Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HONGDA/-wvRkvgBFkzkHZDx_c2MxSxumcY.roa
File:                     -wvRkvgBFkzkHZDx_c2MxSxumcY.roa (raw, json)
Hash identifier:          Lh70ePeEuR0FXcwmHUvIyv7UB2u1c00pQ6Egl6DXpnU=
Subject key identifier:   FB:0B:D1:92:F8:01:16:4C:E4:1D:90:F1:FD:CD:8C:C5:2C:6E:99:C6
Certificate issuer:       /CN=257DB7B9919975697366B7014F8CFE28EF364E73
Certificate serial:       05B9
Authority key identifier: 25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/-wvRkvgBFkzkHZDx_c2MxSxumcY.roa
Signing time:             Thu 12 Oct 2023 08:29:45 +0000
ROA not before:           Thu 12 Oct 2023 08:29:45 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     131657
IP address blocks:        2403:9340::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1465 (0x5b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=257DB7B9919975697366B7014F8CFE28EF364E73
        Validity
            Not Before: Oct 12 08:29:45 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=FB0BD192F801164CE41D90F1FDCD8CC52C6E99C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c8:8d:cf:fc:4e:d1:8c:e4:cc:54:01:b2:0a:
                    be:96:d1:73:67:73:3e:e1:3c:6e:aa:e0:ac:b9:7b:
                    ad:84:e9:00:61:0b:65:90:c6:c0:74:38:bb:03:4e:
                    58:40:8c:01:df:8e:82:a3:d2:2a:78:2e:bc:2a:83:
                    28:98:7c:63:a9:15:18:1b:6e:aa:bd:4b:62:7d:c1:
                    15:92:15:48:74:27:74:7e:e4:64:46:67:1a:20:c7:
                    a0:59:cc:45:01:0e:29:42:c2:6c:4f:cc:d7:d3:7c:
                    74:75:92:69:10:5b:2b:a1:47:14:50:df:e4:c6:0a:
                    36:7a:63:38:1d:fb:38:c8:2b:48:0a:07:6f:32:ca:
                    3f:65:ad:dd:b5:7a:47:26:72:50:8f:d0:b5:08:38:
                    21:91:f8:ae:4f:4c:7d:98:b4:f2:30:09:73:ab:5f:
                    c3:65:d1:95:55:0a:54:38:d5:2f:7b:b2:22:a3:41:
                    87:05:94:9e:1a:aa:79:36:3f:cb:3f:b5:b4:d5:9a:
                    5d:ec:79:b0:7c:5a:c2:80:28:e4:10:7d:9e:27:cc:
                    ba:ce:ac:ad:0e:c0:53:fc:9b:86:3d:16:2f:e3:71:
                    68:e1:5f:ef:50:1c:ae:7e:99:8f:ca:9a:a5:a3:d3:
                    6d:83:b0:25:89:af:1d:4d:2a:7a:68:95:6d:2b:81:
                    72:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:0B:D1:92:F8:01:16:4C:E4:1D:90:F1:FD:CD:8C:C5:2C:6E:99:C6
            X509v3 Authority Key Identifier:
                keyid:25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/-wvRkvgBFkzkHZDx_c2MxSxumcY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:9340::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:6c:f2:aa:2f:18:e1:49:f1:46:13:fe:f2:a9:09:ad:29:e9:
         31:df:91:b9:c1:41:90:e2:95:ef:a2:ee:ba:06:31:7d:73:cf:
         d4:57:16:17:46:87:69:a7:3c:93:4b:9d:53:91:24:93:eb:9b:
         ba:fa:7e:27:28:56:f0:5e:ad:b7:0a:3c:5e:96:4c:19:e4:20:
         25:a0:66:04:2c:c2:0c:77:ba:f8:b1:b9:72:89:ff:ff:16:29:
         e9:2d:9e:2a:9d:4e:65:c0:69:11:dc:f9:8b:5b:7e:7a:96:21:
         2d:a9:80:b3:cf:d6:69:d4:36:1f:e0:6d:ac:08:5d:86:29:f8:
         b2:87:c8:6d:20:5f:96:d7:bd:61:56:50:d9:81:06:cc:f2:0c:
         82:59:98:89:79:cb:f7:be:68:83:dc:9c:5e:fe:ba:62:3b:ef:
         22:83:25:9f:c1:5f:71:f5:78:fb:14:da:a1:3a:6b:87:5a:3e:
         40:6a:fe:a6:e9:7e:b8:45:c3:cf:d5:12:e5:3c:5b:99:14:d5:
         ad:d7:31:a2:29:0a:a8:df:18:f1:e0:55:64:36:17:00:b1:df:
         07:99:73:d5:78:c8:70:d0:eb:30:41:14:fa:f6:c6:16:79:be:
         8a:61:71:6c:4f:9a:c3:da:03:4f:45:8c:21:20:75:ee:ad:1d:
         d2:4a:5e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----