Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/gZSLQs24U1Kocg7xEKrRu2lOGGE.roa
File:                     gZSLQs24U1Kocg7xEKrRu2lOGGE.roa (raw, json)
Hash identifier:          ysHQxltcJrJoE3TE1eAkCIyKREwQ0IZSvb0PK25Yars=
Subject key identifier:   81:94:8B:42:CD:B8:53:52:A8:72:0E:F1:10:AA:D1:BB:69:4E:18:61
Certificate issuer:       /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial:       0BFC
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/gZSLQs24U1Kocg7xEKrRu2lOGGE.roa
Signing time:             Thu 15 Sep 2022 02:37:23 +0000
ROA not before:           Thu 15 Sep 2022 02:37:23 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     17809
IP address blocks:        121.254.120.0/21 maxlen: 21

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3068 (0xbfc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
        Validity
            Not Before: Sep 15 02:37:23 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=81948B42CDB85352A8720EF110AAD1BB694E1861
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9e:19:d0:f6:1d:29:c7:65:dc:c7:5c:5c:37:
                    bb:e1:4c:f4:df:5f:2f:0b:94:db:a9:80:30:ee:4b:
                    ab:e0:c3:18:35:93:9a:aa:ac:69:44:ca:d0:c6:45:
                    9d:55:cc:82:e5:ec:09:7f:63:be:1f:23:6f:3b:e3:
                    e4:20:19:ba:97:58:05:7e:5e:48:3f:54:66:a6:fa:
                    dd:58:83:81:c3:25:5a:c9:7e:40:d6:ce:07:b7:11:
                    9e:f6:ba:4d:f6:9c:3d:09:c7:56:89:a5:cc:5e:2d:
                    b2:bf:73:5e:a1:35:1e:21:fb:d6:85:8e:58:c3:a3:
                    a2:28:99:0b:8f:24:71:ee:61:4b:a8:3d:fd:1b:a4:
                    0e:62:e9:27:62:78:73:e8:d6:27:1e:56:a7:f9:cc:
                    5f:fc:4f:0e:65:47:87:26:29:f0:a1:24:96:3a:9c:
                    13:af:a1:1b:e4:96:c4:4b:70:19:0e:16:76:f2:c3:
                    86:3e:3c:33:52:40:7f:ea:29:cc:b2:bb:57:af:7a:
                    92:f9:b2:91:18:97:22:23:01:39:b0:25:29:48:dc:
                    c3:8a:59:fd:e0:9d:0e:2e:22:a4:02:53:47:9d:a1:
                    e6:38:f1:3e:94:5b:89:fb:20:7c:6e:dc:8a:dc:cc:
                    80:0b:34:6f:de:ab:1a:38:4b:28:c1:0d:2f:46:66:
                    b5:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:94:8B:42:CD:B8:53:52:A8:72:0E:F1:10:AA:D1:BB:69:4E:18:61
            X509v3 Authority Key Identifier:
                keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/gZSLQs24U1Kocg7xEKrRu2lOGGE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.254.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         91:69:b2:66:0b:0d:06:f1:f2:25:b2:7a:0f:1c:66:dc:20:7c:
         4d:dd:67:91:64:90:45:b3:75:3c:08:43:bd:f2:d9:18:e8:45:
         50:16:07:81:16:76:b3:06:ae:52:d5:f9:ec:af:92:55:bd:57:
         32:ee:0f:c7:55:ea:a2:b2:bc:fb:55:bb:16:29:7c:8e:de:c6:
         12:67:9d:25:ce:3b:3f:c9:b2:da:c1:b2:28:4e:9d:0e:19:78:
         be:0a:d2:98:4e:31:4d:dc:76:74:8f:67:74:8a:c4:ff:f3:86:
         61:ea:08:7a:34:fd:78:8a:51:0e:9f:d6:37:61:8b:45:be:42:
         aa:e8:79:88:a3:0f:fd:9c:9c:86:79:4a:04:11:c0:6f:97:c0:
         40:0a:d6:e4:43:3f:50:61:11:ad:5b:5f:02:0d:9c:4d:bd:0e:
         40:a3:e7:d4:c8:94:d1:57:ca:2c:d7:4a:74:31:c1:f2:94:a3:
         65:81:03:14:3c:d5:7d:3c:51:44:0d:aa:f8:02:99:54:6a:a2:
         ed:35:2c:d8:c8:b8:20:59:ee:0b:dd:2b:1d:ac:36:5c:a1:da:
         31:ed:61:93:b4:22:04:a3:64:a7:c2:df:ed:6b:8b:a0:af:86:
         72:55:f0:b3:12:d4:fd:4c:f2:fd:06:c2:0f:7b:15:17:39:8f:
         c2:a5:3a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----