Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/T_nzxeIjrx-TuBukSExSM_Vapec.roa
File:                     T_nzxeIjrx-TuBukSExSM_Vapec.roa (raw, json)
Hash identifier:          /L6XVD9RJpcJ1AeLnB4FZEqtJQmyCSGgYod9ccx6Ak0=
Subject key identifier:   4F:F9:F3:C5:E2:23:AF:1F:93:B8:1B:A4:48:4C:52:33:F5:5A:A5:E7
Certificate issuer:       /CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Certificate serial:       0B34
Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/T_nzxeIjrx-TuBukSExSM_Vapec.roa
Signing time:             Thu 15 Dec 2022 02:13:51 +0000
ROA not before:           Thu 15 Dec 2022 02:13:51 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     18429
IP address blocks:        123.50.48.0/21 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2868 (0xb34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261
        Validity
            Not Before: Dec 15 02:13:51 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=4FF9F3C5E223AF1F93B81BA4484C5233F55AA5E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:5f:03:1a:e2:ae:31:a6:5a:d1:b1:4b:ca:30:
                    3b:cb:3c:7d:3a:5a:27:95:9e:c4:0c:69:50:65:9f:
                    df:3e:ca:5c:a8:2a:bf:2e:a9:d7:97:2d:fa:1a:60:
                    b0:20:fe:8c:57:5f:85:2a:db:e3:08:42:19:27:38:
                    1e:39:0f:dc:5c:c8:57:2b:f0:4d:49:21:30:72:fa:
                    c7:7c:8e:d9:18:29:7a:5f:ef:50:3d:bb:89:76:45:
                    b3:61:3a:0f:d5:04:03:08:ea:08:2b:78:7d:15:92:
                    77:b8:a1:5b:92:43:c4:06:57:86:e3:43:77:c8:9b:
                    eb:f0:1b:93:31:37:2b:1d:3b:74:09:02:8e:aa:76:
                    06:92:65:83:e2:e8:2d:76:dc:1d:d7:dc:97:a5:0b:
                    57:81:03:6d:9a:71:55:7c:cb:29:d3:57:08:bc:5d:
                    25:44:2d:83:f9:b2:81:2a:1e:6e:9c:85:2c:fe:61:
                    a3:43:b6:ac:1d:83:1c:a4:c5:90:d4:da:cf:59:43:
                    e9:80:14:20:40:63:ff:f4:3c:44:11:ef:a1:37:11:
                    74:e2:85:77:07:4c:9c:6b:b5:30:15:63:d2:f0:64:
                    9a:19:68:7d:f4:8a:8b:39:0a:2a:fc:0c:11:92:a7:
                    5a:f2:65:f9:72:da:17:47:48:7f:c0:f0:19:78:68:
                    3a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:F9:F3:C5:E2:23:AF:1F:93:B8:1B:A4:48:4C:52:33:F5:5A:A5:E7
            X509v3 Authority Key Identifier:
                keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/T_nzxeIjrx-TuBukSExSM_Vapec.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.50.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         93:4c:75:b3:8e:68:60:0e:49:55:1a:53:12:e3:ec:4c:09:a6:
         3c:ee:fe:f5:60:c2:01:4d:1c:42:fb:8e:a3:d0:73:d7:39:e5:
         1f:54:1c:1f:1c:28:33:35:e5:95:82:7e:6d:1b:41:77:bc:8f:
         1d:1f:8a:c8:e9:e0:97:a6:c6:bc:87:8b:b1:50:8e:52:06:75:
         ad:68:3b:64:fe:66:18:de:a5:74:1d:f0:74:fa:c0:32:1e:52:
         41:58:c3:50:01:aa:1d:f0:61:ec:79:ef:0f:ab:3b:c3:bd:ca:
         fd:19:e1:11:b1:4b:eb:46:fc:ad:04:df:ab:45:59:2c:b3:56:
         33:df:4f:4f:9b:55:03:61:ff:bd:91:d6:71:26:04:71:4e:46:
         2a:fd:6e:a2:37:68:22:2a:6d:39:c4:6b:ef:38:98:ae:6d:a4:
         ea:b2:7f:96:bb:16:9d:21:2e:ab:0a:da:3c:a7:c5:a8:4f:70:
         7d:87:5f:bb:95:6d:67:65:d6:01:6c:50:ca:57:51:e2:07:c2:
         e2:47:ec:4a:b3:09:c5:ac:bc:b8:37:91:a7:83:d6:f1:0a:b0:
         b4:c4:0a:b8:b2:42:c1:91:a7:43:e4:f9:dc:76:37:08:91:95:
         d7:6e:9f:2a:2b:63:d9:ee:c4:36:d8:7d:b2:98:1a:7d:3c:7f:
         c9:80:04:eb
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICCzQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUQx
RTNGM0M4QkE4OURDMTMxMDQxMDM0NUY1MEMxMDA3NjE4MTI2MTAeFw0yMjEyMTUw
MjEzNTFaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDRGRjlGM0M1RTIyM0FG
MUY5M0I4MUJBNDQ4NEM1MjMzRjU1QUE1RTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCfXwMa4q4xplrRsUvKMDvLPH06WieVnsQMaVBln98+ylyoKr8u
qdeXLfoaYLAg/oxXX4Uq2+MIQhknOB45D9xcyFcr8E1JITBy+sd8jtkYKXpf71A9
u4l2RbNhOg/VBAMI6ggreH0Vkne4oVuSQ8QGV4bjQ3fIm+vwG5MxNysdO3QJAo6q
dgaSZYPi6C123B3X3JelC1eBA22acVV8yynTVwi8XSVELYP5soEqHm6chSz+YaND
tqwdgxykxZDU2s9ZQ+mAFCBAY//0PEQR76E3EXTihXcHTJxrtTAVY9LwZJoZaH30
ios5Cir8DBGSp1ryZfly2hdHSH/A8Bl4aDqxAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUT/nzxeIjrx+TuBukSExSM/VapecwHwYDVR0jBBgwFoAUXR4/PIuoncExBBA0
X1DBAHYYEmEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0dORVQv
WFI0X1BJdW9uY0V4QkJBMFgxREJBSFlZRW1FLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9YUjRfUEl1b25jRXhCQkEwWDFEQkFIWVlFbUUuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DR05FVC9UX256eGVJanJ4LVR1QnVrU0V4
U01fVmFwZWMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDezIw
MA0GCSqGSIb3DQEBCwUAA4IBAQCTTHWzjmhgDklVGlMS4+xMCaY87v71YMIBTRxC
+46j0HPXOeUfVBwfHCgzNeWVgn5tG0F3vI8dH4rI6eCXpsa8h4uxUI5SBnWtaDtk
/mYY3qV0HfB0+sAyHlJBWMNQAaod8GHsee8PqzvDvcr9GeERsUvrRvytBN+rRVks
s1Yz309Pm1UDYf+9kdZxJgRxTkYq/W6iN2giKm05xGvvOJiubaTqsn+WuxadIS6r
Cto8p8WoT3B9h1+7lW1nZdYBbFDKV1HiB8LiR+xKswnFrLy4N5Gng9bxCrC0xAq4
skLBkadD5PncdjcIkZXXbp8qK2PZ7sQ22H2ymBp9PH/JgATr
-----END CERTIFICATE-----