Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWDS/xqCvFp4nla2wbCKEy8KS2VTffBk.roa
File:                     xqCvFp4nla2wbCKEy8KS2VTffBk.roa (raw, json)
Hash identifier:          RtmNMUEzDHlNRe7NpX/S3tOhdwaDlKaIWpU3ud1ADbo=
Subject key identifier:   C6:A0:AF:16:9E:27:95:AD:B0:6C:22:84:CB:C2:92:D9:54:DF:7C:19
Certificate issuer:       /CN=291BAF6A0C176CE0A32423666BCE78F9D91824CB
Certificate serial:       07DC
Authority key identifier: 29:1B:AF:6A:0C:17:6C:E0:A3:24:23:66:6B:CE:78:F9:D9:18:24:CB
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/KRuvagwXbOCjJCNma854-dkYJMs.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TWDS/xqCvFp4nla2wbCKEy8KS2VTffBk.roa
Signing time:             Thu 15 Sep 2022 02:34:49 +0000
ROA not before:           Thu 15 Sep 2022 02:34:49 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     209557
IP address blocks:        2405:a640:1173::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2012 (0x7dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=291BAF6A0C176CE0A32423666BCE78F9D91824CB
        Validity
            Not Before: Sep 15 02:34:49 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=C6A0AF169E2795ADB06C2284CBC292D954DF7C19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4f:76:bc:de:a6:f8:be:3a:5e:ae:55:b0:aa:
                    9f:d0:2f:be:0d:12:14:b6:5b:dd:c2:c9:df:7c:38:
                    dd:e9:f9:b3:c9:e6:dc:38:20:87:37:ba:a6:48:ec:
                    9c:2e:44:a1:e9:c4:97:93:c1:5b:96:be:24:5d:f1:
                    09:1c:c3:f5:40:d6:62:e8:ce:3c:d5:77:44:d7:5f:
                    bf:40:68:34:3d:7e:55:68:e3:e8:75:47:a3:1a:6a:
                    fc:d0:21:12:fe:16:37:9f:d2:13:45:97:7c:29:9f:
                    35:ba:a8:72:1b:bb:2f:32:82:85:08:d9:73:66:76:
                    8e:ee:c2:23:eb:de:df:e8:16:99:93:98:85:1e:7c:
                    42:c9:07:13:a4:fa:44:3c:b6:2c:15:14:33:a6:5a:
                    9e:89:7a:3c:ba:cd:d4:fa:b9:50:92:63:3f:f1:3b:
                    f0:d5:92:20:42:42:2a:9c:8e:11:6e:e8:cb:20:e3:
                    ca:86:c3:64:30:08:34:b6:ee:a8:f9:b4:5a:98:3d:
                    0c:a3:ab:17:ef:61:37:ad:98:ea:83:9c:e2:fe:f4:
                    11:21:20:4f:d5:da:f1:e7:8c:d5:37:a9:b8:cd:34:
                    2b:d4:ce:1a:43:34:cb:77:b7:17:9a:dd:1a:6b:30:
                    89:99:25:5b:c2:7c:f1:43:e3:b4:c6:f3:b5:de:8f:
                    7b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:A0:AF:16:9E:27:95:AD:B0:6C:22:84:CB:C2:92:D9:54:DF:7C:19
            X509v3 Authority Key Identifier:
                keyid:29:1B:AF:6A:0C:17:6C:E0:A3:24:23:66:6B:CE:78:F9:D9:18:24:CB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWDS/KRuvagwXbOCjJCNma854-dkYJMs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KRuvagwXbOCjJCNma854-dkYJMs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWDS/xqCvFp4nla2wbCKEy8KS2VTffBk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:a640:1173::/48

    Signature Algorithm: sha256WithRSAEncryption
         54:64:b9:26:cc:de:08:de:db:e6:08:53:d9:57:74:a1:0e:67:
         5b:24:8b:3b:ce:61:1a:f9:70:ad:8c:2a:ed:d4:d0:3d:6b:a3:
         32:03:7c:1e:b2:cf:95:60:7f:29:5f:a2:02:7e:5f:b9:71:14:
         67:22:5c:59:55:ed:46:d4:74:fb:29:64:35:7b:8c:3f:0d:45:
         5b:ea:c7:a1:dc:ee:1a:e8:71:98:ab:36:6c:dc:56:b5:c4:30:
         df:3c:66:66:65:ab:35:2f:4d:83:fc:ed:ea:76:f5:5b:57:ff:
         50:0c:77:cf:c8:c9:1e:a7:fc:4c:6a:b1:e3:e9:93:34:db:b3:
         17:f5:d7:8e:70:58:a6:1d:e4:49:a7:41:0f:b6:60:87:bb:64:
         b9:52:33:4c:68:cf:f0:c9:03:65:74:78:47:15:3b:58:5c:ed:
         a2:a7:d2:82:1c:4f:5b:67:71:79:fe:17:e2:8e:23:0e:93:35:
         d1:35:3a:6e:98:3b:84:16:2b:3e:3a:8e:fe:6b:64:0a:0a:5e:
         56:5b:49:7c:03:0f:a0:36:c6:f5:97:91:1a:0a:cd:85:cd:59:
         7e:8e:21:77:12:8f:12:89:d1:f1:4d:af:4f:2f:ce:19:9e:7e:
         64:f5:f0:d1:22:9a:7e:c5:17:99:d5:8b:de:61:8a:27:33:aa:
         e8:06:3d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----