Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ITRINET/qbFxpuDhW9O1mFEePXDZvWbbiuE.roa
File:                     qbFxpuDhW9O1mFEePXDZvWbbiuE.roa (raw, json)
Hash identifier:          iHdTMCOuCwBhUV60bCrX4rQAv50MHxRy6vXerrOuPYc=
Subject key identifier:   A9:B1:71:A6:E0:E1:5B:D3:B5:98:51:1E:3D:70:D9:BD:66:DB:8A:E1
Certificate issuer:       /CN=2F9BECFFE7DA09CA053A2F9681412B19FB004A74
Certificate serial:       0A33
Authority key identifier: 2F:9B:EC:FF:E7:DA:09:CA:05:3A:2F:96:81:41:2B:19:FB:00:4A:74
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/L5vs_-faCcoFOi-WgUErGfsASnQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ITRINET/qbFxpuDhW9O1mFEePXDZvWbbiuE.roa
Signing time:             Thu 15 Sep 2022 02:49:38 +0000
ROA not before:           Thu 15 Sep 2022 02:49:38 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     18422
IP address blocks:        2001:ed8::/32 maxlen: 56

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2611 (0xa33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F9BECFFE7DA09CA053A2F9681412B19FB004A74
        Validity
            Not Before: Sep 15 02:49:38 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=A9B171A6E0E15BD3B598511E3D70D9BD66DB8AE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:00:55:00:d9:f6:f8:8c:85:e4:f3:44:09:1d:
                    64:f1:2e:90:b9:12:24:de:d2:d3:ad:7f:97:81:b6:
                    8b:eb:09:6b:4d:6f:be:9e:1e:2d:6b:8d:c5:fe:2d:
                    db:f5:ac:f7:61:16:22:25:67:f9:74:a3:f0:72:1e:
                    de:49:97:06:5d:09:bf:03:80:cd:26:19:d1:ce:4a:
                    bb:07:50:93:2f:36:04:81:f9:71:3a:e7:7f:a9:11:
                    65:4a:9d:58:07:4b:0b:05:b1:6c:a6:f2:b4:8d:a8:
                    9d:91:11:3d:51:86:4d:18:b4:40:ea:27:90:d9:2f:
                    68:c4:5b:23:97:d5:95:20:86:ab:98:1f:ae:57:df:
                    b2:7e:09:73:8f:1b:5e:35:a7:de:9c:ba:d4:2b:ba:
                    02:b0:97:45:51:b2:74:c0:99:4e:62:91:12:ad:57:
                    ed:19:2c:e0:d6:86:96:86:cb:4e:4a:bd:d8:da:10:
                    f2:de:79:7b:d4:65:cf:d1:ca:a4:f1:f6:29:e8:26:
                    fb:66:4d:f5:e5:65:4b:ab:7f:e8:9f:18:c5:d4:ed:
                    2e:5b:7c:43:84:fa:dc:2d:c8:12:58:6d:67:d4:54:
                    9c:fe:0a:b2:06:e1:17:bb:c6:10:df:5c:2c:d4:ad:
                    92:ff:62:b8:85:d6:ef:49:b3:1d:5c:66:8a:75:54:
                    7b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:B1:71:A6:E0:E1:5B:D3:B5:98:51:1E:3D:70:D9:BD:66:DB:8A:E1
            X509v3 Authority Key Identifier:
                keyid:2F:9B:EC:FF:E7:DA:09:CA:05:3A:2F:96:81:41:2B:19:FB:00:4A:74

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ITRINET/L5vs_-faCcoFOi-WgUErGfsASnQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/L5vs_-faCcoFOi-WgUErGfsASnQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ITRINET/qbFxpuDhW9O1mFEePXDZvWbbiuE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:ed8::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:24:af:df:74:d8:61:30:1e:61:88:a0:be:a2:56:3b:39:4f:
         dd:80:d7:f0:3e:09:2d:b6:b0:9a:42:13:19:e9:9e:36:3f:00:
         36:a4:a2:fd:dc:fa:74:34:25:37:2b:2a:e3:14:ca:1f:ce:ac:
         f7:d7:8a:ca:68:e1:17:37:1e:90:db:6e:17:49:af:2d:50:3d:
         70:da:9d:a4:d1:75:97:49:74:ec:d1:43:66:f7:e3:01:81:da:
         96:c5:b6:fa:da:8c:ee:67:6f:45:6a:ed:2d:a8:27:c4:19:57:
         1e:a8:2e:d7:18:83:89:ef:1a:52:f7:2e:be:a9:d0:55:32:f0:
         a1:5a:a5:93:77:a2:1c:4c:3b:23:34:8a:b5:51:39:93:ec:66:
         89:44:c6:06:e4:aa:a6:42:5b:35:90:53:6e:27:f2:13:7f:dc:
         b9:10:6a:53:46:54:4c:33:c1:72:dc:de:42:91:06:4f:4c:7e:
         57:5c:6b:bd:eb:81:e8:38:ea:99:47:ea:bb:81:2f:36:e0:43:
         d2:9d:37:fa:21:f7:f1:53:6f:b2:02:e7:21:25:ca:d2:c7:8c:
         5d:42:70:a9:f9:a8:79:e6:cd:49:ff:b8:d0:5c:b8:18:87:f5:
         41:14:57:af:92:7c:a5:e4:f8:5c:7c:f4:9e:f3:1d:b4:7a:f3:
         bf:e2:c5:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----