Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MERCYCAT/biHh0FGse9yAerfacXV5DSWO2ys.roa
File:                     biHh0FGse9yAerfacXV5DSWO2ys.roa (raw, json)
Hash identifier:          TZ8cUVxg+30nkamn9DbnFd/rEzLOUDV8RA398lvjOQE=
Subject key identifier:   6E:21:E1:D0:51:AC:7B:DC:80:7A:B7:DA:71:75:79:0D:25:8E:DB:2B
Certificate issuer:       /CN=D2A09CE42809F4DA9D7B1C4473DDF2F436A599C4
Certificate serial:       0217
Authority key identifier: D2:A0:9C:E4:28:09:F4:DA:9D:7B:1C:44:73:DD:F2:F4:36:A5:99:C4
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0qCc5CgJ9NqdexxEc93y9DalmcQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/MERCYCAT/biHh0FGse9yAerfacXV5DSWO2ys.roa
Signing time:             Fri 01 Sep 2023 09:19:33 +0000
ROA not before:           Fri 01 Sep 2023 09:19:33 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     396998
IP address blocks:        2407:d240::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 535 (0x217)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2A09CE42809F4DA9D7B1C4473DDF2F436A599C4
        Validity
            Not Before: Sep  1 09:19:33 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=6E21E1D051AC7BDC807AB7DA7175790D258EDB2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:69:f5:22:18:a1:84:86:6f:51:3d:1a:21:63:
                    bf:24:7f:66:71:64:4e:71:50:0f:33:94:46:02:8d:
                    f0:ee:e6:5e:f8:0a:e2:dc:3a:e5:4d:a3:05:96:f8:
                    a1:ba:f6:38:7e:60:03:b0:6d:0f:89:c1:51:e3:6d:
                    b0:28:49:f9:42:c8:bf:10:e5:ce:65:26:69:f9:a6:
                    94:ec:aa:08:e2:b7:45:83:a0:dd:a5:bd:54:5d:9b:
                    14:97:49:3f:5c:65:28:69:8f:8c:bd:71:ff:9f:38:
                    87:fd:d4:e3:e0:41:44:77:3e:75:fa:f3:2a:d1:f1:
                    fb:d2:3b:cc:ff:c3:18:63:8b:a3:f1:23:eb:21:df:
                    24:45:7a:b5:3d:52:82:df:d1:c2:10:70:52:31:f2:
                    12:d3:2b:9d:73:b1:6d:ac:81:37:bd:fe:cf:bd:f8:
                    f8:7f:da:e8:3e:26:98:ad:38:52:31:f9:91:b4:0a:
                    c8:68:ba:65:4d:f3:5b:6f:10:d3:aa:4b:ad:12:42:
                    01:a4:3d:b4:eb:f3:b0:e2:18:19:87:63:39:14:99:
                    ff:ea:aa:64:5e:45:1e:65:1e:3e:c9:94:d6:10:81:
                    21:b2:a6:34:f6:54:d6:a1:75:a9:df:c8:02:8d:df:
                    65:0c:e6:9b:06:34:af:bc:dc:a6:d1:bc:29:17:29:
                    20:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:21:E1:D0:51:AC:7B:DC:80:7A:B7:DA:71:75:79:0D:25:8E:DB:2B
            X509v3 Authority Key Identifier:
                keyid:D2:A0:9C:E4:28:09:F4:DA:9D:7B:1C:44:73:DD:F2:F4:36:A5:99:C4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MERCYCAT/0qCc5CgJ9NqdexxEc93y9DalmcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0qCc5CgJ9NqdexxEc93y9DalmcQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MERCYCAT/biHh0FGse9yAerfacXV5DSWO2ys.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:d240::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:46:29:2b:cb:a2:c5:3d:db:56:ed:8b:eb:f9:e9:6e:1d:2a:
         0a:2b:1e:cc:be:15:06:99:5a:ec:1b:ab:2c:ba:6e:b4:cd:eb:
         de:4f:3b:95:23:0b:65:fe:80:97:2f:a1:fe:61:e9:b9:d4:2f:
         d4:4d:fa:a2:61:6f:c8:fe:be:50:2c:7d:84:e3:f9:e0:68:f0:
         ed:38:cf:5d:58:09:df:2a:5a:b3:2d:5f:21:5b:90:56:18:68:
         af:65:a1:3a:aa:11:2c:e7:a2:46:99:a6:cd:61:6f:33:05:1b:
         28:c1:cf:40:39:cf:60:2e:9c:19:44:1b:cf:c2:68:18:12:b8:
         8f:47:e8:d1:36:97:fb:13:39:1b:c0:7e:b2:9a:f5:5d:dd:e6:
         50:da:6f:97:fe:5e:0c:f1:ca:a7:59:c3:18:85:30:22:60:3f:
         42:ce:80:0a:2c:25:36:ed:de:26:05:c1:d1:44:16:3c:e3:5f:
         24:0f:1e:de:41:e7:a5:73:79:8f:88:0c:63:61:2b:18:ce:03:
         51:fd:0d:8f:10:b4:0a:35:fc:2f:d8:86:16:04:ae:1e:99:09:
         b8:e9:f5:f7:58:a5:d4:54:59:7a:f0:74:87:c9:eb:d3:ad:50:
         a1:22:0a:d5:ff:67:db:8d:a6:62:b4:d3:50:7d:b0:01:70:8c:
         7c:f6:b3:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----