Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/7Jzoo28_GigajdsDU81MWDwlxy0.roa
File:                     7Jzoo28_GigajdsDU81MWDwlxy0.roa (raw, json)
Hash identifier:          q2FN7WZI4ZFjAWpQPl4xJlT9j9LzB/IaH15GsBEObtQ=
Subject key identifier:   EC:9C:E8:A3:6F:3F:1A:28:1A:8D:DB:03:53:CD:4C:58:3C:25:C7:2D
Certificate issuer:       /CN=00DCF050C4CEAE5021AA8D311953F02D6121FD8D
Certificate serial:       011C
Authority key identifier: 00:DC:F0:50:C4:CE:AE:50:21:AA:8D:31:19:53:F0:2D:61:21:FD:8D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/ANzwUMTOrlAhqo0xGVPwLWEh_Y0.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/7Jzoo28_GigajdsDU81MWDwlxy0.roa
Signing time:             Thu 15 Sep 2022 02:40:57 +0000
ROA not before:           Thu 15 Sep 2022 02:40:57 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38852
IP address blocks:        2407:a740::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 284 (0x11c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00DCF050C4CEAE5021AA8D311953F02D6121FD8D
        Validity
            Not Before: Sep 15 02:40:57 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=EC9CE8A36F3F1A281A8DDB0353CD4C583C25C72D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e5:1f:af:ae:1d:33:50:89:9a:fb:56:41:46:
                    4f:80:c0:fd:c5:ed:bb:d3:47:d7:19:cf:65:6b:0c:
                    a1:eb:1e:8f:af:97:ad:35:26:ca:4c:e5:b3:20:2d:
                    a9:b6:1a:dd:05:e0:81:1f:47:97:c3:96:bd:58:ae:
                    5c:bf:37:35:68:03:a9:43:7b:dd:b5:b6:f4:4b:1b:
                    1d:ce:15:80:29:f0:1f:72:01:c7:73:27:8d:59:d9:
                    39:62:3a:92:d4:3a:b3:57:65:45:00:d6:9d:26:e3:
                    d0:0d:ba:75:0b:c8:59:56:8a:d2:4e:d4:29:57:d5:
                    a4:d0:ce:ba:24:c2:09:09:22:ad:18:c8:f3:d8:6d:
                    91:01:0e:db:eb:ca:8f:56:56:b6:1a:4f:b8:63:fd:
                    e2:ec:79:ce:61:06:40:26:42:67:3c:43:72:96:c8:
                    69:7a:40:6d:58:f5:c2:13:40:8f:41:48:bd:aa:dd:
                    ce:06:e9:f0:a2:5a:b2:81:46:d5:68:69:78:cc:e1:
                    6a:d0:00:b4:5d:22:76:50:30:98:cd:fa:f6:5a:12:
                    fc:e4:24:46:14:63:e1:33:d1:cf:29:a1:73:33:f1:
                    58:df:f1:b9:13:44:b0:4f:fb:33:77:38:1d:c0:0f:
                    b0:e5:1a:0d:a3:af:e2:ab:84:1c:eb:c8:6d:30:76:
                    4d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:9C:E8:A3:6F:3F:1A:28:1A:8D:DB:03:53:CD:4C:58:3C:25:C7:2D
            X509v3 Authority Key Identifier:
                keyid:00:DC:F0:50:C4:CE:AE:50:21:AA:8D:31:19:53:F0:2D:61:21:FD:8D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/ANzwUMTOrlAhqo0xGVPwLWEh_Y0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ANzwUMTOrlAhqo0xGVPwLWEh_Y0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/7Jzoo28_GigajdsDU81MWDwlxy0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:a740::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:65:d2:c0:a9:58:6d:34:38:33:68:09:84:57:8e:c7:79:9f:
         78:78:6b:10:c0:ab:40:fd:ad:62:70:e5:41:ff:7e:6e:66:20:
         30:ad:58:1d:81:35:14:7d:f3:61:da:46:5c:b7:e4:3d:26:3a:
         b9:88:8f:87:14:0a:ae:8f:d8:9d:c8:b4:3f:05:f9:89:73:e1:
         56:d6:75:27:30:76:b1:1e:d0:f3:e9:df:44:23:30:1b:fd:bf:
         40:ec:c7:7b:be:40:48:71:c5:54:0a:1f:ec:ca:76:0c:84:e2:
         8a:ab:56:e7:f2:27:b8:36:c6:73:a0:08:32:af:70:b6:36:dc:
         7e:37:1f:af:56:71:09:6b:76:c9:d2:51:56:78:e1:91:56:bd:
         b0:ac:c9:0a:d9:84:7b:1c:e8:0c:5f:42:7c:4e:b3:7d:ee:e7:
         d3:89:fe:09:09:b0:66:4c:3e:10:a4:35:d1:07:97:46:a1:b1:
         89:7e:6a:4a:94:cb:ef:21:6e:5c:d3:5a:8b:99:99:06:2e:d8:
         b2:aa:52:00:18:f7:e8:a5:04:60:9d:e7:5d:27:68:b7:d2:d0:
         03:c5:6a:f0:fd:e0:d0:84:f4:c6:ea:9b:fc:21:5f:93:2c:d8:
         e4:d3:f4:61:59:88:73:8b:0c:34:1e:a4:04:80:38:79:cc:9b:
         e5:61:b5:ca
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----