Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/7tFeUYM3WiabOF7vLtmZFGXth7A.roa
File:                     7tFeUYM3WiabOF7vLtmZFGXth7A.roa (raw, json)
Hash identifier:          k3PRnvHqcOUSwuUI8MVcY7g/U1y1eQre2gI+LGrLLfk=
Subject key identifier:   EE:D1:5E:51:83:37:5A:26:9B:38:5E:EF:2E:D9:99:14:65:ED:87:B0
Certificate issuer:       /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Certificate serial:       106A
Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/7tFeUYM3WiabOF7vLtmZFGXth7A.roa
Signing time:             Thu 13 Oct 2022 08:37:20 +0000
ROA not before:           Thu 13 Oct 2022 08:37:20 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     7539
IP address blocks:        103.235.88.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4202 (0x106a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
        Validity
            Not Before: Oct 13 08:37:20 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=EED15E5183375A269B385EEF2ED9991465ED87B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:55:0a:43:e6:b8:48:87:15:d2:94:f5:a6:e2:
                    aa:08:1a:52:b9:d2:e7:d0:a7:fe:60:31:36:31:06:
                    cd:5d:b6:24:ea:9c:ac:b9:b2:ec:8c:f4:a1:bf:b8:
                    4f:14:8e:f9:62:34:a5:19:19:d7:ba:e5:80:15:8c:
                    90:d3:bf:2d:f0:c6:e7:78:22:da:6c:2b:99:91:42:
                    d4:bc:3b:65:87:c7:b5:d4:60:27:a0:ad:d6:31:1a:
                    05:8e:2b:57:b9:a7:de:5e:7d:84:dd:77:dc:d9:96:
                    e3:c1:60:4b:35:9f:5f:70:d0:69:bc:2a:88:f4:92:
                    05:b2:a1:e7:ab:b6:e0:d9:af:5b:f0:ee:aa:22:8d:
                    a1:57:8b:04:73:48:a8:38:ac:14:d6:e1:f2:b2:cf:
                    73:8c:4a:5a:e2:2a:2c:00:48:bc:09:68:20:4c:18:
                    33:c3:17:91:ee:be:af:bb:e3:53:3e:21:df:f3:f1:
                    9a:db:17:04:25:5d:30:ec:e9:d2:23:88:62:b6:d5:
                    3f:7f:83:8a:57:e8:c1:74:2d:4c:fa:b7:55:cb:c4:
                    99:53:51:26:fd:17:ad:61:83:be:4b:46:62:9b:78:
                    7e:d2:c4:b1:20:e5:69:6f:c1:16:f5:8f:a5:bd:4f:
                    21:ab:e5:64:6e:7a:08:a6:74:ad:b4:5b:98:e2:14:
                    f7:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:D1:5E:51:83:37:5A:26:9B:38:5E:EF:2E:D9:99:14:65:ED:87:B0
            X509v3 Authority Key Identifier:
                keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/7tFeUYM3WiabOF7vLtmZFGXth7A.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.235.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:b8:79:79:61:2b:f2:d2:7a:0c:ab:58:b0:f8:49:85:6d:cc:
         2f:53:bd:5e:30:4c:41:5a:06:7d:05:d0:47:91:6b:2b:9b:f4:
         0f:ea:a1:68:66:b1:89:c4:bf:a8:e9:ef:eb:11:c4:ee:f6:7f:
         52:38:57:d7:ee:06:ca:77:df:71:e1:8f:48:33:3a:fd:8d:e2:
         e4:c4:b0:63:2d:e0:e7:ef:5f:ed:cb:d2:61:ca:84:97:5a:fb:
         d0:d0:75:2f:a4:40:72:2a:9b:fa:aa:3c:23:3b:89:e3:9a:01:
         1f:21:f2:f6:5e:d3:b5:3b:5f:23:07:15:b6:5c:fd:a5:8e:db:
         ee:70:cb:ce:4d:22:36:dd:0d:7e:75:70:69:06:16:5c:dd:5d:
         76:ab:52:c5:47:5c:c3:83:97:1a:be:eb:c5:fd:1c:fa:5a:4d:
         9c:57:65:7b:c1:24:28:9b:80:72:0c:b2:e5:59:ba:6a:6f:ac:
         51:73:d7:71:5c:04:eb:13:c4:eb:ec:c2:7d:c0:d5:7f:49:bb:
         f7:78:5d:dc:11:a8:89:cb:67:6d:03:11:bc:4e:d3:ee:c4:74:
         13:58:c1:c3:37:f9:46:0a:5f:d6:86:78:2b:4e:1f:25:83:43:
         8c:38:c4:ee:04:9e:f8:38:71:72:de:3a:b1:82:e9:7f:43:46:
         67:56:02:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----