Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/yOjG9d54fiMt7srkAmvSX5y00Xo.roa
File:                     yOjG9d54fiMt7srkAmvSX5y00Xo.roa (raw, json)
Hash identifier:          qDTzxUSeOrmoq4ce687HF/sYrV7mR6VHfVRRP7GOc0E=
Subject key identifier:   C8:E8:C6:F5:DE:78:7E:23:2D:EE:CA:E4:02:6B:D2:5F:9C:B4:D1:7A
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       193D
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/yOjG9d54fiMt7srkAmvSX5y00Xo.roa
Signing time:             Sat 22 Oct 2022 06:06:16 +0000
ROA not before:           Sat 22 Oct 2022 06:06:16 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24164
IP address blocks:        49.158.112.0/21 maxlen: 21

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6461 (0x193d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Oct 22 06:06:16 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=C8E8C6F5DE787E232DEECAE4026BD25F9CB4D17A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:58:da:24:bf:63:73:ed:6a:c9:19:de:74:87:
                    f5:c3:0a:69:4d:c1:60:1a:cc:4e:15:ec:63:fa:29:
                    53:2d:4e:28:79:20:81:39:75:3e:39:4f:02:76:40:
                    e6:98:a0:83:4a:fc:61:8e:fd:bd:f6:14:60:66:95:
                    f7:ec:9f:5e:0a:90:08:2b:b5:81:82:eb:77:0f:94:
                    bd:c0:78:ed:8a:b5:ac:f5:6b:ba:a7:8a:05:0a:40:
                    73:65:48:f0:c7:13:b0:14:49:71:8b:0f:ed:73:13:
                    b8:d9:a0:93:8e:89:71:69:8f:15:a6:a8:a3:8c:ce:
                    b8:62:e6:71:84:c2:1a:1c:1c:e1:1e:be:ed:5d:f4:
                    9f:53:ce:cf:26:ea:ff:43:0f:ce:0e:e3:7d:12:77:
                    fd:a3:4c:f2:0c:ee:6c:ad:ee:3a:b8:b4:05:46:c0:
                    9d:73:b0:af:f6:a4:1d:84:f9:82:a8:20:93:0a:05:
                    99:b9:eb:dd:87:99:78:de:c8:18:ac:ed:64:d9:85:
                    3d:02:de:d7:5a:4c:d4:49:5f:e9:67:a8:46:d2:b5:
                    5c:39:5f:31:a7:c9:84:8e:27:c7:b7:ac:9e:87:e2:
                    36:69:c7:12:51:8e:6c:58:7d:b3:a2:c8:b0:6b:dd:
                    86:34:50:cb:63:33:18:26:d6:4c:cd:d4:cf:f8:96:
                    d5:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:E8:C6:F5:DE:78:7E:23:2D:EE:CA:E4:02:6B:D2:5F:9C:B4:D1:7A
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/yOjG9d54fiMt7srkAmvSX5y00Xo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.158.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         42:5e:4b:ea:08:ec:50:05:86:8c:06:85:ef:4d:17:82:78:bc:
         02:56:86:14:a6:7f:c2:aa:c3:3b:dd:cb:c3:0f:e5:06:21:9d:
         ef:3b:35:9a:b9:8f:76:bf:c0:e1:82:a8:58:5d:db:eb:fa:f7:
         a3:b8:c5:c1:72:bb:6d:e1:c0:24:80:91:ad:66:e0:fd:91:32:
         d5:ab:f9:2f:48:dc:1f:a7:80:b9:11:4a:02:9a:55:35:91:63:
         3a:0a:79:54:0a:4f:ff:2b:64:7b:ef:9e:a4:d6:cf:d5:3b:69:
         d1:cb:61:95:9d:fe:0c:76:77:53:d6:07:71:86:8d:62:d6:69:
         30:d9:6e:0f:71:57:c9:95:75:1d:6f:e4:ca:b3:17:2a:57:ec:
         60:bf:49:8a:ca:f4:2a:fa:db:74:a5:27:e0:32:da:d9:2e:08:
         00:42:13:8f:4d:06:73:83:9f:f1:ed:1c:bf:ba:53:e9:03:ca:
         fa:5a:e6:aa:3b:e8:e0:78:f6:77:50:3e:64:28:79:6e:30:bb:
         49:5e:4b:c7:7a:cb:31:9a:0a:70:59:30:92:e4:af:17:13:60:
         62:a1:fa:63:19:22:e2:16:64:2c:b1:50:6e:3c:ae:6d:4b:1c:
         aa:7d:5d:f9:29:ec:c3:0b:7f:e3:68:31:01:a8:e0:f3:e0:cd:
         1c:66:69:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----