Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNTT/tZ0T1yQYHJ-Vbcx5sWPzVplSu0U.roa
File:                     tZ0T1yQYHJ-Vbcx5sWPzVplSu0U.roa (raw, json)
Hash identifier:          RxegCsc67Tdtfgvbe/HaDWnvsXlnFiHVqxcxKquP+wM=
Subject key identifier:   B5:9D:13:D7:24:18:1C:9F:95:6D:CC:79:B1:63:F3:56:99:52:BB:45
Certificate issuer:       /CN=9E2697FA70252F83F41D121EC0B5CB458B6FF214
Certificate serial:       0A6D
Authority key identifier: 9E:26:97:FA:70:25:2F:83:F4:1D:12:1E:C0:B5:CB:45:8B:6F:F2:14
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/niaX-nAlL4P0HRIewLXLRYtv8hQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/tZ0T1yQYHJ-Vbcx5sWPzVplSu0U.roa
Signing time:             Thu 15 Sep 2022 02:50:47 +0000
ROA not before:           Thu 15 Sep 2022 02:50:47 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     3949
IP address blocks:        122.255.94.16/28 maxlen: 28

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2669 (0xa6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E2697FA70252F83F41D121EC0B5CB458B6FF214
        Validity
            Not Before: Sep 15 02:50:47 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=B59D13D724181C9F956DCC79B163F3569952BB45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:38:33:84:53:47:2a:7c:85:70:a1:40:13:18:
                    e9:08:5c:cd:95:75:81:9d:42:25:30:52:73:07:f1:
                    de:d1:52:e0:cd:3f:6c:a4:4b:12:85:8e:11:ca:97:
                    43:13:41:e1:37:99:e7:de:4a:ee:58:66:6a:94:bd:
                    bc:71:e7:b4:2c:85:c0:9f:6e:ee:3e:c3:0d:7a:02:
                    de:ec:2b:00:1e:58:45:31:da:81:5a:25:fe:37:2e:
                    e6:4a:21:ba:91:4d:9d:88:88:56:75:61:94:f0:9b:
                    56:28:74:6a:60:be:29:ce:9e:97:66:b6:9f:3f:af:
                    96:af:ad:9f:38:7b:ff:b6:25:30:8e:d8:a7:f5:5e:
                    e7:f6:ca:66:8e:dd:3e:9d:f9:91:d6:e8:40:26:73:
                    64:be:10:9d:00:e0:17:30:24:ca:76:ac:e8:2c:b5:
                    7b:72:55:46:71:b4:44:a9:50:1f:40:4a:c5:a2:49:
                    3a:2f:d6:61:cf:e6:3b:5b:91:3f:46:e0:e8:5d:37:
                    f7:c4:ac:6f:42:6c:d7:7b:81:b2:eb:08:17:fa:64:
                    c1:bb:9c:28:64:b7:8d:c7:d1:ca:38:d4:78:54:e6:
                    f3:30:cb:70:1f:65:9a:55:f8:b7:b5:d6:32:39:30:
                    f7:94:fe:66:70:f7:a4:23:72:8a:c5:05:45:aa:e8:
                    3c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:9D:13:D7:24:18:1C:9F:95:6D:CC:79:B1:63:F3:56:99:52:BB:45
            X509v3 Authority Key Identifier:
                keyid:9E:26:97:FA:70:25:2F:83:F4:1D:12:1E:C0:B5:CB:45:8B:6F:F2:14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/niaX-nAlL4P0HRIewLXLRYtv8hQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/niaX-nAlL4P0HRIewLXLRYtv8hQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/tZ0T1yQYHJ-Vbcx5sWPzVplSu0U.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.255.94.16/28

    Signature Algorithm: sha256WithRSAEncryption
         66:01:36:78:ce:83:4a:b1:69:98:08:a8:cf:95:86:4f:b0:c3:
         b6:a1:67:34:90:b8:87:ec:3e:23:6c:3d:b0:33:4d:0e:26:20:
         64:f4:7f:b3:2a:51:63:f5:ba:50:7b:fc:98:aa:ce:53:40:8b:
         fd:bd:e9:d0:18:87:4b:01:1a:a2:c1:45:28:1d:8f:9b:a2:63:
         5f:3c:9a:3c:b0:1f:96:32:d3:17:bf:b0:cc:b5:a8:72:ba:f8:
         ba:a5:eb:6c:5b:1e:d2:17:d8:e1:da:34:85:64:c0:77:0e:f7:
         40:53:5c:3f:e4:13:2d:f2:3b:4b:79:fc:0e:9d:77:48:c7:ce:
         aa:92:dc:3f:8e:28:91:4f:fa:c2:bd:87:d2:9d:77:c2:bc:d7:
         e7:ae:2b:5b:a5:4a:07:52:f0:0e:a9:10:c4:e1:19:cf:f7:0e:
         94:53:ff:a1:b7:49:de:7a:12:70:68:e8:b3:84:ba:0a:be:c3:
         39:68:19:79:7b:0b:a9:a2:82:99:d1:ed:73:fc:6b:0f:d2:e3:
         c2:db:1e:a7:e2:d3:50:c1:3b:64:8f:3e:1b:ad:36:2f:73:96:
         c8:93:db:18:05:9d:e1:3b:1f:77:2d:74:fa:49:8d:14:64:60:
         a9:e7:49:70:91:1f:45:90:cf:fa:d3:39:1f:e3:01:3e:50:aa:
         d9:27:bf:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----