e2:71:91:88:0c:26:8c:38:
                    a1:62:be:b3:3c:13:ea:ee:a4:a9:c1:de:6e:52:cb:
                    5c:95:ee:a3:5e:f4:17:1f:eb:d1:a9:52:89:29:b4:
                    ba:c3:12:b4:7a:84:fa:94:dc:e3:2a:17:8b:09:31:
                    1f:bf:31:64:48:6a:da:af:67:d6:c6:20:e1:14:e1:
                    fe:81:cd:3b:e5:47:7f:df:3f:bb:a1:93:74:79:69:
                    36:71:3c:71:e3:58:20:ce:3c:31:c0:5d:e7:78:d6:
                    57:d9:6f:d4:46:61:67:60:25:0c:d6:8f:6e:a9:f1:
                    ae:73:bf:e7:ef:1f:3b:91:26:7f:62:1a:91:17:92:
                    a4:5c:62:f6:ab:5a:7a:66:87:23:94:57:9a:45:35:
                    86:58:f8:a8:86:69:7e:83:68:47:af:4a:d9:46:3f:
                    9b:d2:b6:c6:12:05:7d:ca:38:16:6c:a0:13:e0:d9:
                    5f:3c:10:34:7e:c8:6e:d7:e7:7c:93:54:e6:72:12:
                    9b:fe:2d:58:05:07:9b:5a:da:34:fb:07:19:2c:1f:
                    f7:93:0c:07:10:c0:59:6a:62:cd:0c:a2:39:9d:ef:
                    5d:7b:40:9b:57:9d:92:dd:65:00:47:66:c2:66:e0:
                    b6:92:db:3a:1f:ce:07:78:c5:bb:3f:e0:47:0a:0b:
                    3e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:B9:A4:C1:9D:72:48:E0:39:46:84:EF:2D:8A:E4:E5:CE:61:7B:B7
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/s7mkwZ1ySOA5RoTvLYrk5c5he7c.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.165.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         01:9c:cf:b1:d5:f3:9e:88:23:ec:6f:6b:14:a6:6c:46:66:09:
         09:72:04:7c:f2:32:08:34:f9:05:73:2e:d7:66:89:ea:bf:78:
         fd:e4:34:14:54:34:03:88:00:99:03:64:d5:e4:2b:ca:d0:20:
         37:3a:15:29:2f:0a:1d:7a:64:46:87:42:c9:30:19:80:0d:3e:
         07:6c:5b:09:cc:64:1e:df:8e:97:54:df:34:06:ea:f6:4a:f6:
         58:cc:c3:60:98:f4:31:f0:fb:c9:05:17:a8:47:d9:d0:bf:63:
         84:de:3d:a5:00:1d:c2:85:a3:32:81:19:35:11:72:4a:1f:fb:
         02:40:78:70:f8:83:de:2f:1f:c3:c6:92:ab:11:70:e0:c9:c1:
         9d:ec:61:25:4f:de:41:18:17:84:d8:3d:c8:c9:c5:1a:f6:47:
         28:39:2f:a3:0c:2e:f0:e9:0b:b3:ea:b8:45:9b:d0:a0:c6:7f:
         bb:00:c2:9d:18:91:f2:6a:80:97:69:6d:c5:2a:eb:00:95:54:
         4b:39:d9:54:1d:61:f2:52:52:00:12:7d:25:69:2a:e0:f9:c6:
         a3:a1:5e:22:16:81:02:96:a4:6a:60:d0:12:b7:b5:4c:9d:b3:
         04:ec:13:e1:f3:4f:2a:b3:9d:6b:ec:4b:c3:5e:7c:d4:a3:ab:
         af:7c:de:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----