Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/7AxkifXxUgY042mOe2b0lSSzrak.roa
File:                     7AxkifXxUgY042mOe2b0lSSzrak.roa (raw, json)
Hash identifier:          u2TB9CAM1FpjZtnAtGYWY/xZ5frjaeu89vhv1ycKT2M=
Subject key identifier:   EC:0C:64:89:F5:F1:52:06:34:E3:69:8E:7B:66:F4:95:24:B3:AD:A9
Certificate issuer:       /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial:       1333
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/7AxkifXxUgY042mOe2b0lSSzrak.roa
Signing time:             Thu 14 Sep 2023 10:11:15 +0000
ROA not before:           Thu 14 Sep 2023 10:11:15 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     17709
IP address blocks:        222.250.192.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4915 (0x1333)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
        Validity
            Not Before: Sep 14 10:11:15 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=EC0C6489F5F1520634E3698E7B66F49524B3ADA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d2:31:ef:ce:73:e5:c7:d4:7e:25:b3:27:71:
                    31:27:f8:9e:a3:99:e0:1c:dc:82:35:2b:7a:a3:e9:
                    c2:6f:1f:b0:0f:20:94:c7:55:01:f8:2c:66:7b:3c:
                    cf:49:63:c8:26:31:08:54:be:de:ee:ca:c8:77:19:
                    cc:b4:7a:50:b9:08:e2:f3:49:ec:f1:78:ba:8a:45:
                    92:5e:97:e4:2c:ed:50:57:c1:9d:e9:26:88:96:11:
                    91:28:1e:9f:a0:d9:2a:7f:78:83:8a:1a:c0:0f:cd:
                    6f:f8:6c:1a:a9:cd:d4:87:a1:e5:e3:da:11:cb:aa:
                    d5:12:45:49:f7:f6:d3:af:ef:93:bf:f2:1a:1a:11:
                    6e:bd:da:4d:67:7d:34:62:b2:30:a7:2b:de:ff:c3:
                    3e:f1:c2:1e:08:66:9b:73:ad:6f:d3:c1:b5:b5:a1:
                    39:09:76:50:d0:aa:6a:ab:bb:5f:62:6d:64:ae:34:
                    de:d9:36:6b:9e:8b:9b:d6:3a:fe:b6:5c:dc:78:e1:
                    c0:a9:78:91:83:a9:a5:81:88:f7:9f:37:54:94:d0:
                    fb:4d:6d:dd:f1:80:4e:77:cc:13:66:df:ec:38:9b:
                    24:a9:22:b2:0c:2a:95:fa:cb:e7:16:a2:a7:15:6e:
                    c6:e7:07:5b:ea:bf:95:fe:b0:cd:29:83:e8:13:e7:
                    a8:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:0C:64:89:F5:F1:52:06:34:E3:69:8E:7B:66:F4:95:24:B3:AD:A9
            X509v3 Authority Key Identifier:
                keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/7AxkifXxUgY042mOe2b0lSSzrak.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  222.250.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:65:51:e9:91:9e:ca:7a:d9:9d:c8:be:56:90:f6:f6:ab:83:
         12:51:ec:44:98:fd:c5:46:a4:6a:2b:43:52:49:74:92:6a:0b:
         7c:aa:2b:62:69:c4:01:c0:70:d0:32:b4:cc:9d:29:fb:bc:05:
         a7:35:b4:53:1d:bf:b0:bd:5a:aa:a0:bf:b5:db:d9:0e:da:a4:
         1d:b1:8f:2d:81:ab:3e:1f:a3:1c:66:64:dd:d3:b3:71:35:41:
         21:22:ea:6a:11:1d:d1:4a:c8:15:22:6a:2c:15:13:25:62:ae:
         ef:05:3f:cd:ee:17:bf:5b:2c:ed:ef:67:2b:d5:4f:69:3f:4e:
         be:43:22:bd:5e:66:07:18:64:53:69:9e:69:87:30:e7:b2:f8:
         34:ed:9c:0a:e8:2c:7f:08:86:d1:a5:a5:73:a8:3c:31:19:5a:
         4f:28:01:aa:68:35:66:78:73:44:4c:27:c0:ac:89:61:98:68:
         27:53:30:85:2a:e5:33:81:fa:74:83:ab:71:30:12:a1:cd:60:
         b0:4a:94:33:45:8d:05:2b:d8:9e:c1:5c:af:82:fc:e6:6b:4e:
         b5:0b:6d:66:35:10:2d:4b:31:50:35:91:9e:ba:57:a5:dc:48:
         38:c0:2c:b2:32:91:b7:75:48:dd:58:f6:58:b7:a1:50:27:10:
         72:25:a1:c7
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICEzMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NjQyMzBGM0UzOUJFRkJCNzNBN0Q0RERCMjZGRTJENDQ2RUUyNTAeFw0yMzA5MTQx
MDExMTVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEVDMEM2NDg5RjVGMTUy
MDYzNEUzNjk4RTdCNjZGNDk1MjRCM0FEQTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCo0jHvznPlx9R+JbMncTEn+J6jmeAc3II1K3qj6cJvH7APIJTH
VQH4LGZ7PM9JY8gmMQhUvt7uysh3Gcy0elC5COLzSezxeLqKRZJel+Qs7VBXwZ3p
JoiWEZEoHp+g2Sp/eIOKGsAPzW/4bBqpzdSHoeXj2hHLqtUSRUn39tOv75O/8hoa
EW692k1nfTRisjCnK97/wz7xwh4IZptzrW/TwbW1oTkJdlDQqmqru19ibWSuNN7Z
Nmuei5vWOv62XNx44cCpeJGDqaWBiPefN1SU0PtNbd3xgE53zBNm3+w4mySpIrIM
KpX6y+cWoqcVbsbnB1vqv5X+sM0pg+gT56jDAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQU7AxkifXxUgY042mOe2b0lSSzrakwHwYDVR0jBBgwFoAU+wZCMPPjm++7c6fU
3bJv4tRG7iUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBPTC8t
d1pDTVBQam0tLTdjNmZVM2JKdjR0Ukc3aVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
Ly13WkNNUFBqbS0tN2M2ZlUzYkp2NHRSRzdpVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0FQT0wvN0F4a2lmWHhVZ1kwNDJtT2UyYjBs
U1N6cmFrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAt76wDAN
BgkqhkiG9w0BAQsFAAOCAQEAQWVR6ZGeynrZnci+VpD29quDElHsRJj9xUakaitD
Ukl0kmoLfKorYmnEAcBw0DK0zJ0p+7wFpzW0Ux2/sL1aqqC/tdvZDtqkHbGPLYGr
Ph+jHGZk3dOzcTVBISLqahEd0UrIFSJqLBUTJWKu7wU/ze4Xv1ss7e9nK9VPaT9O
vkMivV5mBxhkU2meaYcw57L4NO2cCugsfwiG0aWlc6g8MRlaTygBqmg1ZnhzREwn
wKyJYZhoJ1MwhSrlM4H6dIOrcTASoc1gsEqUM0WNBSvYnsFcr4L85mtOtQttZjUQ
LUsxUDWRnrpXpdxIOMAssjKRt3VI3Vj2WLehUCcQciWhxw==
-----END CERTIFICATE-----