Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/FzRNnAGpD_chGx7iaZj7FMZxsJc.roa
File:                     FzRNnAGpD_chGx7iaZj7FMZxsJc.roa (raw, json)
Hash identifier:          rIbWELbPAtZQrETfSFWttHcY1jrt/GCKdzfw+odFo2c=
Subject key identifier:   17:34:4D:9C:01:A9:0F:F7:21:1B:1E:E2:69:98:FB:14:C6:71:B0:97
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       0B37
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/FzRNnAGpD_chGx7iaZj7FMZxsJc.roa
Signing time:             Thu 15 Sep 2022 02:50:30 +0000
ROA not before:           Thu 15 Sep 2022 02:50:30 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     6939
IP address blocks:        2405:8700:3000::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2871 (0xb37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Sep 15 02:50:30 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=17344D9C01A90FF7211B1EE26998FB14C671B097
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:59:bc:9c:95:30:77:e8:06:27:2c:1b:ef:1c:
                    76:59:15:ef:e5:81:d3:fd:76:45:03:fe:76:ff:91:
                    09:1b:a1:ce:69:17:74:3f:95:e3:c7:99:f8:f2:4e:
                    37:49:28:41:9d:0c:72:1d:4e:e3:e9:1a:13:a0:8c:
                    41:99:61:e9:10:e4:ff:3f:90:6c:e2:83:50:3f:79:
                    3f:d5:99:6f:52:95:cf:e6:43:6a:e9:ea:3f:ad:82:
                    68:67:e0:b2:7a:5d:39:f1:2a:1f:20:82:04:82:19:
                    5a:44:0f:a4:a7:3c:86:f7:e1:e3:bb:f5:97:b8:38:
                    a2:e1:b2:26:c5:fb:14:eb:97:86:df:f0:49:47:39:
                    07:32:53:f3:ef:5b:d0:b1:16:8a:d1:83:f1:0e:aa:
                    62:88:eb:af:ed:39:69:90:ac:c8:73:0a:56:00:f5:
                    81:1f:ef:50:9a:f8:f2:4e:57:31:1d:ce:5a:e5:11:
                    b9:6f:90:f8:3b:2a:97:94:f1:1c:05:46:52:69:ee:
                    8a:0d:58:5f:4e:0e:1b:cf:a0:8d:5d:8e:2a:2f:6b:
                    5b:65:73:e1:3a:46:85:d5:aa:0a:0e:16:80:c6:57:
                    64:83:08:39:5c:1f:8b:50:9c:45:8b:49:18:a6:86:
                    50:f6:f3:2d:cb:04:6e:76:67:8b:e5:c5:8c:5b:e7:
                    87:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:34:4D:9C:01:A9:0F:F7:21:1B:1E:E2:69:98:FB:14:C6:71:B0:97
            X509v3 Authority Key Identifier:
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/FzRNnAGpD_chGx7iaZj7FMZxsJc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:8700:3000::/48

    Signature Algorithm: sha256WithRSAEncryption
         9d:28:cb:9a:66:f8:b9:66:1c:5e:c0:87:d9:d5:11:fd:39:fb:
         ef:74:e5:d4:48:8b:de:49:2a:b7:db:f3:b8:22:5d:26:09:a8:
         2d:e2:c2:f4:1f:9a:10:20:b2:c8:82:af:e2:fe:6e:7f:fe:e9:
         5d:40:d2:07:0b:dd:0d:29:e7:b0:6e:8a:23:c8:dd:1b:c3:e7:
         49:93:1e:82:48:02:9d:a0:7d:5f:26:ef:3f:b8:1a:e1:84:7a:
         70:e3:13:d4:54:c3:7a:81:45:02:97:6f:e2:c4:1b:ac:b0:95:
         27:e5:51:b4:d0:6c:ce:c3:2d:0e:ae:5f:6b:c8:45:3b:e9:48:
         0d:84:30:6b:b8:55:10:73:38:c4:48:fa:54:a6:ce:00:0a:7f:
         d2:4b:9e:b8:53:c0:b9:b7:31:40:d5:28:e9:f9:2e:15:2f:ba:
         54:1a:03:77:ad:2f:18:e3:cf:16:3c:f8:e6:c3:9f:c0:1c:d9:
         1f:15:40:59:29:d3:02:18:48:a7:f7:bf:ac:98:e8:fc:3c:9f:
         3c:e4:ab:08:54:62:5a:9a:14:02:d7:96:60:8c:cb:71:60:7f:
         a8:55:be:27:45:88:45:08:e5:9a:2e:31:1b:7a:71:c3:51:ff:
         86:20:5f:d5:2d:ab:55:a6:d7:d8:0d:40:3b:f2:a7:e2:0c:b3:
         47:cf:04:0a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----