Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/qhttPxSyI6kBwmjvaZ36IwffsU0.roa
File:                     qhttPxSyI6kBwmjvaZ36IwffsU0.roa (raw, json)
Hash identifier:          QfHWXR2bjylOrFjWls1Z6wGJ+Hmrq+oN3xvoN9SLvLc=
Subject key identifier:   AA:1B:6D:3F:14:B2:23:A9:01:C2:68:EF:69:9D:FA:23:07:DF:B1:4D
Certificate issuer:       /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
Certificate serial:       0A9C
Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/qhttPxSyI6kBwmjvaZ36IwffsU0.roa
Signing time:             Thu 15 Sep 2022 02:37:00 +0000
ROA not before:           Thu 15 Sep 2022 02:37:00 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24158
IP address blocks:        2402:7500:f9ff::/48 maxlen: 64

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2716 (0xa9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
        Validity
            Not Before: Sep 15 02:37:00 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=AA1B6D3F14B223A901C268EF699DFA2307DFB14D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:87:1f:18:4b:6e:2f:b6:b4:ce:69:1d:42:03:
                    21:41:67:8f:3d:fb:91:7c:78:54:0f:5d:3d:e3:f0:
                    4c:3e:a8:00:7d:ee:01:75:6b:d3:80:83:76:24:8e:
                    fc:0b:9e:c2:3e:46:72:68:49:11:20:95:ea:9b:3c:
                    9b:25:59:aa:ba:ec:e8:66:43:43:13:b9:07:3b:04:
                    bf:d2:4a:04:1e:0c:72:78:fb:81:6f:c3:60:37:0e:
                    3b:bc:04:3d:b3:a6:1d:f9:4b:6a:d1:52:4d:d3:46:
                    10:25:75:c3:89:49:d4:60:87:06:bc:34:86:26:1b:
                    bc:c1:36:d0:b5:98:a0:fe:89:a0:70:7f:43:b8:3c:
                    19:6a:a7:d9:9f:09:8c:b8:86:a9:15:69:6d:00:8c:
                    91:38:d7:ea:7f:28:3a:bf:75:d6:16:b2:97:94:83:
                    2f:6f:06:69:85:2f:dd:86:2a:38:b8:7e:01:c4:39:
                    37:28:9e:7e:eb:d6:24:1f:48:80:e3:4c:48:8b:77:
                    d2:2f:85:99:f2:e8:07:4b:05:dd:9d:91:dc:9f:a6:
                    7c:50:6a:66:9d:f4:a1:f3:3b:ce:b5:af:b0:0b:19:
                    32:bd:0d:21:cb:38:44:b7:f1:73:7e:82:30:58:3f:
                    3e:d9:01:a2:04:1c:94:9b:d3:69:32:32:13:6b:da:
                    28:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:1B:6D:3F:14:B2:23:A9:01:C2:68:EF:69:9D:FA:23:07:DF:B1:4D
            X509v3 Authority Key Identifier:
                keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/qhttPxSyI6kBwmjvaZ36IwffsU0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:7500:f9ff::/48

    Signature Algorithm: sha256WithRSAEncryption
         b1:fb:f4:a1:79:50:43:ad:aa:56:c8:ab:84:f0:d3:d0:ea:ef:
         2d:51:c8:43:af:a3:3b:a8:d7:2b:99:76:ad:ff:3c:6b:a3:1c:
         46:d9:7c:e1:31:f5:28:7e:f8:f6:0f:cb:b1:53:92:33:a8:1a:
         09:21:fb:bc:19:76:04:aa:2f:28:43:b4:33:2b:b3:01:a4:76:
         18:32:60:d3:23:05:ef:15:bc:58:fd:e9:70:ab:90:e2:1f:db:
         7d:fc:e5:2f:79:d0:00:61:54:2c:8c:f8:a7:61:1f:d0:75:29:
         bb:63:41:8a:5c:60:ae:ac:d8:75:aa:52:47:32:aa:02:48:7b:
         7b:c7:70:a8:4c:bf:72:94:46:65:fe:a2:19:65:44:a9:04:33:
         7d:c7:60:7d:33:f6:37:a4:bc:11:6d:c9:dd:1e:1e:30:be:4f:
         3b:70:7e:2f:c2:90:35:c9:25:ab:eb:37:d1:34:1a:11:bc:d1:
         eb:7a:40:56:a6:d9:9d:93:7c:49:af:92:6a:74:bb:b3:e4:bb:
         49:95:a7:a6:5b:7e:6e:86:27:db:c0:4a:b4:6a:50:3a:7f:66:
         2c:2a:1b:7d:b2:77:59:c6:50:f5:ec:24:1d:3f:cf:09:a4:82:
         e3:78:fb:78:0f:cc:de:31:5e:02:27:3d:5f:e2:5b:41:17:60:
         64:86:14:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----