Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/-7twvjd9J6JcIin67C8vS3CVyYw.roa
File:                     -7twvjd9J6JcIin67C8vS3CVyYw.roa (raw, json)
Hash identifier:          186RfHVDpcM3xgAo8RUi6V52GZQ3okX1xOV81DuC7RE=
Subject key identifier:   FB:BB:70:BE:37:7D:27:A2:5C:22:29:FA:EC:2F:2F:4B:70:95:C9:8C
Certificate issuer:       /CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Certificate serial:       0B5A
Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/-7twvjd9J6JcIin67C8vS3CVyYw.roa
Signing time:             Thu 15 Dec 2022 02:57:01 +0000
ROA not before:           Thu 15 Dec 2022 02:57:01 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     18429
IP address blocks:        27.147.24.0/21 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2906 (0xb5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261
        Validity
            Not Before: Dec 15 02:57:01 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=FBBB70BE377D27A25C2229FAEC2F2F4B7095C98C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:29:f4:cb:84:75:8e:55:ae:bb:26:f6:33:6a:
                    1d:32:4e:84:83:cb:57:b4:31:89:47:30:fa:ec:ba:
                    ee:47:57:11:9d:3c:cb:86:14:2b:a6:a9:a1:16:28:
                    7a:21:cd:b3:90:5c:1f:3b:69:05:37:b7:b8:21:97:
                    76:2c:ae:5d:a3:ff:d2:28:83:13:0c:15:0f:9a:58:
                    b9:05:6c:02:10:34:f7:17:7e:59:a1:f3:6c:a0:71:
                    5d:10:49:3a:8f:36:6f:09:d1:e8:16:70:ae:53:54:
                    55:c6:d2:f3:42:e8:d4:60:14:3b:1b:c7:ff:1a:10:
                    c1:1b:a1:ce:37:dd:00:df:98:97:9b:fb:a7:e3:01:
                    2e:9d:74:fc:95:10:a5:e3:3e:3a:3b:93:aa:b0:45:
                    53:c7:41:dd:2b:3a:b2:45:6b:c1:b6:52:ba:f3:24:
                    0f:3b:95:c7:4e:a1:7e:36:73:ac:ec:db:f3:59:23:
                    e1:51:6a:ea:7b:c6:23:d4:0e:27:fb:1e:66:db:55:
                    11:46:6d:6b:2f:84:03:fa:89:58:e7:99:12:3e:26:
                    d3:10:63:2a:34:bd:50:35:f6:bf:87:af:04:5f:c9:
                    e5:8e:bf:73:c3:b9:2c:74:60:af:0d:b3:74:ac:3c:
                    69:0b:3c:de:ee:b7:6a:3c:78:b2:f4:30:5b:77:b7:
                    eb:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:BB:70:BE:37:7D:27:A2:5C:22:29:FA:EC:2F:2F:4B:70:95:C9:8C
            X509v3 Authority Key Identifier:
                keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/-7twvjd9J6JcIin67C8vS3CVyYw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.147.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         71:f1:63:bd:14:7c:3d:35:39:50:74:4c:6c:bf:f4:c7:f6:2b:
         44:fd:ef:a0:20:61:ce:97:92:24:06:7f:d8:61:f7:16:55:51:
         09:08:03:7f:03:72:fe:6f:71:e0:2a:eb:e6:29:65:30:8c:1b:
         aa:02:d3:7d:6c:ad:79:47:a0:19:9f:ce:5e:41:47:2e:79:76:
         6e:7e:1f:f8:14:31:1b:fb:d3:51:6e:dd:e4:24:de:f4:dc:c3:
         46:2e:df:79:81:93:33:d5:87:1c:5c:37:a7:02:fd:92:a1:75:
         78:13:7a:c0:82:42:bc:32:58:0e:f7:9d:80:09:db:3c:0a:7c:
         b7:61:18:e6:10:82:0f:71:14:28:97:66:14:1f:b5:0a:41:e4:
         a2:ac:7a:82:a3:ba:bd:d5:e4:df:3c:59:44:24:2d:0d:af:0b:
         54:2e:8c:0a:4d:1c:d9:c9:74:f5:e2:0b:ad:ef:50:1c:cb:62:
         db:be:64:4a:b1:af:ec:84:73:2f:4d:8f:d7:bc:62:2d:17:23:
         3e:df:81:8e:71:47:9f:c0:c4:55:82:53:2b:b6:0f:85:49:b6:
         11:2f:d4:96:12:1b:1e:3d:d0:d3:17:3e:c0:fb:13:fb:1e:d5:
         03:e5:78:80:78:28:36:1c:aa:ed:19:8b:c9:f4:8e:ab:b7:37:
         ab:e7:8d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----