Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/IMCLOUD/OcuwA2jxT9XwOMY5HAkZk9IckMc.roa
File:                     OcuwA2jxT9XwOMY5HAkZk9IckMc.roa (raw, json)
Hash identifier:          ZIjFM4raY4qL/6BQjHboogRhgK2EJVNAgHRX/mEYdAM=
Subject key identifier:   39:CB:B0:03:68:F1:4F:D5:F0:38:C6:39:1C:09:19:93:D2:1C:90:C7
Certificate issuer:       /CN=61E0EE79428B85EDABB5F6EB9578EFB19E63C98F
Certificate serial:       0CA3
Authority key identifier: 61:E0:EE:79:42:8B:85:ED:AB:B5:F6:EB:95:78:EF:B1:9E:63:C9:8F
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/YeDueUKLhe2rtfbrlXjvsZ5jyY8.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCLOUD/OcuwA2jxT9XwOMY5HAkZk9IckMc.roa
Signing time:             Thu 15 Sep 2022 02:42:07 +0000
ROA not before:           Thu 15 Sep 2022 02:42:07 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     9833
IP address blocks:        2404:a3c0:1::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3235 (0xca3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61E0EE79428B85EDABB5F6EB9578EFB19E63C98F
        Validity
            Not Before: Sep 15 02:42:07 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=39CBB00368F14FD5F038C6391C091993D21C90C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:e9:cc:89:43:58:c9:97:e3:13:98:e1:b1:ef:
                    7c:4a:9d:76:e2:87:21:ba:53:1e:6b:0b:01:02:6b:
                    0f:65:55:f5:17:58:dc:6d:94:a8:0d:c0:1b:14:54:
                    e6:10:fc:04:9f:a2:11:e5:74:ad:e1:58:04:72:fc:
                    fe:48:38:70:56:12:cb:b0:19:8f:4d:a4:6f:be:b6:
                    de:d8:32:ca:86:03:3e:71:45:72:08:8c:99:ba:de:
                    5c:cc:78:50:33:e2:e6:0f:16:c1:21:08:ee:62:69:
                    e5:ff:f2:87:bf:cc:bd:64:82:fc:1d:f4:7c:d5:d9:
                    50:85:08:9b:a3:12:32:9c:c7:5e:59:02:d4:4b:c9:
                    82:6e:c5:8e:45:8d:c6:30:f6:0c:6b:0f:a6:24:1c:
                    3e:da:64:32:2b:67:88:ed:e6:56:2d:e2:79:c4:03:
                    83:9e:47:bd:09:4a:26:1f:e7:8b:72:eb:ec:e1:4c:
                    92:7e:e4:2d:d7:c2:67:68:75:30:f7:c2:c6:37:a9:
                    b7:91:f9:7e:b0:0a:c0:e0:ec:e8:45:38:ec:44:04:
                    2f:f8:0e:87:ce:2d:6c:74:3e:0a:60:ad:3a:84:70:
                    9e:ae:f0:9c:f9:2e:8c:93:c8:b8:e1:31:89:3c:d9:
                    7a:75:9c:84:f0:01:2b:84:73:bc:cd:14:04:b2:18:
                    f1:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:CB:B0:03:68:F1:4F:D5:F0:38:C6:39:1C:09:19:93:D2:1C:90:C7
            X509v3 Authority Key Identifier:
                keyid:61:E0:EE:79:42:8B:85:ED:AB:B5:F6:EB:95:78:EF:B1:9E:63:C9:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCLOUD/YeDueUKLhe2rtfbrlXjvsZ5jyY8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YeDueUKLhe2rtfbrlXjvsZ5jyY8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCLOUD/OcuwA2jxT9XwOMY5HAkZk9IckMc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:a3c0:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         93:6d:3c:c1:94:61:23:e9:21:af:9f:77:d2:88:d8:47:6b:8e:
         4a:7d:78:10:c4:02:de:6a:5e:04:61:8d:8d:b2:ec:3c:95:31:
         b4:ed:89:02:90:0b:e0:b6:7b:16:70:7a:92:88:14:dc:32:7a:
         9d:8d:75:a2:6f:d6:ec:4b:0d:92:f4:95:c9:b6:92:83:c0:f0:
         63:8e:31:5a:26:fb:f5:7c:0e:1e:f8:54:84:de:bd:69:d9:f2:
         20:41:e9:ca:7a:4a:83:95:75:5c:d7:bb:c2:f6:9e:9b:ea:d5:
         0c:20:23:67:18:27:c9:30:3c:c1:91:82:b8:a8:3d:b3:23:e3:
         18:53:7e:9d:c5:3e:d2:be:55:cb:92:7d:5f:fb:79:9c:0d:eb:
         6e:76:26:b9:ee:49:2a:52:ef:09:90:ed:96:44:4a:40:a1:2e:
         b1:ec:b3:70:2b:61:3e:ec:66:3d:b7:07:8e:e8:57:c2:3d:ed:
         fa:71:fe:23:27:5f:e3:a7:77:57:c5:58:77:04:d9:38:59:ff:
         5f:99:d2:28:14:94:d2:c8:82:d4:1c:d0:39:39:28:5c:03:7e:
         2f:ac:fe:e2:f8:b4:8a:3e:6b:3c:7c:2a:6a:65:bb:bf:1e:17:
         6a:ea:f3:17:fc:69:80:d8:b3:3a:53:9a:bb:1b:b9:35:ae:a2:
         5d:ce:86:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----