Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/w3i4hgbSSmFvdDzDP5C_sbqBVso.roa
File:                     w3i4hgbSSmFvdDzDP5C_sbqBVso.roa (raw, json)
Hash identifier:          4L1DLC4v0bIxGhjPhlQVjtIwV4/Ez3aY6oVB+LQSEu0=
Subject key identifier:   C3:78:B8:86:06:D2:4A:61:6F:74:3C:C3:3F:90:BF:B1:BA:81:56:CA
Certificate issuer:       /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial:       0F63
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/w3i4hgbSSmFvdDzDP5C_sbqBVso.roa
Signing time:             Thu 15 Sep 2022 02:40:22 +0000
ROA not before:           Thu 15 Sep 2022 02:40:22 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     9311
IP address blocks:        203.79.220.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3939 (0xf63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
        Validity
            Not Before: Sep 15 02:40:22 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=C378B88606D24A616F743CC33F90BFB1BA8156CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:21:e4:63:59:05:18:1e:d8:b5:4b:5d:8e:49:
                    64:22:68:f8:55:57:a9:50:b9:ed:61:25:93:79:bc:
                    61:53:9a:18:30:55:8f:3a:59:77:1e:56:7e:d3:98:
                    91:8c:00:2a:92:7c:62:2c:2c:50:0a:a3:36:ea:c8:
                    dc:cb:b4:77:72:77:60:a9:e7:ba:ab:cb:68:a3:e7:
                    9f:44:ad:7c:54:d1:2a:9f:3c:cf:88:d8:b7:f0:43:
                    c4:b4:4f:cf:5a:29:e4:17:3f:d6:b4:b0:27:01:26:
                    f1:c4:ec:07:89:f3:3c:5e:a3:91:97:d5:9e:56:e4:
                    17:8c:7f:3d:d9:53:fa:4a:7b:9b:7b:03:bc:77:b2:
                    56:a3:a5:29:f7:4b:50:c6:89:a2:fe:9a:ae:6c:93:
                    05:85:38:e7:db:d5:7d:9c:1c:ec:c3:f8:21:da:56:
                    ba:5e:68:db:c5:6e:76:74:90:79:ff:41:c9:10:22:
                    2f:51:8e:4a:64:e3:a0:4c:f3:a0:ad:f4:4b:b2:7d:
                    39:70:66:69:4b:24:07:18:9d:4a:43:0c:94:6b:80:
                    38:60:2d:d2:89:c4:22:75:e6:b6:78:70:c7:82:76:
                    98:85:46:ec:68:2f:77:87:1d:13:d9:33:f7:36:cf:
                    3f:7f:98:50:2f:26:7a:a6:92:b3:9e:00:ce:4c:bf:
                    40:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:78:B8:86:06:D2:4A:61:6F:74:3C:C3:3F:90:BF:B1:BA:81:56:CA
            X509v3 Authority Key Identifier:
                keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/w3i4hgbSSmFvdDzDP5C_sbqBVso.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.79.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a3:59:5f:d7:c7:cb:c1:a5:d8:9e:a1:4e:95:fb:22:2b:8c:6f:
         a3:87:b8:d7:63:fd:18:d3:a1:0f:e9:21:f8:83:e4:79:4e:3f:
         f8:e4:71:b6:26:e0:f8:15:1c:61:0a:59:08:78:1d:f3:27:b7:
         b5:8e:6a:7c:5a:3f:31:25:83:5e:c5:0b:73:25:8c:f1:9b:33:
         f7:6a:7f:0a:b3:45:6c:c6:61:fa:40:f9:01:8b:b0:63:9e:50:
         a5:66:cf:b8:cf:77:75:c6:30:dc:91:b4:31:bf:d3:9b:9e:4a:
         5b:f8:7b:8f:b2:68:c4:c8:cb:7d:24:5f:12:ba:6a:e2:3d:ac:
         56:18:bf:f1:d2:bd:e2:c7:da:a2:f1:c7:35:d4:15:78:51:43:
         c2:ff:8c:70:8c:dc:c8:b2:1f:8a:ef:c0:e6:80:c1:dc:7a:39:
         7a:04:78:d1:0a:b1:01:7a:87:dc:a6:bd:08:8e:65:7a:a3:4c:
         13:cc:b3:63:7d:66:26:e3:e7:ff:ba:b9:5d:c7:1f:eb:d8:37:
         4c:1f:21:95:45:2c:18:60:8e:43:48:cc:a9:e8:16:2f:d9:a5:
         05:72:3a:2d:8e:1e:bc:a6:be:e8:ca:e5:ff:54:f5:71:2b:c7:
         32:40:07:11:39:55:fc:89:34:17:52:f6:43:7e:85:b8:f8:3e:
         7a:67:fb:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----