Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MERCYCAT/PlPI8__4eqVX8ZfZ-7b4sWZg2Is.roa
File:                     PlPI8__4eqVX8ZfZ-7b4sWZg2Is.roa (raw, json)
Hash identifier:          s0Ngacz5z+IGWQNz9WdRJkvjMxaXUZ7VYGGP4LIdcZw=
Subject key identifier:   3E:53:C8:F3:FF:F8:7A:A5:57:F1:97:D9:FB:B6:F8:B1:66:60:D8:8B
Certificate issuer:       /CN=D2A09CE42809F4DA9D7B1C4473DDF2F436A599C4
Certificate serial:       018F
Authority key identifier: D2:A0:9C:E4:28:09:F4:DA:9D:7B:1C:44:73:DD:F2:F4:36:A5:99:C4
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0qCc5CgJ9NqdexxEc93y9DalmcQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/MERCYCAT/PlPI8__4eqVX8ZfZ-7b4sWZg2Is.roa
Signing time:             Fri 17 Mar 2023 00:59:41 +0000
ROA not before:           Fri 17 Mar 2023 00:59:41 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     18428
IP address blocks:        103.172.126.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 399 (0x18f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2A09CE42809F4DA9D7B1C4473DDF2F436A599C4
        Validity
            Not Before: Mar 17 00:59:41 2023 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=3E53C8F3FFF87AA557F197D9FBB6F8B16660D88B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3a:81:a6:86:56:7f:b8:79:2d:2a:53:99:06:
                    08:00:b8:96:49:df:89:a4:54:44:63:42:77:31:72:
                    66:f2:6e:07:b1:ef:5c:2f:5f:b9:27:14:1e:59:04:
                    a1:eb:af:9b:52:db:6b:99:b0:9d:4f:18:65:84:28:
                    92:40:50:29:3a:4a:82:d0:7b:4e:52:e9:c9:41:83:
                    67:83:7b:39:e6:88:6d:35:92:5e:37:ba:69:a4:36:
                    ba:6b:4f:d8:9d:d3:1f:a5:e9:3d:59:41:ff:ab:2f:
                    2d:8d:00:e6:50:3a:1b:3b:6e:64:dd:a5:7e:df:e5:
                    75:a2:4d:90:63:6e:05:a7:5f:0f:36:aa:94:23:4f:
                    49:7a:85:e7:9d:5e:95:b0:1e:65:c8:9f:ea:4b:9e:
                    fe:5f:85:c8:b3:79:62:32:b3:c6:02:d1:fd:75:8d:
                    86:d8:8d:d1:78:e6:7b:ca:b9:d0:79:11:0a:52:fc:
                    35:49:98:ed:e0:96:85:ab:59:64:54:74:1d:27:1a:
                    7e:f3:e6:02:e7:09:ff:ed:c5:07:76:dc:a0:5b:d9:
                    53:f7:d0:0b:d4:ce:50:4d:6d:e8:cd:9f:a4:e4:b5:
                    29:03:63:2e:68:f1:08:45:25:6a:ab:02:37:4f:cf:
                    6f:5a:f2:d6:63:4c:a7:7d:d8:c6:b1:ae:c0:a5:bb:
                    cc:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:53:C8:F3:FF:F8:7A:A5:57:F1:97:D9:FB:B6:F8:B1:66:60:D8:8B
            X509v3 Authority Key Identifier:
                keyid:D2:A0:9C:E4:28:09:F4:DA:9D:7B:1C:44:73:DD:F2:F4:36:A5:99:C4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MERCYCAT/0qCc5CgJ9NqdexxEc93y9DalmcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0qCc5CgJ9NqdexxEc93y9DalmcQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MERCYCAT/PlPI8__4eqVX8ZfZ-7b4sWZg2Is.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         78:02:4c:1e:37:83:c9:de:b3:64:88:59:cf:b6:27:93:61:a0:
         97:41:5b:66:06:07:3a:dc:77:f7:f2:1d:a9:f7:e8:d6:c2:2b:
         4e:34:5a:79:d4:cf:5f:fd:b6:29:ab:58:7e:53:63:0b:b2:90:
         8d:75:f7:5d:15:b0:c6:cb:95:e5:49:17:12:47:3b:d4:f5:62:
         a2:11:f0:77:1f:e2:7b:40:62:80:55:8b:f4:18:3e:18:c2:79:
         f6:46:81:92:af:7a:06:64:55:92:ba:c7:6b:ce:35:df:c1:01:
         07:62:3c:58:53:b0:2a:bf:f8:8c:a2:b1:19:d3:ca:60:99:23:
         96:e8:3a:bb:73:52:80:b1:c1:1d:ad:28:46:64:94:08:75:d4:
         fb:87:16:c9:7a:e8:ff:0b:a3:63:3f:f6:4a:f4:bf:85:66:b9:
         a4:60:c4:2f:9f:8a:5d:83:50:8f:19:6b:6e:43:5a:97:b3:5c:
         24:09:a6:c1:e2:fc:fc:35:b1:40:9e:31:fc:12:2e:76:d6:b5:
         e7:e9:32:e7:d6:3b:1e:8d:e1:51:b4:48:68:e7:fc:f9:50:cd:
         63:d8:12:81:e7:f8:cc:59:02:44:da:f0:a2:ff:53:05:12:ba:
         dc:80:d0:28:9f:6d:5a:00:4c:bf:ca:0e:f6:48:3a:c0:a7:80:
         d8:b5:1b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----