Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WANIN/4TG2Q_6PKiXfZf-WBoldXT-g-dA.roa
File:                     4TG2Q_6PKiXfZf-WBoldXT-g-dA.roa (raw, json)
Hash identifier:          Q/1IUK3XWBvzSImTsG60PsZYkLjk/ImvpebyMJQAJGU=
Subject key identifier:   E1:31:B6:43:FE:8F:2A:25:DF:65:FF:96:06:89:5D:5D:3F:A0:F9:D0
Certificate issuer:       /CN=C0D2C8C3D4C2FBBA24D3D83508AB142F2D49427D
Certificate serial:       10AD
Authority key identifier: C0:D2:C8:C3:D4:C2:FB:BA:24:D3:D8:35:08:AB:14:2F:2D:49:42:7D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/wNLIw9TC-7ok09g1CKsULy1JQn0.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/4TG2Q_6PKiXfZf-WBoldXT-g-dA.roa
Signing time:             Thu 15 Sep 2022 02:49:17 +0000
ROA not before:           Thu 15 Sep 2022 02:49:17 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     131636
IP address blocks:        103.130.124.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4269 (0x10ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0D2C8C3D4C2FBBA24D3D83508AB142F2D49427D
        Validity
            Not Before: Sep 15 02:49:17 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=E131B643FE8F2A25DF65FF9606895D5D3FA0F9D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:09:55:08:ab:de:14:8b:02:95:2d:5c:4b:86:
                    b9:bd:e2:32:62:46:b4:df:1b:80:e7:7c:9e:68:3f:
                    52:b9:4b:d8:ed:e6:79:29:c2:b4:12:bf:26:6e:f7:
                    bb:16:e0:fc:e4:7e:8e:87:4c:13:91:7f:7c:7f:9e:
                    14:69:09:25:db:2e:99:f1:4d:f2:f4:d5:d1:a6:94:
                    ae:51:88:3c:cb:18:ec:04:a7:8d:30:f1:8b:89:d7:
                    2f:c9:6c:8d:e1:ab:b1:b9:c2:b1:f7:54:de:47:63:
                    26:8b:4b:e7:49:32:60:ad:58:27:9c:19:24:7c:27:
                    f6:e6:1a:b0:c7:e7:99:9c:dc:5a:d6:db:90:a0:b9:
                    7a:b7:78:ca:f7:1a:dd:76:b0:8f:2f:f7:7e:25:54:
                    05:bf:40:07:2b:3b:9c:c5:ce:8d:82:de:6a:17:0b:
                    05:7b:2b:79:d2:33:65:6c:5b:e8:c8:e8:15:6a:90:
                    3a:49:5a:7a:c7:39:ac:a3:a2:25:08:47:5c:a4:a1:
                    4c:38:d8:3a:87:26:e5:cd:70:a9:6f:b6:99:7a:20:
                    35:01:db:93:f6:93:b3:5b:58:d8:d3:a4:cb:46:f4:
                    12:8f:5a:c0:01:78:f3:f9:02:26:7f:85:a4:91:00:
                    80:7e:be:75:e1:9e:68:96:6d:87:e3:d5:77:ed:a5:
                    01:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:31:B6:43:FE:8F:2A:25:DF:65:FF:96:06:89:5D:5D:3F:A0:F9:D0
            X509v3 Authority Key Identifier:
                keyid:C0:D2:C8:C3:D4:C2:FB:BA:24:D3:D8:35:08:AB:14:2F:2D:49:42:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/wNLIw9TC-7ok09g1CKsULy1JQn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wNLIw9TC-7ok09g1CKsULy1JQn0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/4TG2Q_6PKiXfZf-WBoldXT-g-dA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:7b:dc:f0:67:97:4c:08:75:a1:b8:43:0c:82:51:70:4c:55:
         79:66:18:cb:d2:03:58:b2:85:84:16:57:b5:24:ba:df:29:f9:
         86:c3:15:d9:c7:b8:d2:3a:22:61:2e:df:06:03:78:a3:d2:b8:
         b7:3c:a9:9e:27:cb:6b:b2:c6:c3:d3:14:c9:d8:45:c1:42:86:
         d7:15:c2:1a:bc:33:86:f7:b1:45:af:58:1a:b3:07:5c:2e:97:
         2a:26:b7:c5:ab:19:8a:ef:dd:f7:be:3e:e9:a5:de:3a:a9:64:
         a3:b6:24:51:bf:4e:74:5a:33:74:e0:16:3c:35:28:48:ef:67:
         9f:02:04:9b:8e:a8:c1:7b:9a:d0:08:20:a7:c8:e6:8c:25:58:
         1e:75:1c:b4:56:68:fe:7c:42:2e:42:0b:4d:df:f7:b0:8c:78:
         f1:be:d8:b4:e5:de:42:22:7e:62:f3:3a:de:5c:83:ed:4f:f2:
         74:b2:57:b7:cf:ed:41:8d:c8:83:f5:1d:b0:e2:a3:13:3d:8a:
         5c:fe:2b:e9:ad:4e:33:37:d9:a0:e1:41:d6:2e:31:d2:bf:46:
         c6:87:e0:07:ca:30:47:31:9c:55:b1:64:23:36:b2:3e:d0:5b:
         a3:14:11:3b:47:e4:04:eb:31:49:e4:5d:00:63:3c:be:8e:09:
         33:72:a1:91
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICEK0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzBE
MkM4QzNENEMyRkJCQTI0RDNEODM1MDhBQjE0MkYyRDQ5NDI3RDAeFw0yMjA5MTUw
MjQ5MTdaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEUxMzFCNjQzRkU4RjJB
MjVERjY1RkY5NjA2ODk1RDVEM0ZBMEY5RDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDHCVUIq94UiwKVLVxLhrm94jJiRrTfG4DnfJ5oP1K5S9jt5nkp
wrQSvyZu97sW4Pzkfo6HTBORf3x/nhRpCSXbLpnxTfL01dGmlK5RiDzLGOwEp40w
8YuJ1y/JbI3hq7G5wrH3VN5HYyaLS+dJMmCtWCecGSR8J/bmGrDH55mc3FrW25Cg
uXq3eMr3Gt12sI8v934lVAW/QAcrO5zFzo2C3moXCwV7K3nSM2VsW+jI6BVqkDpJ
WnrHOayjoiUIR1ykoUw42DqHJuXNcKlvtpl6IDUB25P2k7NbWNjTpMtG9BKPWsAB
ePP5AiZ/haSRAIB+vnXhnmiWbYfj1XftpQGnAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQU4TG2Q/6PKiXfZf+WBoldXT+g+dAwHwYDVR0jBBgwFoAUwNLIw9TC+7ok09g1
CKsULy1JQn0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0FOSU4v
d05MSXc5VEMtN29rMDlnMUNLc1VMeTFKUW4wLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS93TkxJdzlUQy03b2swOWcxQ0tzVUx5MUpRbjAuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9XQU5JTi80VEcyUV82UEtpWGZaZi1XQm9s
ZFhULWctZEEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ4J8
MA0GCSqGSIb3DQEBCwUAA4IBAQBQe9zwZ5dMCHWhuEMMglFwTFV5ZhjL0gNYsoWE
Fle1JLrfKfmGwxXZx7jSOiJhLt8GA3ij0ri3PKmeJ8trssbD0xTJ2EXBQobXFcIa
vDOG97FFr1gaswdcLpcqJrfFqxmK7933vj7ppd46qWSjtiRRv050WjN04BY8NShI
72efAgSbjqjBe5rQCCCnyOaMJVgedRy0Vmj+fEIuQgtN3/ewjHjxvti05d5CIn5i
8zreXIPtT/J0sle3z+1BjciD9R2w4qMTPYpc/ivprU4zN9mg4UHWLjHSv0bGh+AH
yjBHMZxVsWQjNrI+0FujFBE7R+QE6zFJ5F0AYzy+jgkzcqGR
-----END CERTIFICATE-----