Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/xbMvAX4xlRgWeqMO5Zfq4dR8OTk.roa
File:                     xbMvAX4xlRgWeqMO5Zfq4dR8OTk.roa (raw, json)
Hash identifier:          5sje8/LUIKRZvzJWuchQJ7nVTOndIhgDHdy1mTKTCbU=
Subject key identifier:   C5:B3:2F:01:7E:31:95:18:16:7A:A3:0E:E5:97:EA:E1:D4:7C:39:39
Certificate issuer:       /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial:       0D8D
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/xbMvAX4xlRgWeqMO5Zfq4dR8OTk.roa
Signing time:             Mon 31 Jul 2023 03:00:15 +0000
ROA not before:           Mon 31 Jul 2023 03:00:15 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     17809
IP address blocks:        113.61.174.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3469 (0xd8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
        Validity
            Not Before: Jul 31 03:00:15 2023 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=C5B32F017E319518167AA30EE597EAE1D47C3939
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:93:ca:fa:d5:54:4a:53:fc:ff:b4:56:c2:bc:
                    af:c6:ce:54:e2:b2:ed:5a:69:e8:4e:19:51:e4:42:
                    75:4d:00:39:85:8c:b2:1b:84:39:47:ca:20:ee:ea:
                    91:21:47:61:ef:dd:26:8d:fe:08:a5:6a:73:45:69:
                    96:5b:8e:e1:fb:69:53:e7:be:e5:16:f8:b7:b9:f3:
                    ed:ca:e6:a7:ab:1e:f8:1f:6d:f5:02:49:e4:52:ce:
                    d1:03:c0:9a:dc:42:d7:9c:6d:71:e1:b8:11:ea:45:
                    0d:fb:fc:bd:fb:82:d2:f6:05:d9:5f:fe:3a:7f:b1:
                    16:9a:c9:44:05:1f:c2:24:fe:36:40:1b:04:b9:b6:
                    78:35:fb:cd:e3:ef:be:d0:55:25:e8:74:6d:72:8b:
                    7b:55:6d:75:52:5b:53:5c:50:f5:09:1c:84:aa:32:
                    9e:8a:3c:e3:e1:e9:78:5e:1e:cc:04:6f:4a:a2:ab:
                    78:c8:db:54:22:f5:9b:8a:7c:5e:50:1e:5d:9b:ee:
                    aa:bf:44:a0:44:0c:d9:9c:0e:f8:77:64:c1:f0:88:
                    cd:16:36:49:11:44:63:eb:da:ac:35:97:29:e0:ea:
                    cf:ab:e5:84:63:18:b6:51:80:86:82:22:34:fe:aa:
                    b9:2c:de:7f:d9:00:cf:73:12:7e:64:19:e3:6f:fc:
                    c0:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:B3:2F:01:7E:31:95:18:16:7A:A3:0E:E5:97:EA:E1:D4:7C:39:39
            X509v3 Authority Key Identifier:
                keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/xbMvAX4xlRgWeqMO5Zfq4dR8OTk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.61.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:f8:c5:9b:e3:53:ec:bf:f0:28:b5:cb:99:08:10:8e:56:a7:
         2e:01:a7:5b:d3:3e:b5:69:d4:b0:7d:68:ab:bb:83:77:a3:69:
         a5:e3:de:5f:b6:2c:56:81:ef:fb:59:66:df:5e:4a:45:f3:e4:
         f4:c7:b1:dc:9b:79:0b:80:0b:53:f1:9d:2c:02:5c:f7:5e:d7:
         c5:73:94:fd:39:42:76:fd:ac:20:ec:c9:ae:58:e5:2c:38:25:
         1b:db:41:10:3c:4a:77:0a:a4:49:37:8a:32:0a:ad:c3:d8:41:
         27:a3:9a:86:4d:c2:a5:29:11:27:04:31:2b:26:08:c4:f0:70:
         fc:0e:f3:cc:1a:16:16:5e:5d:3e:f6:98:6b:38:86:1d:49:dd:
         d1:44:6b:55:10:68:fa:8d:c1:30:bd:f1:bc:6e:c1:f2:66:cc:
         2b:5c:83:4f:54:87:cc:3a:a7:06:51:1b:4d:30:96:2a:e7:0e:
         4d:39:c9:f1:10:bf:5b:1b:9b:27:f8:24:1a:02:65:e0:85:0c:
         d3:fe:5d:4e:a8:53:9b:88:48:c9:7a:d5:6a:b1:79:aa:46:3e:
         3f:d6:cf:0c:cc:b5:0d:e4:0b:dd:9f:82:92:83:9c:90:3b:30:
         32:71:29:b0:02:92:84:e7:00:f9:6a:d6:a7:9b:0a:36:c2:e4:
         11:00:4d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----