Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HWME1204/4oodjdawmPL1K98HQktfRvZJ_Yc.roa
File:                     4oodjdawmPL1K98HQktfRvZJ_Yc.roa (raw, json)
Hash identifier:          D+X6NV9xDvXa/FrP/7M3e51P46RBzwkV6NyH9RS6Fc8=
Subject key identifier:   E2:8A:1D:8D:D6:B0:98:F2:F5:2B:DF:07:42:4B:5F:46:F6:49:FD:87
Certificate issuer:       /CN=E95973EB86F597CAE612C67929ED9352E70B5528
Certificate serial:       0F45
Authority key identifier: E9:59:73:EB:86:F5:97:CA:E6:12:C6:79:29:ED:93:52:E7:0B:55:28
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/6Vlz64b1l8rmEsZ5Ke2TUucLVSg.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HWME1204/4oodjdawmPL1K98HQktfRvZJ_Yc.roa
Signing time:             Thu 15 Sep 2022 02:48:47 +0000
ROA not before:           Thu 15 Sep 2022 02:48:47 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     18046
IP address blocks:        103.126.180.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3909 (0xf45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95973EB86F597CAE612C67929ED9352E70B5528
        Validity
            Not Before: Sep 15 02:48:47 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=E28A1D8DD6B098F2F52BDF07424B5F46F649FD87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:eb:b7:50:b5:56:2e:cc:f6:ca:7f:9f:c7:5e:
                    f2:4b:70:05:38:18:61:62:52:88:0d:e7:07:27:f5:
                    85:a0:fa:d7:a1:3c:4e:2f:0d:e8:50:1d:26:90:4a:
                    a2:22:06:c1:5b:30:e3:c5:d9:30:b0:3e:68:7e:ab:
                    9b:0e:d8:1a:2f:de:99:9b:fe:65:64:95:73:d3:2d:
                    70:e8:06:67:bd:00:d7:81:63:bc:ce:73:6c:0c:c8:
                    c0:a8:b5:f4:9f:05:91:71:50:da:af:52:cb:a6:33:
                    c8:9b:1d:27:e7:e0:b9:5d:de:60:31:ae:ba:b5:df:
                    27:26:20:cf:03:fc:e8:56:f4:bb:a8:16:ee:0e:af:
                    28:52:64:29:81:42:d7:6a:41:4f:8a:c5:2c:52:85:
                    89:13:92:14:af:3a:8e:df:a4:fe:77:74:19:40:ce:
                    c1:32:41:de:91:ff:ce:f5:15:46:54:5c:42:8b:20:
                    e0:55:1f:d7:e2:4d:da:7a:85:3b:d2:7d:f9:00:96:
                    42:9c:c5:79:cd:74:ac:fc:f6:73:ad:fa:67:e4:c6:
                    21:33:a4:74:b7:ee:32:74:0f:9a:ad:6d:cb:63:7e:
                    e6:dc:46:77:b2:24:af:2f:7f:f9:9d:05:35:7f:b6:
                    da:10:d9:f9:95:1c:12:8c:cb:ea:c9:d4:64:f9:23:
                    ce:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:8A:1D:8D:D6:B0:98:F2:F5:2B:DF:07:42:4B:5F:46:F6:49:FD:87
            X509v3 Authority Key Identifier:
                keyid:E9:59:73:EB:86:F5:97:CA:E6:12:C6:79:29:ED:93:52:E7:0B:55:28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HWME1204/6Vlz64b1l8rmEsZ5Ke2TUucLVSg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/6Vlz64b1l8rmEsZ5Ke2TUucLVSg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HWME1204/4oodjdawmPL1K98HQktfRvZJ_Yc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.126.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:5f:69:8f:22:32:39:19:c3:d4:22:50:9c:4e:54:1b:d2:29:
         c4:99:1c:5c:81:b5:47:81:8c:c1:22:32:98:cf:53:02:41:2b:
         25:1f:4c:8f:67:ea:d0:93:3f:81:20:49:7a:99:21:a8:be:e8:
         93:6f:e8:a2:3c:b9:58:f1:d8:3c:4a:6d:1f:3e:ad:8d:b2:f7:
         b5:87:5f:94:90:b8:3a:20:11:9a:aa:be:f7:d0:04:4a:77:89:
         a0:e2:6a:38:6d:de:f7:2b:17:74:45:dc:cd:dc:71:4f:b6:5f:
         3e:c3:ce:bb:48:91:3a:20:25:44:65:8c:33:6c:f5:41:3b:c1:
         bd:6c:04:c0:87:b3:2a:0d:37:88:6e:2f:e9:11:54:97:5d:f8:
         02:80:6c:64:f6:21:97:df:ca:64:29:31:b9:68:10:95:9a:e7:
         ab:f3:57:4b:d5:ff:d2:0f:e1:ef:47:a6:4f:c8:a4:e5:fe:19:
         5d:27:d6:75:f1:f4:0b:0c:4a:2a:e1:43:00:09:c3:0b:09:6d:
         4b:ec:b7:91:43:56:43:68:f2:de:09:4a:f8:23:63:4a:1c:08:
         61:2d:cc:a5:ed:b6:13:83:11:b8:6b:25:78:8b:b2:d7:14:d2:
         2e:29:ef:e8:b2:d0:12:46:af:78:31:60:d1:ad:1d:ac:41:1e:
         59:12:45:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----