Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SCNET/_VO1SfWCkd0L-CW1TrqDx5EwqZM.roa
File:                     _VO1SfWCkd0L-CW1TrqDx5EwqZM.roa (raw, json)
Hash identifier:          mDiMRmW5jX2CeUDsIT93v5vNnPHZ6L8e2B4FBDIO4Us=
Subject key identifier:   FD:53:B5:49:F5:82:91:DD:0B:F8:25:B5:4E:BA:83:C7:91:30:A9:93
Certificate issuer:       /CN=349B9CE90AE03DAD19BC54DFF63AE8C41E223948
Certificate serial:       111B
Authority key identifier: 34:9B:9C:E9:0A:E0:3D:AD:19:BC:54:DF:F6:3A:E8:C4:1E:22:39:48
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/_VO1SfWCkd0L-CW1TrqDx5EwqZM.roa
Signing time:             Wed 05 Oct 2022 00:57:46 +0000
ROA not before:           Wed 05 Oct 2022 00:57:46 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     131631
IP address blocks:        103.123.216.0/24 maxlen: 25

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4379 (0x111b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=349B9CE90AE03DAD19BC54DFF63AE8C41E223948
        Validity
            Not Before: Oct  5 00:57:46 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=FD53B549F58291DD0BF825B54EBA83C79130A993
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b6:4e:16:d5:d8:5f:ca:39:af:9a:bc:fa:97:
                    67:d7:7e:a6:bc:5e:06:c3:4c:f6:b9:11:dc:aa:f0:
                    69:1b:f7:cf:e7:ae:aa:66:35:58:87:0e:88:e0:86:
                    8a:be:55:78:76:f6:bf:7d:5c:10:18:c9:7e:0d:76:
                    80:90:6d:f8:47:4c:95:84:01:45:d4:fd:48:36:5b:
                    57:16:cf:38:54:09:0d:6d:52:83:a8:8c:3c:34:bd:
                    bd:15:82:f9:26:3d:ef:d1:be:28:5f:e5:5d:f7:f0:
                    82:44:19:86:f5:0d:9e:bc:d4:c3:0c:e3:46:2d:82:
                    22:69:ad:22:35:62:ba:e9:1a:fd:2c:7e:ad:ab:19:
                    58:3a:b6:d2:2d:1b:1c:fb:4f:96:eb:89:e0:29:78:
                    1d:f1:03:30:17:d3:fa:df:64:a2:7a:17:10:ad:5f:
                    c5:77:4c:5c:85:36:f2:7e:2c:24:14:1a:33:42:db:
                    0e:02:33:81:41:22:f3:00:5a:39:82:41:18:1c:68:
                    72:45:49:8d:e1:64:1f:c7:30:7d:b2:67:58:32:8d:
                    61:1f:df:4d:f5:15:22:a3:ac:27:f1:5f:3c:53:79:
                    50:98:45:35:a2:e6:14:1d:1d:84:6e:74:b9:e7:92:
                    aa:fc:c3:1b:38:03:96:15:f2:4a:10:a8:74:46:33:
                    0c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:53:B5:49:F5:82:91:DD:0B:F8:25:B5:4E:BA:83:C7:91:30:A9:93
            X509v3 Authority Key Identifier:
                keyid:34:9B:9C:E9:0A:E0:3D:AD:19:BC:54:DF:F6:3A:E8:C4:1E:22:39:48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/NJuc6QrgPa0ZvFTf9jroxB4iOUg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/_VO1SfWCkd0L-CW1TrqDx5EwqZM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.123.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:fd:0c:1c:91:46:2a:18:94:68:a1:ac:e6:76:11:c3:47:99:
         30:ba:70:49:49:d8:40:90:d1:c4:3a:7f:e4:eb:34:ed:cf:ac:
         18:40:4f:a8:b0:a5:04:ec:e5:62:97:55:af:1d:58:bc:58:4d:
         d3:49:88:52:df:2a:8c:b6:f2:8b:31:0d:43:9c:34:aa:69:7f:
         c9:38:ff:6b:9b:52:fb:1a:66:04:8a:a8:b9:9b:df:92:34:6a:
         54:c9:c2:38:64:c7:79:d5:24:b4:70:cc:43:22:66:b8:2b:a9:
         d0:7f:18:b1:4d:f0:fd:6a:13:06:1e:24:89:80:22:d7:d0:88:
         a5:22:89:e4:66:d5:33:01:5b:11:d4:76:c9:27:42:6b:c5:16:
         fe:a3:54:1d:5b:1e:18:a8:1f:2b:bc:18:bf:20:e6:55:17:f2:
         cd:59:6e:02:b6:b5:4e:27:85:d0:8b:d3:9e:44:0b:92:ba:f7:
         32:06:d9:21:1f:dc:f5:48:df:d9:c3:12:60:69:9f:92:12:dc:
         63:23:7d:1f:54:7b:61:16:d0:42:5e:da:23:de:38:30:84:be:
         b2:7d:75:bc:19:14:1f:a5:4b:ee:f5:29:5c:c6:9c:04:a1:fc:
         3e:14:80:34:da:8b:c1:e6:d8:94:14:2e:7f:8d:7a:7a:bd:1a:
         73:5e:28:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----