Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/uOsHphGDe5ThkkQlzZQeLMV2xpA.roa
File:                     uOsHphGDe5ThkkQlzZQeLMV2xpA.roa (raw, json)
Hash identifier:          kULOC5/hPp1WRmEFRR2zboeMin0eggsvuqLxfs066UY=
Subject key identifier:   B8:EB:07:A6:11:83:7B:94:E1:92:44:25:CD:94:1E:2C:C5:76:C6:90
Certificate issuer:       /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial:       0BFC
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/uOsHphGDe5ThkkQlzZQeLMV2xpA.roa
Signing time:             Thu 15 Sep 2022 02:37:31 +0000
ROA not before:           Thu 15 Sep 2022 02:37:31 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     17809
IP address blocks:        203.222.24.0/21 maxlen: 21

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3068 (0xbfc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
        Validity
            Not Before: Sep 15 02:37:31 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=B8EB07A611837B94E1924425CD941E2CC576C690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:2d:18:34:a8:70:21:30:2f:8f:40:11:5e:d3:
                    ed:8c:86:65:52:0b:b6:e8:df:18:ce:a2:3a:a9:f5:
                    d9:d5:f1:bc:1f:7d:0c:60:ce:62:a5:58:09:1a:9d:
                    c0:7c:ab:8a:bf:cf:b7:2f:c2:ae:c6:d6:8f:b2:8d:
                    43:e2:5f:cb:3e:d7:1c:0c:af:11:ab:ae:be:92:9a:
                    18:86:de:3b:58:5c:ba:4a:90:11:e9:20:85:fc:a9:
                    fd:92:5c:e3:f6:af:fb:94:2e:d5:9b:44:fb:af:98:
                    d7:8a:17:5a:be:12:b2:85:41:d7:a0:4a:bf:21:10:
                    f7:80:e5:69:20:0a:ba:63:d7:13:83:6d:49:e2:51:
                    99:85:82:e3:59:b9:98:8f:2e:5f:ae:40:46:63:68:
                    ae:ae:1e:70:33:7e:b0:57:c7:f8:68:75:f1:25:56:
                    24:88:4b:c6:2b:d5:74:60:85:ab:8f:22:95:d3:89:
                    66:e9:bd:49:bf:26:49:ca:c6:c8:86:aa:bf:01:1b:
                    28:53:b4:61:46:db:e0:4a:fb:da:d1:b8:af:67:7a:
                    84:46:5d:59:48:d6:43:d5:71:20:73:66:00:4d:d5:
                    5a:a9:a7:54:14:71:63:ea:47:bc:31:89:e5:36:f4:
                    2a:48:91:ff:05:e6:68:00:40:fe:03:7d:ed:94:9c:
                    77:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:EB:07:A6:11:83:7B:94:E1:92:44:25:CD:94:1E:2C:C5:76:C6:90
            X509v3 Authority Key Identifier:
                keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/uOsHphGDe5ThkkQlzZQeLMV2xpA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.222.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4c:cb:fd:3d:e7:ca:a1:40:10:7d:cc:59:20:6c:28:f4:91:7d:
         6b:a7:7f:3d:5c:e8:1c:a4:c6:82:30:d0:dc:e0:f0:8d:41:dc:
         2e:f3:44:b4:a8:ac:3a:42:48:07:af:04:5c:55:b4:a7:9a:3c:
         f0:ac:a3:8a:26:c9:1f:d1:10:62:84:46:3b:e5:1d:5f:8b:e1:
         69:42:82:ab:1a:5c:a1:c1:00:e5:98:74:5a:4b:97:d1:3f:d8:
         34:36:72:36:46:40:de:22:56:fb:ed:bf:3a:60:0d:55:86:44:
         5f:e1:7c:1d:5c:bb:92:9f:90:f2:d8:5e:9a:86:db:c9:0d:c3:
         25:5a:0e:37:35:a7:17:ef:ae:08:60:75:fa:0c:5e:f4:c2:29:
         e2:51:97:08:ce:0e:50:b8:05:ae:5a:bc:44:13:42:06:6a:7b:
         54:50:2c:cc:19:16:37:14:0a:c9:71:bd:fd:72:38:0d:0e:2f:
         a6:60:1f:ed:9e:9d:65:cd:01:11:a5:4a:d7:15:7c:e2:c9:10:
         89:59:36:8b:60:15:0c:b0:27:66:62:44:29:04:b5:e7:a9:4f:
         ce:a8:6f:bc:8c:c1:38:4b:69:31:76:cb:d8:68:2b:68:24:80:
         c2:06:68:54:56:ba:cd:66:01:56:c4:cc:20:54:24:d5:61:83:
         cb:80:9c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----