Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/qrE8CDWfQYPTF8lk8l_14yIT82g.roa
File:                     qrE8CDWfQYPTF8lk8l_14yIT82g.roa (raw, json)
Hash identifier:          wEf55c1XMYkCzIpavidcz9zDJOCHWE2f19dTWfHECZA=
Subject key identifier:   AA:B1:3C:08:35:9F:41:83:D3:17:C9:64:F2:5F:F5:E3:22:13:F3:68
Certificate issuer:       /CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Certificate serial:       0AEB
Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/qrE8CDWfQYPTF8lk8l_14yIT82g.roa
Signing time:             Thu 15 Sep 2022 02:49:28 +0000
ROA not before:           Thu 15 Sep 2022 02:49:28 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     18429
IP address blocks:        27.147.16.0/21 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2795 (0xaeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261
        Validity
            Not Before: Sep 15 02:49:28 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=AAB13C08359F4183D317C964F25FF5E32213F368
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:cd:16:8e:4c:55:2f:01:a3:78:d9:36:48:90:
                    3d:73:b0:8a:cd:4c:a5:a0:04:72:d4:9d:61:64:b7:
                    96:0b:4e:d5:9e:16:a1:3c:41:d1:53:f3:09:4c:13:
                    80:ea:f1:89:85:ce:ec:01:f7:de:36:bd:64:7f:a1:
                    42:63:48:98:65:8c:76:84:93:43:66:ed:ec:9a:cc:
                    73:fd:f3:6b:de:79:97:db:18:66:4e:32:60:c4:82:
                    a6:3a:2b:7a:a2:13:c5:6b:7b:0e:6e:d4:35:d7:06:
                    33:71:6b:ea:d1:92:70:75:8d:09:e8:7b:61:d7:ec:
                    5f:2a:44:07:e3:95:ae:3f:e6:c6:e4:42:0a:bf:e7:
                    37:da:d1:94:bd:34:3c:a7:4a:4d:d7:8a:b9:40:ec:
                    a3:da:bc:7a:6e:82:aa:42:1c:5a:83:4c:12:92:bd:
                    a2:97:a7:fd:1f:4e:e7:b1:fe:4d:04:86:97:58:cb:
                    5d:e4:0d:ab:8b:b7:3c:79:93:cd:b5:e6:88:fb:6f:
                    6d:7b:95:59:0d:0b:18:06:d7:cf:02:4d:8e:00:e2:
                    db:60:1b:90:28:58:65:84:70:96:8b:e4:6e:27:0b:
                    95:3b:bb:56:60:c2:a5:5e:77:ac:18:34:14:f6:89:
                    f7:f4:ff:b7:77:c6:f8:60:b7:82:a4:54:72:32:0a:
                    75:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:B1:3C:08:35:9F:41:83:D3:17:C9:64:F2:5F:F5:E3:22:13:F3:68
            X509v3 Authority Key Identifier:
                keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/qrE8CDWfQYPTF8lk8l_14yIT82g.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.147.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         28:2a:74:00:00:79:61:10:d3:74:39:dc:f7:0d:fb:33:a1:ef:
         ea:30:d0:ea:07:28:76:72:51:6a:77:4a:c0:d3:1c:45:74:33:
         26:51:e1:87:97:54:7a:a4:da:49:46:7f:b2:5a:51:fd:6d:c5:
         41:89:3a:16:d4:53:51:13:d6:49:e2:e1:14:12:77:52:ac:e1:
         68:59:70:77:3e:b1:1f:07:ff:53:13:fa:80:a8:9b:87:53:c3:
         77:b6:db:85:ce:0f:99:7c:9b:42:88:6e:48:f8:77:c2:14:d8:
         2c:ef:27:67:42:ac:77:6d:0b:53:63:11:19:18:17:52:2d:bf:
         67:9a:10:76:17:7f:43:db:06:a8:5e:07:b3:e3:dd:74:4a:1c:
         53:5b:11:6b:ff:40:d9:48:a9:04:c5:c9:74:65:60:57:d8:0c:
         e1:d2:f9:8e:36:d8:53:99:58:bb:85:26:63:ef:cc:66:e4:5c:
         d1:32:8c:77:66:f7:9e:fc:e4:94:a6:2b:fe:18:2c:9e:fa:bb:
         3f:67:fb:ca:0f:57:f6:cb:ea:91:c8:1e:0d:22:ba:e4:66:55:
         6f:11:d2:00:86:82:eb:ea:97:ec:98:ec:23:b5:62:67:bc:4a:
         5f:ea:b0:49:3b:4a:96:c5:cc:31:06:5f:cf:18:2b:99:4b:ac:
         e6:b4:08:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----