Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DWT/3Qpx8ZclgWjqP6W5Vrg_gcabkFA.roa
File:                     3Qpx8ZclgWjqP6W5Vrg_gcabkFA.roa (raw, json)
Hash identifier:          gvhkbYYIsCUz19v9DSWX7ZSCfa/wX3JqeS8FIBON8lw=
Subject key identifier:   DD:0A:71:F1:97:25:81:68:EA:3F:A5:B9:56:B8:3F:81:C6:9B:90:50
Certificate issuer:       /CN=D4F0DD0F4FB801025D586EF999C5EEE02D7C2059
Certificate serial:       0D05
Authority key identifier: D4:F0:DD:0F:4F:B8:01:02:5D:58:6E:F9:99:C5:EE:E0:2D:7C:20:59
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1PDdD0-4AQJdWG75mcXu4C18IFk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/3Qpx8ZclgWjqP6W5Vrg_gcabkFA.roa
Signing time:             Thu 15 Sep 2022 02:37:08 +0000
ROA not before:           Thu 15 Sep 2022 02:37:08 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24168
IP address blocks:        2404:8cc0::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3333 (0xd05)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4F0DD0F4FB801025D586EF999C5EEE02D7C2059
        Validity
            Not Before: Sep 15 02:37:08 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=DD0A71F197258168EA3FA5B956B83F81C69B9050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ab:f2:55:a1:c5:86:f5:d1:4a:5a:6f:fa:9b:
                    c1:67:9a:c9:75:1c:76:c9:3f:2d:d6:25:cd:c6:b1:
                    9a:f8:85:2a:15:f3:17:35:4b:f5:7f:c5:45:92:1a:
                    a6:b6:71:d4:f2:33:a2:7f:ac:27:3f:8b:b5:db:f3:
                    ed:4d:03:25:87:bb:f2:dc:af:cc:34:c9:01:cc:66:
                    be:2e:a3:60:7e:0b:7a:76:c8:dc:8c:88:4b:1f:9f:
                    a9:31:f8:07:b1:f9:33:11:db:b3:07:ef:ba:d9:5b:
                    9d:1c:ac:06:79:4e:d3:53:9e:57:96:01:8a:4a:db:
                    4b:e1:93:11:a4:d5:bd:88:9d:e6:ba:c1:64:c5:81:
                    b2:ba:65:a0:5a:6a:0f:0c:50:bb:ee:c9:8c:e6:32:
                    5f:ac:a7:99:30:49:f8:d7:2c:dc:fc:25:85:b1:ea:
                    40:d8:92:66:ed:7c:13:89:ad:7c:13:34:09:6d:90:
                    f7:75:a6:a4:27:4b:71:26:d7:2a:80:64:f9:70:ed:
                    94:b9:41:c2:bb:ec:0e:bc:5b:cc:e8:9b:c2:1b:f0:
                    dc:6b:20:d4:80:d0:4c:0d:c9:14:43:f8:aa:bb:7c:
                    fc:3a:72:ed:f5:b4:a2:0b:58:a1:48:fe:72:7c:a7:
                    bb:f6:ff:e6:2c:c9:8f:3c:df:71:e5:26:be:0d:13:
                    9f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:0A:71:F1:97:25:81:68:EA:3F:A5:B9:56:B8:3F:81:C6:9B:90:50
            X509v3 Authority Key Identifier:
                keyid:D4:F0:DD:0F:4F:B8:01:02:5D:58:6E:F9:99:C5:EE:E0:2D:7C:20:59

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/1PDdD0-4AQJdWG75mcXu4C18IFk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1PDdD0-4AQJdWG75mcXu4C18IFk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/3Qpx8ZclgWjqP6W5Vrg_gcabkFA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:8cc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:74:a1:bd:a2:85:3b:48:ea:cb:ed:d9:ad:a1:59:1e:9c:7c:
         8e:77:e9:37:54:8c:2b:b1:1c:cc:9e:89:7d:dd:5b:e2:34:5d:
         a0:71:24:17:3d:7e:f7:10:cc:fc:ea:dd:96:a8:2d:8b:f4:6c:
         2c:d4:ab:ca:2d:2d:ce:c1:30:d0:e0:4c:8d:57:a9:4e:48:a1:
         6e:a1:82:d3:e8:89:3d:d8:cc:c7:28:a6:1b:52:6c:a0:b3:42:
         c8:69:33:b7:56:d5:9b:37:ac:ae:b1:96:bf:52:c3:45:37:98:
         59:e0:87:22:9c:d0:b4:77:5a:f9:49:6b:d0:09:19:da:99:7e:
         08:4a:6c:27:aa:cc:fb:a1:2d:75:38:2a:f4:16:14:00:2a:a2:
         f9:04:fa:f1:74:ae:58:4d:9d:3c:4d:12:73:96:61:ad:b1:62:
         85:4e:46:84:f9:3b:7f:90:69:a3:24:01:3a:f7:7d:5d:50:94:
         3d:75:e1:78:90:1c:ec:77:46:d1:4f:77:cc:ec:13:a5:e1:4c:
         3f:3b:b7:ef:a9:c6:6f:6f:d6:4f:ce:80:f3:2e:52:ff:9d:68:
         18:d6:a5:94:b4:a5:37:f3:eb:11:13:80:85:3c:07:95:f6:42:
         78:6f:17:3d:a7:e9:f4:1e:e0:ac:91:2f:1d:e4:ee:fd:37:b4:
         c8:86:de:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----