Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/_ZSMNcfZxoZvnPyoKg22s577guU.roa
File:                     _ZSMNcfZxoZvnPyoKg22s577guU.roa (raw, json)
Hash identifier:          SPJIdD9NPziGdESLYMmyrNQIjOGFC63O8oOo5ZNuQnk=
Subject key identifier:   FD:94:8C:35:C7:D9:C6:86:6F:9C:FC:A8:2A:0D:B6:B3:9E:FB:82:E5
Certificate issuer:       /CN=01A53261B2001FA7EB57793E2E579B7322F8E76A
Certificate serial:       0AB8
Authority key identifier: 01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/_ZSMNcfZxoZvnPyoKg22s577guU.roa
Signing time:             Thu 15 Sep 2022 02:39:32 +0000
ROA not before:           Thu 15 Sep 2022 02:39:32 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     9676
IP address blocks:        122.201.128.0/17 maxlen: 17

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2744 (0xab8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A53261B2001FA7EB57793E2E579B7322F8E76A
        Validity
            Not Before: Sep 15 02:39:32 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=FD948C35C7D9C6866F9CFCA82A0DB6B39EFB82E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:db:33:46:70:23:75:79:47:2a:31:d3:17:71:
                    b0:93:23:71:5e:f7:89:de:87:72:b2:69:47:a0:41:
                    da:8c:37:ad:f4:5a:eb:b5:64:7f:b4:2b:0a:97:92:
                    ad:0f:de:47:76:c5:bd:80:57:0c:42:73:08:dc:15:
                    9e:aa:dc:e4:d3:12:08:38:b7:9f:a0:00:f4:f7:15:
                    c3:8c:fa:8d:58:bf:92:bc:f7:bb:ae:01:50:3b:a8:
                    fe:b9:00:35:01:40:96:e9:b0:4e:20:5a:be:5f:25:
                    18:e6:0b:8d:8e:f6:24:90:a3:08:4e:3b:fb:3f:d6:
                    ac:71:af:f6:eb:d2:1c:26:65:34:77:07:cb:04:eb:
                    36:c2:c0:05:e1:d4:8f:f1:72:0d:18:27:34:7e:a9:
                    00:bc:26:c2:0f:46:51:b8:e4:b6:6b:38:48:41:cd:
                    01:09:ad:5c:ff:fd:cb:1e:26:0f:a9:b3:0c:df:b8:
                    dc:4d:6c:81:f5:15:cc:e3:f0:61:80:ac:2d:ac:5a:
                    02:ef:ce:b9:cf:34:37:94:de:26:50:f2:68:32:ff:
                    0a:55:9f:29:02:d0:f7:a5:63:99:01:af:9f:c1:33:
                    18:f3:9c:26:84:2c:71:99:28:5d:23:1f:82:c7:8b:
                    6d:4b:85:cc:31:cf:01:92:22:07:46:1b:b3:fe:23:
                    c0:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:94:8C:35:C7:D9:C6:86:6F:9C:FC:A8:2A:0D:B6:B3:9E:FB:82:E5
            X509v3 Authority Key Identifier:
                keyid:01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/_ZSMNcfZxoZvnPyoKg22s577guU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.201.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         0a:c8:bd:3c:f4:dd:93:74:75:91:96:de:4b:81:f4:f1:68:c4:
         59:33:9b:3a:c3:c9:74:31:eb:53:d7:15:89:09:fb:05:00:4a:
         ef:b6:d5:2e:83:2e:74:70:b2:be:ac:42:ee:fc:2d:c0:06:45:
         a4:13:10:03:1c:fa:e7:66:98:78:f1:be:86:55:2a:fa:55:db:
         97:19:6a:19:49:d3:0f:12:82:06:9b:24:c8:68:83:0d:8a:f9:
         c4:43:e7:7e:30:97:b4:cd:55:53:12:6b:ee:b8:0c:35:45:ab:
         6c:07:e3:95:d6:48:1a:3e:64:68:85:b0:1a:8e:f8:1a:4c:e9:
         7c:54:d3:42:5f:ab:47:f0:d6:c4:47:63:9e:21:14:c3:04:7d:
         80:6a:11:97:98:d2:fe:58:d4:11:ff:a9:62:97:69:3f:e6:4d:
         01:58:3d:a9:13:21:2a:5f:65:e1:4e:37:77:23:d0:d4:c3:62:
         4a:ca:e0:ef:63:d5:79:e7:8a:c1:ca:65:38:e7:4a:82:02:92:
         9e:9f:f3:77:3e:ab:1d:2a:ca:9b:53:7e:81:9b:ae:04:aa:7a:
         7d:b6:3c:5f:49:54:ca:b7:80:36:7c:19:88:83:52:7d:c0:86:
         f7:67:7c:06:51:8c:1f:3d:b7:60:b3:24:99:3e:0a:9a:ba:b5:
         dd:51:f9:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----