Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/WBHjMFj-nGuRBAPJNaIsvMeSCPc.roa
File:                     WBHjMFj-nGuRBAPJNaIsvMeSCPc.roa (raw, json)
Hash identifier:          zIQGZt+BoTY1TNfGi5x2iOMyvjhRuPr4L24V8ZtUaDU=
Subject key identifier:   58:11:E3:30:58:FE:9C:6B:91:04:03:C9:35:A2:2C:BC:C7:92:08:F7
Certificate issuer:       /CN=ED186F6314D7B5713EFFECFB93EBC3E82197E2EF
Certificate serial:       0F45
Authority key identifier: ED:18:6F:63:14:D7:B5:71:3E:FF:EC:FB:93:EB:C3:E8:21:97:E2:EF
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/7RhvYxTXtXE-_-z7k-vD6CGX4u8.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/WBHjMFj-nGuRBAPJNaIsvMeSCPc.roa
Signing time:             Thu 15 Sep 2022 02:47:38 +0000
ROA not before:           Thu 15 Sep 2022 02:47:38 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     131633
IP address blocks:        2404:29c0::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3909 (0xf45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED186F6314D7B5713EFFECFB93EBC3E82197E2EF
        Validity
            Not Before: Sep 15 02:47:38 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=5811E33058FE9C6B910403C935A22CBCC79208F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:26:e3:9a:0e:aa:27:11:8e:d9:83:32:95:69:
                    62:ef:47:2e:41:7b:75:6e:45:b5:88:05:a3:a7:00:
                    66:77:dd:57:31:ab:72:96:d2:1f:e0:ff:bb:aa:56:
                    82:19:c6:2d:34:28:b8:86:06:18:8f:c2:31:3b:a8:
                    0a:47:55:ce:1d:1b:93:02:16:c5:25:58:fb:a3:89:
                    ed:5e:e1:17:c9:a4:b5:17:a8:6c:2d:16:6b:23:4c:
                    c3:62:7f:5a:a2:8c:17:de:68:d4:0a:d3:e3:9f:eb:
                    02:35:57:5a:00:ed:6a:79:82:fc:4d:6e:10:c3:7b:
                    48:db:4f:1d:b7:f9:3f:42:10:78:45:d0:4f:e5:07:
                    ae:87:2f:e8:cf:89:ff:e8:77:e0:1e:f0:80:53:20:
                    12:5a:4a:41:39:32:20:8f:e0:20:0a:85:2c:4d:ca:
                    cc:d4:62:2b:f2:71:f6:cd:b1:c1:41:8d:03:d2:0e:
                    b2:82:23:37:b5:2c:55:e5:06:26:91:18:7d:69:76:
                    56:cf:23:48:d4:74:c5:b1:f7:fb:c7:f0:50:c9:f0:
                    83:01:b2:05:0b:e6:35:34:d9:6b:87:a2:17:7f:80:
                    ec:e4:bc:27:9e:a5:79:2a:f0:ae:2e:8c:4c:84:9a:
                    f8:9e:2a:2c:b3:a7:4c:4c:4d:17:da:0c:b7:ed:ff:
                    9b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:11:E3:30:58:FE:9C:6B:91:04:03:C9:35:A2:2C:BC:C7:92:08:F7
            X509v3 Authority Key Identifier:
                keyid:ED:18:6F:63:14:D7:B5:71:3E:FF:EC:FB:93:EB:C3:E8:21:97:E2:EF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/7RhvYxTXtXE-_-z7k-vD6CGX4u8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/7RhvYxTXtXE-_-z7k-vD6CGX4u8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/WBHjMFj-nGuRBAPJNaIsvMeSCPc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:29c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         15:70:95:fc:4e:a8:c9:a8:aa:bd:81:af:24:b9:25:66:d6:d9:
         1c:f6:44:30:c9:59:54:98:f5:31:cb:3b:8e:9f:41:e5:c6:a4:
         3e:3d:da:cb:f4:4f:39:4b:7a:9b:06:fe:5a:6a:27:03:31:b9:
         29:0b:8f:fc:7b:3d:6c:2d:12:7b:f7:6d:16:96:93:26:60:c8:
         36:d0:df:7a:1a:a5:42:db:09:ad:21:5b:51:85:2d:d4:89:16:
         7a:ff:b3:eb:8e:28:d0:09:2e:db:cb:1d:91:76:c0:99:99:50:
         e6:90:ee:e2:77:dd:3d:60:06:67:9e:11:47:e1:3a:6b:38:8a:
         c0:92:4c:5b:ee:53:51:84:d5:cb:0f:d1:1a:c5:b1:1b:79:d8:
         dc:cd:36:d0:a0:3c:08:a6:5e:bc:a8:1f:8e:37:45:17:d9:44:
         42:ab:62:ad:53:66:be:6c:15:b4:36:62:24:42:0f:81:73:bf:
         0b:96:3e:28:7f:76:f1:b7:ce:9e:76:de:cd:24:d6:0e:ea:34:
         08:3c:57:04:c9:e9:c2:08:3d:96:f9:1f:5f:db:c9:9d:25:7a:
         92:d8:6f:f6:a4:a2:6f:8f:8e:f6:01:58:9b:4a:10:0c:9b:67:
         05:76:f3:c4:fc:c7:dd:36:7c:55:07:cd:1b:bd:74:c2:da:34:
         84:11:0a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----