Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/u7l5kSBw3tKMgDD7ce1bVA4B8OQ.roa
File:                     u7l5kSBw3tKMgDD7ce1bVA4B8OQ.roa (raw, json)
Hash identifier:          t0RounEtXsQQsdEOrEmJJP0yV+his9JBPSyIGDIXvmY=
Subject key identifier:   BB:B9:79:91:20:70:DE:D2:8C:80:30:FB:71:ED:5B:54:0E:01:F0:E4
Certificate issuer:       /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial:       0BFC
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/u7l5kSBw3tKMgDD7ce1bVA4B8OQ.roa
Signing time:             Thu 15 Sep 2022 02:37:30 +0000
ROA not before:           Thu 15 Sep 2022 02:37:30 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     17809
IP address blocks:        203.222.0.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3068 (0xbfc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
        Validity
            Not Before: Sep 15 02:37:30 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=BBB979912070DED28C8030FB71ED5B540E01F0E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a2:fc:83:07:f7:52:0e:6f:58:40:aa:0f:5a:
                    cc:94:c3:90:bb:1d:00:a5:82:df:85:51:ae:82:91:
                    b7:57:6c:58:36:c4:1e:90:16:cd:46:f6:41:7a:25:
                    0f:e1:4b:1d:0b:d8:28:f0:98:c6:56:5a:87:15:c1:
                    8b:b5:b4:88:c6:33:01:cf:20:79:b0:b9:55:b4:e3:
                    5b:ba:43:4d:e3:b1:ae:f7:de:4f:c2:55:d8:f5:47:
                    7c:1e:3c:b4:10:f8:bb:34:1f:44:5c:62:a9:7e:b6:
                    4a:94:a0:7c:0f:7e:21:1a:f2:94:d7:c0:54:e8:16:
                    91:3b:be:32:7f:12:e2:d3:6d:51:eb:54:0f:e4:d0:
                    df:10:bf:49:9c:01:38:e4:f4:e5:b0:51:e7:68:6e:
                    c2:bc:91:e2:a0:c4:4b:81:dd:9f:33:d9:e8:97:b5:
                    df:f3:9c:78:60:b3:3c:56:6d:df:bf:d7:b3:e2:50:
                    3b:55:1e:02:4f:61:80:5a:26:b7:0c:38:b3:bb:81:
                    b1:1e:5d:4a:ee:7c:14:83:8c:d1:db:f3:38:89:61:
                    54:11:1b:07:76:42:80:56:2c:55:21:cf:58:a1:26:
                    6d:3a:b9:b1:e0:eb:0a:61:11:05:1a:36:23:3b:11:
                    37:fe:25:43:90:74:17:4c:49:cd:39:e7:bf:c9:6d:
                    14:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:B9:79:91:20:70:DE:D2:8C:80:30:FB:71:ED:5B:54:0E:01:F0:E4
            X509v3 Authority Key Identifier:
                keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/u7l5kSBw3tKMgDD7ce1bVA4B8OQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.222.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:2f:5c:81:19:64:ee:4c:cc:1c:ed:fd:9e:0c:1d:99:0a:21:
         58:1c:50:51:30:16:9a:14:7b:b8:48:79:fa:fd:ac:20:b7:0d:
         52:41:6b:2a:e9:cd:ae:86:44:93:06:86:e8:40:85:b0:b3:d0:
         3d:dc:b2:d6:97:c2:01:a5:34:92:78:63:01:74:93:72:0a:0c:
         d6:be:ac:87:89:b3:c3:2d:92:4b:2d:06:39:81:ac:28:7e:c5:
         be:fc:89:bf:8b:6b:28:85:b0:a0:7e:32:14:e2:fe:92:8d:c6:
         88:b5:da:e1:72:44:eb:e8:3f:01:8c:f9:b2:1c:75:85:52:3c:
         8c:b9:47:99:9a:28:48:6c:c1:2c:df:b3:df:51:7d:09:a7:f4:
         dc:b9:60:22:c6:aa:e9:75:ee:14:01:18:ac:67:ec:89:96:66:
         98:38:2d:ff:6d:2b:78:70:ce:07:04:f0:67:7e:d2:e3:93:62:
         80:b4:6c:fd:ff:de:6b:33:ba:33:48:a5:dd:bc:2e:e1:ee:66:
         65:0f:8c:6e:d1:72:c4:39:96:f7:6e:d0:af:c2:2e:8c:c2:7c:
         05:3d:f4:aa:04:fc:0a:2d:74:63:93:db:bc:cc:09:67:7f:a1:
         ed:14:d5:52:46:a3:c2:c5:1e:d7:58:78:f1:2c:15:8e:a3:e5:
         63:35:af:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----