Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASNET/7-TgtyPzdpY5rUHRLELbqsDVOv8.roa
File:                     7-TgtyPzdpY5rUHRLELbqsDVOv8.roa (raw, json)
Hash identifier:          RN3YTcUxSHkdq2WnMCIriaxHsjhV3vcUqfA78mq1yYY=
Subject key identifier:   EF:E4:E0:B7:23:F3:76:96:39:AD:41:D1:2C:42:DB:AA:C0:D5:3A:FF
Certificate issuer:       /CN=70984F008CA28F6475DB426353BFD1C433D8BC1A
Certificate serial:       0A3B
Authority key identifier: 70:98:4F:00:8C:A2:8F:64:75:DB:42:63:53:BF:D1:C4:33:D8:BC:1A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/cJhPAIyij2R120JjU7_RxDPYvBo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ASNET/7-TgtyPzdpY5rUHRLELbqsDVOv8.roa
Signing time:             Thu 15 Sep 2022 02:47:56 +0000
ROA not before:           Thu 15 Sep 2022 02:47:56 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     9264
IP address blocks:        2001:c08::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2619 (0xa3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70984F008CA28F6475DB426353BFD1C433D8BC1A
        Validity
            Not Before: Sep 15 02:47:56 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=EFE4E0B723F3769639AD41D12C42DBAAC0D53AFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5c:18:8e:0d:74:21:99:d0:65:d2:e9:12:15:
                    a6:20:e8:7f:3f:87:50:a8:c1:97:bd:ea:aa:b6:40:
                    81:d4:11:84:cf:33:a9:1b:3d:1d:0b:cf:c5:32:54:
                    ef:e2:7f:b3:de:8b:ea:10:65:ac:3d:11:eb:99:95:
                    d5:18:35:b0:3e:f1:17:ce:c3:b7:63:e4:2e:4c:c1:
                    af:50:a9:29:f0:0b:25:06:ff:9d:fe:28:3b:6c:6f:
                    5e:9e:7a:7f:21:5b:8a:3f:65:93:9c:a4:0d:58:d6:
                    70:05:b5:c3:6e:c5:2f:67:e7:7f:57:19:17:c3:b3:
                    d4:c2:5b:3c:35:ad:bf:1d:90:02:3e:61:eb:e8:35:
                    eb:6d:36:72:6b:74:f3:c4:12:66:bb:5e:d5:09:cc:
                    af:10:81:20:2d:fb:5a:5c:cb:f9:8d:cc:5e:a8:3a:
                    f8:69:fd:ee:4e:6f:78:e4:ab:40:7a:c5:3c:0c:c5:
                    ab:c0:50:4d:53:1f:eb:83:13:11:77:b2:a3:e5:b2:
                    1e:3d:7b:2c:74:cb:42:be:6d:aa:b9:1f:22:a4:6e:
                    22:a7:f3:18:da:e8:02:e3:17:72:41:11:6a:eb:64:
                    87:87:d7:26:72:68:61:ab:52:54:ab:d6:40:31:a4:
                    72:3b:d3:28:4e:7f:e7:54:20:ff:b5:31:25:83:c4:
                    64:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:E4:E0:B7:23:F3:76:96:39:AD:41:D1:2C:42:DB:AA:C0:D5:3A:FF
            X509v3 Authority Key Identifier:
                keyid:70:98:4F:00:8C:A2:8F:64:75:DB:42:63:53:BF:D1:C4:33:D8:BC:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASNET/cJhPAIyij2R120JjU7_RxDPYvBo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/cJhPAIyij2R120JjU7_RxDPYvBo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASNET/7-TgtyPzdpY5rUHRLELbqsDVOv8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:c08::/32

    Signature Algorithm: sha256WithRSAEncryption
         a2:2b:e1:fc:31:11:fa:b9:b9:7c:e2:a5:0f:bd:f3:f3:98:61:
         83:65:d4:77:ff:14:d0:34:d3:a6:b3:57:d1:a3:85:d2:2b:06:
         b8:e3:b4:ae:ea:93:63:96:51:fa:5d:98:e8:94:0d:40:26:25:
         ec:dd:80:2b:46:7c:da:af:85:79:24:e9:42:1c:e5:75:a8:33:
         5a:c4:a1:f6:06:36:fc:78:78:8d:96:1f:a2:e8:7e:80:2b:93:
         4b:db:65:22:0c:b5:6d:32:a7:56:f7:18:6b:17:d0:e1:10:05:
         0a:b9:10:fc:58:09:2e:45:7d:fb:73:9f:65:ca:7a:39:cb:d0:
         7f:c9:74:13:26:bf:30:88:35:b4:df:20:43:46:b7:70:20:df:
         d0:d3:54:2f:f5:54:b1:bd:a5:c7:2b:30:84:4a:c7:06:a9:39:
         71:aa:15:f4:a3:aa:7f:4b:5c:f8:f6:ef:a7:15:c1:49:93:0d:
         11:ce:b3:c4:42:4d:16:75:1d:c3:98:1d:3b:77:01:78:95:82:
         41:ca:e1:b7:5e:54:53:a0:b3:b8:2c:c3:c6:f0:3a:19:4b:f5:
         c6:a0:8f:03:4c:ad:21:13:4e:f9:f5:98:02:7c:57:34:b2:4e:
         91:d1:70:97:40:08:65:79:d2:31:bc:e4:ae:65:5d:46:20:66:
         27:e1:f0:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----