Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/s93vGRs3UOFY2AHrzTS3EzJwClA.roa
File:                     s93vGRs3UOFY2AHrzTS3EzJwClA.roa (raw, json)
Hash identifier:          BI9ha/zWyEUNzJEGpq3jtNO54Pzg/ot3Dm83binjD9w=
Subject key identifier:   B3:DD:EF:19:1B:37:50:E1:58:D8:01:EB:CD:34:B7:13:32:70:0A:50
Certificate issuer:       /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Certificate serial:       104C
Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/s93vGRs3UOFY2AHrzTS3EzJwClA.roa
Signing time:             Thu 15 Sep 2022 02:37:12 +0000
ROA not before:           Thu 15 Sep 2022 02:37:12 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     9311
IP address blocks:        203.119.94.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4172 (0x104c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
        Validity
            Not Before: Sep 15 02:37:12 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=B3DDEF191B3750E158D801EBCD34B71332700A50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:0e:cb:ea:6c:ee:d8:2a:09:cd:9a:c1:bf:ac:
                    be:2e:a8:4e:c0:a0:a8:54:9d:0d:5c:e7:0d:0f:69:
                    9b:3e:6c:a5:af:9c:ba:3c:f6:c8:cc:52:76:17:09:
                    cd:41:f1:47:23:a6:10:4f:9e:b3:29:49:9e:88:62:
                    78:c8:3c:40:35:33:ea:3e:5f:46:a8:f1:d2:ab:b5:
                    bc:0f:39:b4:9e:c8:1f:d6:8c:de:f1:35:7c:9b:68:
                    7a:f8:d2:9e:b0:c7:ba:5f:f8:a7:22:e7:30:1e:eb:
                    85:4c:62:c3:bb:c8:87:a0:39:b6:ce:21:b6:9a:0c:
                    f4:d5:ec:ad:75:04:4f:be:f7:37:2f:51:2e:0b:c1:
                    74:fb:b9:6e:ca:16:be:4c:71:e7:ac:ca:c3:66:1b:
                    7a:64:1d:72:dd:4b:82:60:65:95:e4:a5:28:18:44:
                    11:40:ac:3e:0c:25:3e:fa:cb:1f:3f:1c:01:17:9b:
                    5c:02:7e:6b:f1:52:8f:5c:f0:a5:55:0f:34:ec:5f:
                    79:8a:45:4a:b8:ee:6d:f5:41:a1:4a:30:c7:07:4d:
                    9d:d7:97:a3:62:55:eb:44:5a:5c:73:ba:55:87:4d:
                    97:43:cc:c9:f7:e7:bf:88:80:00:07:07:a2:f4:cf:
                    d4:c5:b7:8d:9b:64:72:de:fa:b8:c3:cb:f9:8f:f3:
                    1f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:DD:EF:19:1B:37:50:E1:58:D8:01:EB:CD:34:B7:13:32:70:0A:50
            X509v3 Authority Key Identifier:
                keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/s93vGRs3UOFY2AHrzTS3EzJwClA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.119.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:07:5e:84:8c:68:7b:67:f6:57:80:07:17:3b:1a:76:a2:ed:
         87:81:e6:e5:71:40:0c:52:b5:89:2f:cb:af:b5:f5:8e:0c:bf:
         50:13:58:bf:18:45:84:20:ae:6f:cf:1f:26:9a:3b:22:76:c2:
         db:43:3c:56:f7:07:a9:b5:1d:21:d0:42:65:64:ca:57:5f:2b:
         3e:a4:f7:ec:91:5a:82:e0:7c:47:a9:bd:5e:eb:1b:9c:ab:cc:
         6a:32:b8:98:9f:b7:59:94:1e:36:4b:7e:76:d3:00:18:a7:90:
         de:84:99:e0:13:c4:99:88:57:26:3a:76:57:8e:8f:15:43:8c:
         72:d6:29:cd:1c:9a:83:6b:94:dd:57:ac:35:68:7c:3c:08:43:
         0b:1d:19:75:76:22:54:a3:1e:17:cb:57:c8:da:bb:8a:ac:fc:
         9d:e0:ef:56:fd:6c:bb:22:54:cd:2b:6a:f7:b7:81:a2:bb:21:
         e0:83:91:e4:6a:be:4f:6b:32:fc:8d:29:1e:24:ce:e4:2a:a4:
         98:ca:48:0a:02:4f:f2:db:c2:b9:67:76:ea:0a:34:a7:6f:7a:
         b3:fa:fe:e8:92:b2:15:cb:42:83:94:7d:2e:bc:ee:1e:40:e6:
         2f:7b:98:f1:97:bf:7b:28:51:48:19:a7:51:91:49:46:c5:54:
         16:46:fc:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----