Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HOSTCOMTW/7f32JTEVgvwJ4KM89NNvDjH22FY.roa
File:                     7f32JTEVgvwJ4KM89NNvDjH22FY.roa (raw, json)
Hash identifier:          tJU4R5wbzFIAt17AWiS+juqKE/260gUx/gywlmXHvPU=
Subject key identifier:   ED:FD:F6:25:31:15:82:FC:09:E0:A3:3C:F4:D3:6F:0E:31:F6:D8:56
Certificate issuer:       /CN=4E609BA74186D0B0E3A1A9C010DA1DF0559A1982
Certificate serial:       0A29
Authority key identifier: 4E:60:9B:A7:41:86:D0:B0:E3:A1:A9:C0:10:DA:1D:F0:55:9A:19:82
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/TmCbp0GG0LDjoanAENod8FWaGYI.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTCOMTW/7f32JTEVgvwJ4KM89NNvDjH22FY.roa
Signing time:             Mon 14 Nov 2022 16:01:57 +0000
ROA not before:           Mon 14 Nov 2022 16:01:57 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     131149
IP address blocks:        103.129.168.0/22 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2601 (0xa29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E609BA74186D0B0E3A1A9C010DA1DF0559A1982
        Validity
            Not Before: Nov 14 16:01:57 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=EDFDF625311582FC09E0A33CF4D36F0E31F6D856
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:30:6f:ca:4e:c6:7e:40:5d:b3:b2:0e:c4:26:
                    2b:0f:ba:0e:44:4d:d9:35:7e:e6:a0:33:24:3a:a0:
                    9e:68:db:c8:6c:c3:a2:15:38:bb:7c:dc:ff:04:7d:
                    bc:ee:c8:1c:15:98:5e:91:90:40:e6:1c:f9:d4:43:
                    ed:f8:fe:a7:21:2e:cf:e8:71:b0:22:b4:49:aa:ab:
                    37:d2:20:33:34:5f:ad:16:c7:b6:a6:c9:91:16:ba:
                    ca:80:89:6d:33:6d:9d:29:c9:08:b6:a4:f5:7e:f1:
                    eb:50:0f:b2:2d:32:d5:f7:da:b5:01:49:f9:a7:c8:
                    41:b7:2f:07:4b:c6:48:df:5a:0e:64:7d:ad:6b:1d:
                    fd:33:d3:14:d4:6c:97:85:e8:17:ef:5b:4c:ae:2a:
                    bb:9d:1e:98:d9:2a:4f:3c:6e:fc:c7:1c:26:ef:e5:
                    46:73:ba:8f:be:5d:37:3a:6b:d5:79:be:d9:80:6e:
                    b4:fb:7a:b7:47:ef:fd:8a:38:a3:f8:ad:d6:c6:e8:
                    fc:75:9a:de:50:97:77:65:4e:70:91:2a:98:e6:bb:
                    4a:d2:0a:5f:21:02:b8:3a:10:74:fc:4a:64:aa:71:
                    09:e9:37:ab:4a:97:9b:36:47:da:84:2d:42:19:f8:
                    ff:b1:02:6d:e3:e8:7b:b3:21:c7:3c:b9:1a:8c:58:
                    be:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:FD:F6:25:31:15:82:FC:09:E0:A3:3C:F4:D3:6F:0E:31:F6:D8:56
            X509v3 Authority Key Identifier:
                keyid:4E:60:9B:A7:41:86:D0:B0:E3:A1:A9:C0:10:DA:1D:F0:55:9A:19:82

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTCOMTW/TmCbp0GG0LDjoanAENod8FWaGYI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TmCbp0GG0LDjoanAENod8FWaGYI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTCOMTW/7f32JTEVgvwJ4KM89NNvDjH22FY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.129.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:cd:60:68:98:96:40:5d:2e:70:83:7d:f3:ee:6d:6d:50:7f:
         fa:96:b7:90:15:e5:28:ee:7e:d0:eb:6a:66:2c:36:4f:a5:6c:
         a1:bc:5b:a8:79:0c:eb:5b:0c:6c:62:e2:21:50:52:bb:3a:b5:
         d8:40:7d:96:33:49:82:52:2b:dc:d4:d9:ec:3a:a1:86:b5:e2:
         ac:b7:6e:2e:ec:62:31:ca:90:c2:34:f9:8b:10:1e:f4:0b:df:
         1c:3c:7a:0d:84:d6:3a:f8:84:9d:7c:01:4b:bb:cf:1b:f9:3b:
         5f:88:f9:8c:3a:de:f0:a8:c7:23:91:b0:ec:67:a2:96:3c:de:
         e4:50:3b:1e:67:1c:92:71:9b:d5:f9:40:90:a1:0d:39:c4:fd:
         62:35:d9:5d:26:eb:0f:94:7d:ae:91:b1:b2:0d:88:07:82:62:
         62:4b:22:81:88:6d:0d:e1:f0:00:54:ec:20:40:eb:37:f9:cd:
         db:e5:89:72:f1:f3:d1:f7:62:ef:42:67:e0:d4:28:a6:14:f3:
         d4:bc:d0:df:fa:f5:84:97:c6:9f:d0:7e:09:9d:f1:bd:70:dd:
         18:f0:14:d7:86:57:26:f9:dd:d4:b6:d3:2c:7e:ca:d2:29:4a:
         14:5f:d2:12:ac:47:9b:54:3b:c3:83:e3:3b:e2:63:0c:20:1a:
         02:0b:a0:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----