Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SIANGWANG/ZoqHS2LuidRsjikdzvdvyjvD0AQ.roa
File:                     ZoqHS2LuidRsjikdzvdvyjvD0AQ.roa (raw, json)
Hash identifier:          sqoutfcxtVSYheHLFbxLueCmstSd4WpafoD3Cr3tkWU=
Subject key identifier:   66:8A:87:4B:62:EE:89:D4:6C:8E:29:1D:CE:F7:6F:CA:3B:C3:D0:04
Certificate issuer:       /CN=958B346FB031A83DA2F43F761FA02042D523F50D
Certificate serial:       10FA
Authority key identifier: 95:8B:34:6F:B0:31:A8:3D:A2:F4:3F:76:1F:A0:20:42:D5:23:F5:0D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/lYs0b7AxqD2i9D92H6AgQtUj9Q0.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SIANGWANG/ZoqHS2LuidRsjikdzvdvyjvD0AQ.roa
Signing time:             Thu 15 Sep 2022 02:41:02 +0000
ROA not before:           Thu 15 Sep 2022 02:41:02 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     131607
IP address blocks:        103.130.0.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4346 (0x10fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=958B346FB031A83DA2F43F761FA02042D523F50D
        Validity
            Not Before: Sep 15 02:41:02 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=668A874B62EE89D46C8E291DCEF76FCA3BC3D004
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:dc:e3:ac:4e:cf:f0:5c:7e:95:60:87:39:0c:
                    a4:14:4d:12:39:40:4c:b7:39:6d:02:0f:b2:6e:9a:
                    5a:fa:e6:8c:6f:7b:47:21:fb:b3:cf:ac:29:4b:33:
                    2e:60:e4:a0:93:1b:de:81:19:21:5e:df:a0:a8:e9:
                    3c:90:e7:f7:28:56:0e:60:a8:49:cb:56:dc:11:b2:
                    a6:88:71:8f:00:67:c9:4b:50:12:80:15:77:c6:68:
                    37:80:f2:57:c7:38:c8:73:aa:1a:ce:65:47:22:76:
                    91:97:79:ed:c5:05:93:31:60:4f:27:5e:df:6b:d6:
                    4d:dc:73:64:0a:35:a8:da:28:ba:25:46:65:b8:04:
                    c7:a7:68:d2:1a:0e:22:f5:be:61:a0:7e:8c:09:a9:
                    5d:e3:19:08:90:fc:01:68:97:26:7f:7d:ce:5d:25:
                    a6:f1:6c:e9:da:ae:de:69:03:a5:cc:42:64:46:81:
                    85:b1:63:d5:e0:aa:18:a0:15:12:e9:44:06:55:c9:
                    18:9b:bc:ad:ad:2d:b1:11:1f:e4:2d:5c:5a:b7:1e:
                    be:94:2d:35:71:d6:59:42:f7:6c:f3:d2:48:3e:25:
                    2c:af:56:f5:27:a0:1e:eb:64:19:65:54:d9:18:6b:
                    cf:ec:39:80:f9:7b:18:0c:c2:de:37:8d:87:0c:e9:
                    1e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:8A:87:4B:62:EE:89:D4:6C:8E:29:1D:CE:F7:6F:CA:3B:C3:D0:04
            X509v3 Authority Key Identifier:
                keyid:95:8B:34:6F:B0:31:A8:3D:A2:F4:3F:76:1F:A0:20:42:D5:23:F5:0D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIANGWANG/lYs0b7AxqD2i9D92H6AgQtUj9Q0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/lYs0b7AxqD2i9D92H6AgQtUj9Q0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIANGWANG/ZoqHS2LuidRsjikdzvdvyjvD0AQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:73:a0:8f:19:7a:ed:49:04:07:d0:9e:9b:ae:a1:a3:5d:0a:
         08:af:b8:cb:98:b4:3f:f4:76:51:55:1d:fd:ea:a4:fe:e6:70:
         e5:5b:ce:f1:5d:e3:ee:18:8e:c5:81:b7:fd:45:b6:e7:ad:a5:
         6b:f0:e8:fe:24:0e:5a:a0:d3:1e:21:99:29:b3:f0:37:4e:83:
         1c:eb:d7:e4:7b:38:93:b5:90:ce:57:c2:ef:2f:c8:9c:81:95:
         f9:f5:25:75:64:c3:38:04:ce:1d:bb:fb:e5:86:b1:de:54:be:
         d7:43:4c:3c:88:57:a6:ac:87:c9:a7:94:14:4e:ea:f7:90:3f:
         54:53:3b:b1:e7:22:70:9a:e7:79:93:0e:1f:7f:d2:0d:ad:64:
         03:9b:de:30:7b:ba:86:22:8b:e4:cc:31:bb:4e:cb:54:e6:8d:
         e5:90:04:df:40:7a:82:bc:25:90:77:77:fc:64:0b:76:90:5f:
         25:ea:fe:e7:b0:0b:29:e5:d7:8a:7f:81:d1:6d:22:66:9f:f3:
         7e:7a:42:05:fc:f9:e5:51:5d:5e:a8:05:e2:79:6a:44:cf:fa:
         8a:18:1c:bf:4b:4c:a9:22:26:ec:55:3a:b3:50:cb:f4:32:73:
         87:06:69:19:be:fa:bd:94:04:97:0a:84:b8:e4:f8:c8:98:3a:
         68:d6:59:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----