Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TINP/AYB0xZZDfGktsncVQaNxBQFCxYo.roa
File:                     AYB0xZZDfGktsncVQaNxBQFCxYo.roa (raw, json)
Hash identifier:          zcdFK1JuUpJNq+pksLpM/H8ObTlhmJXUaatNblfqV+Y=
Subject key identifier:   01:80:74:C5:96:43:7C:69:2D:B2:77:15:41:A3:71:05:01:42:C5:8A
Certificate issuer:       /CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A
Certificate serial:       0A97
Authority key identifier: E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/AYB0xZZDfGktsncVQaNxBQFCxYo.roa
Signing time:             Thu 15 Sep 2022 02:50:59 +0000
ROA not before:           Thu 15 Sep 2022 02:50:59 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     4780
IP address blocks:        49.213.167.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2711 (0xa97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A
        Validity
            Not Before: Sep 15 02:50:59 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=018074C596437C692DB2771541A371050142C58A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:27:67:2c:1d:2d:56:23:df:08:0e:b8:2a:6d:
                    2c:2f:63:16:56:33:d7:b6:db:f9:d3:95:cb:21:c0:
                    9f:d7:6d:c5:44:14:42:e5:45:32:19:d6:ae:79:3b:
                    db:40:00:0d:4a:de:51:f4:d8:77:2a:97:6b:04:36:
                    b8:af:78:30:5a:d5:67:d4:a4:f8:86:8d:bd:8c:03:
                    ad:d7:d9:c7:47:b2:7a:98:27:b7:d0:e0:14:b0:93:
                    4b:6b:9f:70:86:ea:de:07:9c:8c:73:35:a4:7d:24:
                    58:65:d4:42:6e:40:8b:c5:ac:aa:74:81:e6:ea:07:
                    67:b2:32:9f:c1:c9:4d:cb:00:db:ac:14:53:a7:0d:
                    cc:89:3e:29:ca:73:aa:78:b2:46:ac:a9:b7:a7:f9:
                    3f:c7:7f:e2:17:57:9b:9e:05:e0:86:3a:89:66:24:
                    6f:70:b9:9a:e3:c0:96:f3:0a:4f:e0:5f:27:3d:67:
                    4c:61:ba:2f:3c:1c:01:a7:a9:b2:dc:87:3d:bb:dd:
                    55:22:6a:59:7a:74:e3:d6:a0:d0:94:ed:c8:36:b5:
                    06:dc:9f:b5:96:75:62:30:68:18:ff:f4:a4:85:2e:
                    6e:e0:52:69:39:9d:d0:5c:fb:6c:1b:8b:45:66:e4:
                    7f:5e:30:0e:da:0e:73:ed:51:b4:41:40:15:a9:b3:
                    f0:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:80:74:C5:96:43:7C:69:2D:B2:77:15:41:A3:71:05:01:42:C5:8A
            X509v3 Authority Key Identifier:
                keyid:E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/AYB0xZZDfGktsncVQaNxBQFCxYo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.213.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:c4:bb:7b:f2:0d:77:5c:0e:e2:0b:d6:18:0d:82:1c:c0:46:
         4e:fc:09:c7:c6:ce:67:2f:27:00:6e:1c:9b:7e:71:3b:d2:14:
         bb:86:90:2c:5f:de:2e:1f:63:ad:1f:3b:2e:6a:5f:c1:ff:8e:
         e9:9e:8d:39:f9:54:a8:7f:b4:d0:65:8e:21:73:33:72:85:1c:
         f1:ff:b6:94:4e:9b:76:be:6e:a2:3b:65:95:1e:23:e4:75:47:
         bc:91:cc:4b:77:7a:9f:40:86:c4:87:1b:d8:dc:04:c2:88:ad:
         e1:a1:85:e4:23:25:46:65:2f:23:e4:32:95:21:10:5b:4a:19:
         fe:5c:fb:ec:aa:2a:4a:62:58:2b:26:26:02:8d:23:ca:57:9c:
         74:88:9c:4f:ec:58:61:f9:96:50:51:c3:b7:92:aa:62:1b:45:
         4a:85:70:29:c4:be:11:69:46:56:7f:2e:85:f1:6c:f1:d3:19:
         61:1b:1a:b3:43:d7:ad:a7:4f:57:46:c6:6b:91:8f:5a:88:4b:
         a4:5f:0e:db:06:9e:f6:66:1c:95:c7:36:a1:3d:9a:07:1d:de:
         0b:e2:e2:ac:50:96:4e:72:27:10:69:66:ac:85:61:39:21:6b:
         8e:73:d5:79:68:5e:1d:85:0b:b6:a7:a4:6c:1a:20:57:32:f2:
         0f:e8:f3:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----