Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/IDYe4L7irqn6KxR_l5QwzahW-mc.roa
File:                     IDYe4L7irqn6KxR_l5QwzahW-mc.roa (raw, json)
Hash identifier:          SO6w0q2L1ed73RhRXT2BdyRgqtdlEsv7zD/bINSRRn0=
Subject key identifier:   20:36:1E:E0:BE:E2:AE:A9:FA:2B:14:7F:97:94:30:CD:A8:56:FA:67
Certificate issuer:       /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Certificate serial:       104C
Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/IDYe4L7irqn6KxR_l5QwzahW-mc.roa
Signing time:             Thu 15 Sep 2022 02:37:13 +0000
ROA not before:           Thu 15 Sep 2022 02:37:13 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     16509
IP address blocks:        103.235.88.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4172 (0x104c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
        Validity
            Not Before: Sep 15 02:37:13 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=20361EE0BEE2AEA9FA2B147F979430CDA856FA67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:c1:fb:41:4f:8f:bb:06:b4:71:11:f1:30:30:
                    70:79:4d:59:1e:8e:e1:c5:77:c7:72:e7:46:8f:e0:
                    bc:51:5a:7d:78:59:db:43:52:b5:47:ab:f4:87:32:
                    1d:f1:cd:6c:86:a3:99:25:ee:81:57:fe:2f:ab:7f:
                    7a:39:1a:b1:0f:ba:58:f5:d3:6a:16:b1:93:a2:98:
                    67:c2:64:e8:0d:53:a9:6a:40:ea:33:73:53:07:78:
                    78:25:87:78:77:51:2b:f5:50:fb:0b:a2:b1:f9:01:
                    86:ee:e1:73:47:73:d7:4b:fc:3f:36:77:6a:cf:a0:
                    c8:50:14:4d:57:ca:eb:48:34:59:45:03:41:fd:5f:
                    8b:91:5d:d1:80:24:45:67:09:62:0d:bd:09:fd:0d:
                    4f:bb:ef:7f:c6:89:f3:52:66:eb:79:03:df:34:0a:
                    3a:5b:c3:65:9c:40:fa:09:29:40:7b:5a:51:01:26:
                    aa:52:77:7a:9a:82:bb:d3:85:ab:13:7f:0f:77:12:
                    ba:af:35:fe:ee:0b:b5:a9:15:8b:30:73:5d:f9:04:
                    06:8f:1e:04:22:f1:1e:4e:e3:07:89:f4:d7:7b:e9:
                    6b:92:b4:6c:62:70:08:ff:db:17:4b:5c:7e:19:5a:
                    28:e8:4a:56:28:57:7e:67:bd:9a:db:1b:94:bd:7d:
                    d2:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:36:1E:E0:BE:E2:AE:A9:FA:2B:14:7F:97:94:30:CD:A8:56:FA:67
            X509v3 Authority Key Identifier:
                keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/IDYe4L7irqn6KxR_l5QwzahW-mc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.235.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:28:3c:b7:1d:c8:69:41:2f:6a:f1:e3:dc:15:b0:c3:66:c2:
         73:6d:93:5e:21:1c:98:0b:7c:51:83:67:67:1e:12:5a:b4:4a:
         f6:e0:ef:b3:cd:9d:39:17:1a:bc:29:39:91:a9:38:49:f7:d9:
         8a:25:72:24:68:23:d9:cc:71:4a:bb:68:19:c6:51:73:b2:de:
         10:a8:ad:b1:8b:53:4d:1a:92:94:fa:15:6d:f9:42:38:fc:14:
         23:d8:46:d0:09:a0:1c:65:98:64:80:37:ab:af:49:ed:19:ec:
         79:9b:b0:9d:22:42:25:b1:8e:ee:b1:ed:c8:ad:d4:f3:70:53:
         86:e2:21:00:91:85:73:cc:1c:da:75:e3:91:fc:98:46:5f:fa:
         be:e1:18:01:9e:cc:50:19:93:c5:3f:47:3d:3d:d4:7c:e5:0e:
         d5:bc:58:c4:40:54:16:98:51:8f:06:fa:ca:e0:19:86:28:a4:
         78:7e:4b:f6:dd:6e:eb:e9:4b:a1:c0:dc:0a:c4:6b:bf:01:60:
         e7:97:bc:6f:dc:e4:61:d9:8f:bf:80:b3:16:42:d6:92:88:7c:
         4e:b2:3e:c8:3a:2a:91:72:b5:3b:06:ba:f3:8b:78:15:99:32:
         e7:5c:47:77:ce:02:f2:47:3b:79:ca:3b:bf:7d:b0:dd:b5:e1:
         0b:a8:71:b6
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICEEwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREZB
OEM0NTQ4MTVDMzAxNzQ1NkVBM0I0QTdEMDAyMTNCQjg1Qzk2NTAeFw0yMjA5MTUw
MjM3MTNaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDIwMzYxRUUwQkVFMkFF
QTlGQTJCMTQ3Rjk3OTQzMENEQTg1NkZBNjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDywftBT4+7BrRxEfEwMHB5TVkejuHFd8dy50aP4LxRWn14WdtD
UrVHq/SHMh3xzWyGo5kl7oFX/i+rf3o5GrEPulj102oWsZOimGfCZOgNU6lqQOoz
c1MHeHglh3h3USv1UPsLorH5AYbu4XNHc9dL/D82d2rPoMhQFE1XyutINFlFA0H9
X4uRXdGAJEVnCWINvQn9DU+773/GifNSZut5A980Cjpbw2WcQPoJKUB7WlEBJqpS
d3qagrvThasTfw93ErqvNf7uC7WpFYswc135BAaPHgQi8R5O4weJ9Nd76WuStGxi
cAj/2xdLXH4ZWijoSlYoV35nvZrbG5S9fdKDAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUIDYe4L7irqn6KxR/l5QwzahW+mcwHwYDVR0jBBgwFoAU36jEVIFcMBdFbqO0
p9ACE7uFyWUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFdOSUMv
MzZqRVZJRmNNQmRGYnFPMHA5QUNFN3VGeVdVLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS8zNmpFVklGY01CZEZicU8wcDlBQ0U3dUZ5V1UuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UV05JQy9JRFllNEw3aXJxbjZLeFJfbDVR
d3phaFctbWMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ+tY
MA0GCSqGSIb3DQEBCwUAA4IBAQCrKDy3HchpQS9q8ePcFbDDZsJzbZNeIRyYC3xR
g2dnHhJatEr24O+zzZ05Fxq8KTmRqThJ99mKJXIkaCPZzHFKu2gZxlFzst4QqK2x
i1NNGpKU+hVt+UI4/BQj2EbQCaAcZZhkgDerr0ntGex5m7CdIkIlsY7use3IrdTz
cFOG4iEAkYVzzBzadeOR/JhGX/q+4RgBnsxQGZPFP0c9PdR85Q7VvFjEQFQWmFGP
BvrK4BmGKKR4fkv23W7r6UuhwNwKxGu/AWDnl7xv3ORh2Y+/gLMWQtaSiHxOsj7I
OiqRcrU7Brrzi3gVmTLnXEd3zgLyRzt5yju/fbDdteELqHG2
-----END CERTIFICATE-----