Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/efMRhNDT6B3kUuW4F0kzQUjDe-Q.roa
File:                     efMRhNDT6B3kUuW4F0kzQUjDe-Q.roa (raw, json)
Hash identifier:          QI4gozOKZk6AYhKmi4R51Aljy2Bo4MfhmzKlaRzcr3Q=
Subject key identifier:   79:F3:11:84:D0:D3:E8:1D:E4:52:E5:B8:17:49:33:41:48:C3:7B:E4
Certificate issuer:       /CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Certificate serial:       0AEB
Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/efMRhNDT6B3kUuW4F0kzQUjDe-Q.roa
Signing time:             Thu 15 Sep 2022 02:49:28 +0000
ROA not before:           Thu 15 Sep 2022 02:49:28 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     18429
IP address blocks:        45.64.232.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2795 (0xaeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261
        Validity
            Not Before: Sep 15 02:49:28 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=79F31184D0D3E81DE452E5B81749334148C37BE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:66:73:06:3d:ed:34:f9:69:48:57:c6:da:d4:
                    51:63:a5:b1:c1:d0:f1:82:8a:c5:7a:19:02:62:8e:
                    00:00:f7:fc:b3:ca:96:18:5d:3e:9f:9b:86:92:ef:
                    39:c3:9d:bd:a2:71:c0:75:e2:4f:70:00:26:ac:89:
                    71:1e:5a:ea:8b:8e:12:4f:04:c1:df:f2:7e:bc:41:
                    d4:27:c8:31:a6:64:b1:4a:f0:bd:fc:88:da:6d:71:
                    64:42:55:08:06:22:b3:72:e0:88:9a:95:9b:dd:f0:
                    ad:f6:12:ea:eb:b2:af:e6:56:85:20:c5:7e:51:0f:
                    ee:ff:5e:ec:d4:5e:58:2a:86:4e:cc:ed:25:03:9b:
                    93:ee:95:7a:1d:fe:a2:e1:69:f3:d5:91:82:19:90:
                    4c:07:b5:e9:e2:83:a7:54:e9:3e:04:71:e8:47:97:
                    9b:ac:40:bf:0b:c6:e0:6b:a6:21:29:19:12:a9:3c:
                    d6:b7:55:aa:59:53:4f:73:b9:d6:cf:91:8a:75:e7:
                    cf:db:af:22:8e:e2:95:83:1b:99:87:8e:3a:98:92:
                    48:1f:e7:46:42:54:61:fc:c3:b0:ca:96:a6:d4:7e:
                    2a:85:04:a0:cf:da:84:1e:1b:b8:93:c6:fc:72:95:
                    25:71:ab:cd:ee:f3:be:60:8e:e2:5a:98:dc:65:9d:
                    f3:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:F3:11:84:D0:D3:E8:1D:E4:52:E5:B8:17:49:33:41:48:C3:7B:E4
            X509v3 Authority Key Identifier:
                keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/efMRhNDT6B3kUuW4F0kzQUjDe-Q.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.64.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:1b:45:4b:5a:ba:dd:39:05:6b:39:23:19:71:c9:3d:d4:06:
         30:4b:cf:ea:87:75:29:83:09:48:6e:ff:fb:31:20:af:94:63:
         b9:a3:0c:7a:e8:62:87:9b:fc:5f:2f:24:f2:7a:ef:d8:47:a3:
         8a:14:b0:75:3f:37:e3:54:2f:f6:83:17:97:87:d7:88:a5:0f:
         57:15:6f:18:ec:1e:f3:8b:56:26:3f:31:06:fe:bb:16:81:ab:
         e3:82:b0:8c:02:e6:d4:28:64:29:05:f0:17:c3:98:d7:9b:d5:
         3e:50:0d:86:8c:92:14:cd:25:96:3c:ab:13:18:fd:bc:a7:25:
         16:f9:bb:47:30:77:ba:0b:a5:6a:61:e4:dc:b9:df:2a:65:1b:
         cd:5d:ad:68:5b:4f:e4:9a:33:d1:0c:d4:a6:32:66:b8:f5:fe:
         5d:2b:17:3d:32:d4:eb:61:9f:e6:07:68:38:73:8e:95:60:08:
         48:36:e3:87:3d:bb:ec:cc:8c:5a:2b:15:c5:ed:16:58:c3:83:
         5c:b8:7a:e1:f8:02:ed:1e:4f:8e:b9:ba:79:1d:40:8d:b5:46:
         88:f7:47:16:03:05:cf:e8:c2:31:11:9c:a5:83:79:9a:c2:d7:
         ac:00:0c:a1:fe:79:82:03:b4:29:0f:db:e0:0c:17:da:c7:86:
         b5:45:7c:c4
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICCuswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUQx
RTNGM0M4QkE4OURDMTMxMDQxMDM0NUY1MEMxMDA3NjE4MTI2MTAeFw0yMjA5MTUw
MjQ5MjhaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDc5RjMxMTg0RDBEM0U4
MURFNDUyRTVCODE3NDkzMzQxNDhDMzdCRTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCpZnMGPe00+WlIV8ba1FFjpbHB0PGCisV6GQJijgAA9/yzypYY
XT6fm4aS7znDnb2iccB14k9wACasiXEeWuqLjhJPBMHf8n68QdQnyDGmZLFK8L38
iNptcWRCVQgGIrNy4IialZvd8K32Eurrsq/mVoUgxX5RD+7/XuzUXlgqhk7M7SUD
m5PulXod/qLhafPVkYIZkEwHtenig6dU6T4EcehHl5usQL8LxuBrpiEpGRKpPNa3
VapZU09zudbPkYp158/bryKO4pWDG5mHjjqYkkgf50ZCVGH8w7DKlqbUfiqFBKDP
2oQeG7iTxvxylSVxq83u875gjuJamNxlnfPVAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUefMRhNDT6B3kUuW4F0kzQUjDe+QwHwYDVR0jBBgwFoAUXR4/PIuoncExBBA0
X1DBAHYYEmEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0dORVQv
WFI0X1BJdW9uY0V4QkJBMFgxREJBSFlZRW1FLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9YUjRfUEl1b25jRXhCQkEwWDFEQkFIWVlFbUUuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DR05FVC9lZk1SaE5EVDZCM2tVdVc0RjBr
elFVakRlLVEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLUDo
MA0GCSqGSIb3DQEBCwUAA4IBAQAmG0VLWrrdOQVrOSMZcck91AYwS8/qh3UpgwlI
bv/7MSCvlGO5owx66GKHm/xfLyTyeu/YR6OKFLB1PzfjVC/2gxeXh9eIpQ9XFW8Y
7B7zi1YmPzEG/rsWgavjgrCMAubUKGQpBfAXw5jXm9U+UA2GjJIUzSWWPKsTGP28
pyUW+btHMHe6C6VqYeTcud8qZRvNXa1oW0/kmjPRDNSmMma49f5dKxc9MtTrYZ/m
B2g4c46VYAhINuOHPbvszIxaKxXF7RZYw4NcuHrh+ALtHk+Oubp5HUCNtUaI90cW
AwXP6MIxEZylg3mawtesAAyh/nmCA7QpD9vgDBfax4a1RXzE
-----END CERTIFICATE-----