Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/jYk4jKi-ADapHUtzOS-ZNeFPIPo.roa
File:                     jYk4jKi-ADapHUtzOS-ZNeFPIPo.roa (raw, json)
Hash identifier:          n7qvrCUl8WRaCAeu6XabUHj519xr+bfxep5HG3tqdr0=
Subject key identifier:   8D:89:38:8C:A8:BE:00:36:A9:1D:4B:73:39:2F:99:35:E1:4F:20:FA
Certificate issuer:       /CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Certificate serial:       0AEB
Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/jYk4jKi-ADapHUtzOS-ZNeFPIPo.roa
Signing time:             Thu 15 Sep 2022 02:49:32 +0000
ROA not before:           Thu 15 Sep 2022 02:49:32 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     18429
IP address blocks:        123.50.61.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2795 (0xaeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261
        Validity
            Not Before: Sep 15 02:49:32 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=8D89388CA8BE0036A91D4B73392F9935E14F20FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:59:67:8e:bc:89:93:e7:b3:4c:79:f3:21:bc:
                    9f:fc:a7:55:8c:9e:01:8c:eb:9c:e1:55:ab:40:30:
                    b8:07:1b:f9:eb:70:83:05:93:63:ca:85:58:e2:a9:
                    26:fc:5d:81:a4:e0:cb:93:14:86:29:aa:04:62:8b:
                    70:4b:0d:c5:dc:0b:9c:1e:6b:d8:89:b3:fa:e4:f0:
                    e3:30:c7:0f:65:c5:69:ec:ce:f3:02:a6:dc:35:85:
                    cd:d2:b1:81:6f:bd:ce:95:a8:3f:76:f1:7d:ea:1c:
                    2b:62:c9:7b:e8:b9:d4:fa:54:60:79:6b:6c:7b:51:
                    d4:55:9a:ba:82:7c:86:9c:5c:32:42:c3:40:b4:56:
                    5c:45:47:76:f1:a8:9f:67:45:f9:e1:00:68:6d:85:
                    77:e9:dd:a9:a6:6a:55:87:d9:7a:bd:da:e3:51:63:
                    d6:bf:8d:00:f8:3f:32:3d:28:ab:d2:f7:86:81:83:
                    39:46:d3:cb:f9:c5:4e:1f:45:38:69:3c:51:3f:8a:
                    f7:83:2a:23:6d:3d:27:7f:5a:c0:17:d6:81:cf:2c:
                    9a:4d:b5:08:4b:4c:1a:04:cf:0b:52:ea:5e:bd:4b:
                    bc:12:8c:66:32:57:09:17:ab:20:a3:51:55:26:e4:
                    4c:a5:4d:28:3e:4f:44:70:f0:ba:59:d3:a9:b5:ef:
                    40:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:89:38:8C:A8:BE:00:36:A9:1D:4B:73:39:2F:99:35:E1:4F:20:FA
            X509v3 Authority Key Identifier:
                keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/jYk4jKi-ADapHUtzOS-ZNeFPIPo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.50.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:9e:28:0b:f3:36:bb:f8:ce:4b:ef:d2:09:c1:2f:2d:fc:f3:
         29:8b:83:f1:50:3d:98:c0:fd:14:4e:c8:09:2e:22:b6:44:02:
         dd:26:6f:fe:6f:5c:1e:18:00:70:98:72:8f:3b:6e:40:af:ab:
         b0:a2:83:06:be:d3:2b:c8:79:1d:0a:4d:ab:13:cc:48:3b:28:
         fa:b8:cd:69:33:14:6f:f0:47:88:cd:42:f0:b9:e6:ac:0c:62:
         c1:4e:18:5f:42:88:f9:61:74:61:3e:d6:13:3c:3f:50:19:dd:
         f9:87:18:d1:7f:79:d8:e1:1e:fe:3e:5d:48:63:c8:7d:7a:2d:
         3f:f2:b7:14:d8:50:64:a0:28:87:93:97:fb:09:cc:04:e4:9f:
         1a:c9:91:04:4d:8b:14:48:bd:8b:64:6a:72:a7:de:e9:ee:64:
         a3:bd:38:24:ca:a8:9d:52:50:a2:df:07:38:ca:16:f4:8b:18:
         d9:c2:8d:8a:3a:e4:cb:d7:ab:a1:bf:09:c2:08:fa:69:3f:19:
         b4:92:9e:ae:17:16:91:c1:3f:88:4c:5d:fa:d7:df:25:e3:a3:
         23:5e:d8:f7:50:b0:28:0e:12:df:07:9b:a7:1d:b1:29:64:96:
         aa:e5:93:79:d4:ed:ed:81:e5:79:59:19:60:7a:89:6d:a0:4c:
         b4:25:9f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----