Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/ZbJ02eTxHKOmY8IMBhgdJ9hk7xs.roa
File:                     ZbJ02eTxHKOmY8IMBhgdJ9hk7xs.roa (raw, json)
Hash identifier:          tkLN7VyvW+DwhFHVkQGCjM9LY9Wjxlt/jNVIG/yrgCg=
Subject key identifier:   65:B2:74:D9:E4:F1:1C:A3:A6:63:C2:0C:06:18:1D:27:D8:64:EF:1B
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       0BD4
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/ZbJ02eTxHKOmY8IMBhgdJ9hk7xs.roa
Signing time:             Mon 27 Mar 2023 23:14:10 +0000
ROA not before:           Mon 27 Mar 2023 23:14:10 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     18424
IP address blocks:        103.30.47.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3028 (0xbd4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Mar 27 23:14:10 2023 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=65B274D9E4F11CA3A663C20C06181D27D864EF1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b5:92:2f:44:af:de:32:e4:61:64:14:a5:29:
                    b7:1d:ac:0a:7f:31:32:4d:a6:c8:9b:63:ce:c3:ed:
                    6b:4e:12:57:3b:1b:f1:94:2f:bc:e9:70:64:ec:ee:
                    a7:77:99:8e:c0:a6:4c:cb:5d:f1:c9:ba:01:16:bc:
                    ca:84:79:92:ee:84:85:28:97:1e:03:dd:a0:2d:74:
                    74:37:7f:51:31:74:b1:0c:39:d0:45:57:a6:fc:ff:
                    ed:e3:56:40:06:63:ee:e0:7b:41:8e:2b:af:52:de:
                    87:fc:ea:d5:54:4c:22:72:e2:7f:c2:c3:2b:3b:ea:
                    50:cb:27:88:72:29:6d:bb:53:39:a2:9f:d0:54:05:
                    6f:cb:b1:3d:79:20:9c:18:5f:89:0d:4f:f2:c3:4b:
                    13:c0:ef:63:a0:ac:41:dc:6e:52:11:53:42:aa:04:
                    89:5e:ec:24:5f:ec:2b:f0:3a:16:6c:ce:29:c2:95:
                    04:e3:9a:16:f9:53:da:82:2a:cc:fe:da:ec:14:65:
                    7b:a7:ce:8f:ea:98:f7:7c:3f:1f:4b:e0:5d:15:04:
                    2c:fd:43:0e:8a:8b:64:c6:b6:12:55:85:f1:4f:c0:
                    c8:f5:eb:12:38:38:97:bb:9a:ab:25:6f:91:f7:84:
                    4f:bd:53:18:f3:e8:72:c9:18:1e:ca:f8:0d:68:e7:
                    29:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:B2:74:D9:E4:F1:1C:A3:A6:63:C2:0C:06:18:1D:27:D8:64:EF:1B
            X509v3 Authority Key Identifier:
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/ZbJ02eTxHKOmY8IMBhgdJ9hk7xs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.30.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:90:96:4d:fa:d2:3c:a8:f2:e4:ec:6a:9a:76:ee:84:83:20:
         a2:6a:88:48:ce:6c:3a:a5:f9:1b:01:55:9b:d3:ca:7d:ef:99:
         2f:6d:f6:4c:e0:97:f9:3a:96:f4:42:67:c3:ae:7a:16:ab:f9:
         a3:63:56:e4:6c:f6:44:a4:a8:88:30:d7:3a:72:9d:d1:86:f5:
         ae:87:15:6b:38:33:ea:23:98:07:4f:bc:f8:d5:43:ed:b9:d3:
         e6:62:89:b9:39:43:bb:21:61:c2:66:6c:fb:15:81:cc:d5:84:
         67:a8:b6:bb:92:01:6b:b5:7e:39:bf:0a:6d:c9:cf:f8:6b:da:
         1a:b1:92:52:45:3b:82:3d:c3:05:1b:6a:2f:3b:21:62:6e:3f:
         47:44:36:0f:c1:70:28:2e:d2:98:0f:c5:d1:03:7c:08:26:c9:
         db:23:9d:83:7a:04:96:ba:72:37:16:b8:34:1d:7c:0a:fd:37:
         ad:b4:c0:00:9c:0a:71:98:28:bc:26:0a:5d:4d:7c:ee:76:ba:
         eb:56:03:cf:99:2e:7d:b0:f6:60:73:bb:21:48:43:df:d5:dc:
         cf:ac:c2:8f:e6:1f:7a:ea:7e:51:9d:96:d6:3f:63:46:77:81:
         fd:a6:9a:bb:ad:ec:20:27:fe:e7:8b:b6:f5:c4:11:59:50:d1:
         87:97:41:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----