Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APNT/6jvWs99DAbT4TkQ7h656hlQ4E8Y.roa
File:                     6jvWs99DAbT4TkQ7h656hlQ4E8Y.roa (raw, json)
Hash identifier:          pqnr0HYHv+fWlWVznvWv1n4/ak9o6Rs1YD0s3xV6Km0=
Subject key identifier:   EA:3B:D6:B3:DF:43:01:B4:F8:4E:44:3B:87:AE:7A:86:54:38:13:C6
Certificate issuer:       /CN=C2528D8C5B676FD9A24DFDA7E9217457B7310263
Certificate serial:       1152
Authority key identifier: C2:52:8D:8C:5B:67:6F:D9:A2:4D:FD:A7:E9:21:74:57:B7:31:02:63
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/wlKNjFtnb9miTf2n6SF0V7cxAmM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/APNT/6jvWs99DAbT4TkQ7h656hlQ4E8Y.roa
Signing time:             Thu 01 Jun 2023 16:05:41 +0000
ROA not before:           Thu 01 Jun 2023 16:05:41 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     131630
IP address blocks:        2403:b0c0::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4434 (0x1152)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2528D8C5B676FD9A24DFDA7E9217457B7310263
        Validity
            Not Before: Jun  1 16:05:41 2023 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=EA3BD6B3DF4301B4F84E443B87AE7A86543813C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:dc:47:fb:89:35:e9:ab:4d:b4:81:a3:91:4b:
                    f7:7e:e1:20:6a:be:ef:d7:d5:4b:0a:37:88:a1:96:
                    88:f2:35:ad:4a:af:21:86:80:c9:97:5a:ff:76:29:
                    ee:9b:20:67:da:82:fa:cb:fb:4c:37:a6:0e:67:2c:
                    d2:13:39:5d:1e:b0:2b:9f:0b:98:05:ed:92:75:0e:
                    0c:c0:86:27:4c:71:c3:ae:25:df:04:15:9c:e8:ec:
                    e1:d0:14:9d:e9:3c:d3:b7:59:50:d2:89:4e:f7:0e:
                    d7:d3:64:55:db:d0:a4:66:0e:75:90:52:22:78:31:
                    0a:67:c8:f4:11:d9:55:17:ca:c3:62:9b:bc:94:39:
                    01:12:b5:2d:c7:f4:28:20:43:a7:f0:af:3f:ad:29:
                    31:1f:bd:81:8a:1d:67:e8:17:d9:cb:55:15:fc:34:
                    40:28:36:0d:64:90:40:40:8c:73:76:6c:15:9e:06:
                    4a:36:65:15:a5:90:75:f2:4d:6a:e0:1b:88:65:db:
                    ba:93:31:fa:02:07:ba:a5:8a:0a:a4:50:33:c8:ec:
                    e8:2b:7a:b0:86:a6:8c:1a:80:94:b7:74:b0:aa:63:
                    d4:25:fd:25:8a:a2:ea:5e:fb:65:03:3a:b6:b0:41:
                    e5:c5:73:4a:8b:90:4f:fb:5c:de:95:83:32:82:5e:
                    88:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:3B:D6:B3:DF:43:01:B4:F8:4E:44:3B:87:AE:7A:86:54:38:13:C6
            X509v3 Authority Key Identifier:
                keyid:C2:52:8D:8C:5B:67:6F:D9:A2:4D:FD:A7:E9:21:74:57:B7:31:02:63

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APNT/wlKNjFtnb9miTf2n6SF0V7cxAmM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wlKNjFtnb9miTf2n6SF0V7cxAmM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APNT/6jvWs99DAbT4TkQ7h656hlQ4E8Y.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:b0c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:39:7f:53:2b:fd:39:a5:ac:1a:ba:6c:4e:52:52:e4:f6:84:
         ff:e1:70:bb:9c:88:c0:af:82:79:66:cc:11:38:b6:86:d5:82:
         9c:a5:43:ca:2c:78:84:2a:7c:cf:81:7e:5d:11:53:ef:8a:59:
         97:73:80:35:2f:20:d6:49:94:64:6e:cc:26:94:da:d2:e2:f9:
         6e:4f:5b:fd:35:ed:e7:55:de:63:f5:f1:de:97:ed:74:4d:fa:
         e5:19:28:fe:c1:1a:1e:88:30:07:8e:d7:f3:16:00:d2:f5:71:
         21:26:9f:2e:81:35:09:3c:74:75:9c:e1:c1:63:87:f9:70:52:
         72:3c:4c:97:a4:83:ea:65:1f:fb:cb:8a:14:90:51:77:aa:0c:
         df:b2:64:97:35:35:da:7b:58:c4:a5:ca:12:a0:92:87:ca:65:
         5f:98:00:4e:a4:3b:61:3e:54:47:ff:cc:3f:85:1f:3e:09:d7:
         d4:8e:ef:78:b7:af:87:f2:72:8c:e4:4e:15:0f:62:4f:94:a1:
         5f:6d:62:70:3a:08:1a:98:84:44:16:b7:71:3a:c6:27:75:4a:
         f3:bf:1c:52:7d:17:d1:3a:a9:e4:a1:58:91:40:54:08:c2:8c:
         9d:33:4f:98:e5:47:47:51:ca:d7:5e:e2:91:da:7b:57:85:3a:
         ac:80:e0:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----