Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/zczUx7E5SldzO4SpuNMfnnurQQ4.roa
File:                     zczUx7E5SldzO4SpuNMfnnurQQ4.roa (raw, json)
Hash identifier:          FFeoAXJDjaBAd0+rNdN6PkB4VH9Psjfl1cxyW/zNtYM=
Subject key identifier:   CD:CC:D4:C7:B1:39:4A:57:73:3B:84:A9:B8:D3:1F:9E:7B:AB:41:0E
Certificate issuer:       /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Certificate serial:       104C
Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/zczUx7E5SldzO4SpuNMfnnurQQ4.roa
Signing time:             Thu 15 Sep 2022 02:37:13 +0000
ROA not before:           Thu 15 Sep 2022 02:37:13 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     14618
IP address blocks:        2001:dc1::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4172 (0x104c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
        Validity
            Not Before: Sep 15 02:37:13 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=CDCCD4C7B1394A57733B84A9B8D31F9E7BAB410E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:80:53:54:a4:08:09:07:c9:83:f5:35:1f:e8:
                    1f:6a:44:19:d2:40:6d:ac:96:fc:5a:3f:9a:68:51:
                    6e:a1:ee:3c:66:af:42:7f:4c:7d:80:b4:13:a3:67:
                    ed:c0:29:40:bc:82:02:69:e9:90:3d:2a:69:19:e2:
                    28:06:45:d0:21:6d:00:71:42:85:60:90:7a:6b:c7:
                    03:ad:3f:ce:0e:f8:8f:65:8e:c2:ac:49:58:63:cf:
                    1f:51:3e:dc:1d:59:75:dd:fe:61:6e:6c:88:0a:86:
                    18:81:d5:62:4a:5e:5c:90:da:ab:2b:a1:cb:42:78:
                    f7:ee:7f:86:af:ed:f5:4c:c6:dd:4f:90:16:53:35:
                    03:87:92:1a:62:62:09:df:8d:ac:1a:15:93:f8:54:
                    fd:4d:98:44:63:00:8d:86:6d:c1:39:34:be:b8:b0:
                    e6:95:f6:cd:e7:c7:1e:73:67:eb:52:90:26:2f:20:
                    00:06:71:f5:b9:8b:be:df:5b:3e:ba:61:39:b6:fc:
                    6a:38:3c:c4:ca:49:6a:b4:96:ca:9a:27:a7:14:04:
                    3e:ee:8a:d6:02:c0:70:1f:c7:e8:c3:85:f9:d4:d2:
                    5f:e0:95:ff:05:de:ca:1c:51:b2:a2:2d:88:16:bf:
                    80:21:d7:10:d7:8e:77:0f:3d:96:e9:69:df:24:2a:
                    51:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:CC:D4:C7:B1:39:4A:57:73:3B:84:A9:B8:D3:1F:9E:7B:AB:41:0E
            X509v3 Authority Key Identifier:
                keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/zczUx7E5SldzO4SpuNMfnnurQQ4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:dc1::/48

    Signature Algorithm: sha256WithRSAEncryption
         a3:d1:9b:4d:fc:4b:97:d2:7e:dc:ba:09:a0:36:6c:1c:b6:c2:
         63:0e:f5:80:59:2b:42:ef:fd:2a:2a:7a:6e:52:2c:10:14:58:
         2c:26:3f:3b:45:58:cc:82:31:81:8e:c2:ab:11:22:6a:f0:25:
         d2:82:8d:4b:29:87:94:d4:b6:40:ce:bb:dc:ef:c2:d5:49:6b:
         41:0e:10:f3:15:f4:49:0c:00:a9:6a:f4:34:39:ab:e2:02:f9:
         a6:d2:78:bd:18:5f:a0:bb:d5:8b:f7:fc:60:6b:e4:ca:0d:4e:
         9e:f5:34:8a:60:a8:40:37:a4:06:f7:53:f1:38:d9:ed:f3:75:
         81:4c:76:05:5a:bc:b1:86:a2:f2:9b:e6:53:c9:03:7d:1b:45:
         a8:b0:be:29:66:78:d4:83:d1:cf:46:b7:80:8f:c7:6f:99:d4:
         95:93:55:87:af:30:0f:2b:38:9d:88:10:7e:c6:e3:ea:3f:6a:
         05:e0:7c:c5:8c:f1:8b:fa:57:08:3b:09:ee:cb:9b:88:38:98:
         c3:f0:7a:5c:a8:1a:0f:f0:35:97:e1:a1:7c:4f:df:f4:98:c1:
         6e:14:a2:9f:08:3e:a6:71:85:e3:e2:68:a5:43:4e:b4:66:cc:
         f3:ce:a0:9e:f4:dc:bd:cc:8b:c9:cc:f4:c0:ef:74:0f:88:84:
         b2:ab:bc:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----