Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/w95kF3zgkxAg73y3ZSmVROqENWI.roa
File:                     w95kF3zgkxAg73y3ZSmVROqENWI.roa (raw, json)
Hash identifier:          1imFrdpe3Rs7i49PMEwnG46sM5P3UvdzFIRnYQ+TOhU=
Subject key identifier:   C3:DE:64:17:7C:E0:93:10:20:EF:7C:B7:65:29:95:44:EA:84:35:62
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1A26
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/w95kF3zgkxAg73y3ZSmVROqENWI.roa
Signing time:             Sat 22 Oct 2022 06:20:57 +0000
ROA not before:           Sat 22 Oct 2022 06:20:57 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24165
IP address blocks:        61.64.8.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6694 (0x1a26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Oct 22 06:20:57 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=C3DE64177CE0931020EF7CB765299544EA843562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5e:79:57:a0:eb:e3:7c:56:da:8d:72:7c:ed:
                    e6:1f:7e:8d:f1:4d:e1:a1:8e:ef:09:40:24:66:9f:
                    cb:bf:5e:45:ea:08:fe:64:72:d3:ed:60:90:1c:2b:
                    8f:89:31:4f:21:4a:97:f0:9a:55:75:fb:b5:ec:67:
                    c7:e3:b0:81:77:14:86:cb:76:8c:f6:8e:57:d9:3b:
                    86:b0:cd:56:e5:f4:60:38:cc:f0:ea:59:46:69:de:
                    13:4d:79:28:cc:ce:9d:90:ce:28:c4:0c:2b:98:12:
                    ff:59:d7:5c:21:40:58:a8:f9:bf:78:b0:23:9c:eb:
                    e9:64:05:2a:9d:a8:03:a0:21:57:9e:4f:39:69:0c:
                    39:fa:52:22:bc:86:85:6d:18:e7:d3:94:f2:c6:f7:
                    1d:53:5d:c2:74:88:23:1d:86:de:eb:1e:5e:b1:65:
                    27:ee:b6:64:8d:de:61:a6:54:3c:6b:b1:4f:38:27:
                    19:66:e6:1b:72:c9:d9:e2:1e:57:d6:df:46:c8:52:
                    20:09:67:10:77:7e:db:ec:60:01:30:24:03:3d:57:
                    5e:f5:5d:c9:23:92:67:ad:6c:7e:ad:e4:b1:5a:75:
                    ba:fe:9c:14:3e:92:7f:03:02:20:b6:7a:5e:95:99:
                    44:53:b7:06:65:9c:e7:ca:02:68:5e:26:c1:9e:2a:
                    8f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:DE:64:17:7C:E0:93:10:20:EF:7C:B7:65:29:95:44:EA:84:35:62
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/w95kF3zgkxAg73y3ZSmVROqENWI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.64.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:91:1f:34:79:33:13:cf:b9:e5:48:c1:47:8a:cc:63:2d:12:
         22:eb:2a:68:96:7c:42:1c:77:e0:f7:6f:b1:98:dc:5e:1d:b0:
         63:10:b1:fb:2e:68:c6:bc:ad:3d:2a:cb:75:54:b9:60:fa:a1:
         b0:a5:46:43:a9:c6:63:1d:29:99:9f:da:10:94:87:fc:0e:3e:
         ea:6e:57:cb:38:b0:5e:00:a0:e8:61:37:e6:06:a5:2b:e1:a0:
         80:29:e9:27:f1:26:25:75:cb:a4:9b:ec:de:0e:3e:7c:8a:ee:
         f3:c6:6b:55:1b:d1:e3:34:eb:d4:f6:82:4e:6f:bc:21:39:ac:
         18:92:dd:7d:62:e7:5d:74:44:2f:d0:31:28:b1:a1:99:3a:94:
         26:77:ed:aa:7e:9d:3b:b5:4d:36:06:65:37:c0:c3:10:ea:4a:
         5f:5a:6f:94:e9:00:66:2f:cd:32:e2:4f:a9:1e:6f:d5:17:7b:
         7e:7e:37:75:60:92:6a:64:b4:2c:7f:f2:14:41:58:1b:ad:8e:
         2d:a8:c6:9c:2f:3d:0e:cb:22:f0:aa:c2:b0:9d:88:22:49:0b:
         60:cc:84:72:bf:76:50:3f:15:1c:e3:fd:01:ba:70:ce:5f:85:
         0f:82:db:9c:1c:04:e1:e6:13:2f:bc:b4:a6:c4:13:cc:80:15:
         75:43:44:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----