Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/rOF5Hpqpb4U4hAcibdqF4kamCdg.roa
File:                     rOF5Hpqpb4U4hAcibdqF4kamCdg.roa (raw, json)
Hash identifier:          P0REmltgX/A1iMSI8vCYtzanuhWdmPPHTgdXU+zi9rM=
Subject key identifier:   AC:E1:79:1E:9A:A9:6F:85:38:84:07:22:6D:DA:85:E2:46:A6:09:D8
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       0BCD
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/rOF5Hpqpb4U4hAcibdqF4kamCdg.roa
Signing time:             Mon 27 Mar 2023 23:14:07 +0000
ROA not before:           Mon 27 Mar 2023 23:14:07 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     18424
IP address blocks:        121.50.146.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3021 (0xbcd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Mar 27 23:14:07 2023 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=ACE1791E9AA96F85388407226DDA85E246A609D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c6:87:c4:cd:3b:37:04:c1:09:bd:d9:f7:ed:
                    cc:17:3a:69:a2:d2:72:4d:77:d5:72:ea:7c:bc:9f:
                    cf:e7:15:26:62:6c:81:c8:91:28:3a:bc:b8:4a:fd:
                    4d:3f:c3:dd:7a:df:96:bc:d9:d8:55:38:91:55:42:
                    ee:15:dd:6d:83:45:19:96:fc:c9:1b:0e:93:24:3b:
                    29:7c:2f:d2:0a:8e:4f:8b:20:9c:fe:28:4e:13:f8:
                    98:13:01:61:c3:dc:cf:46:f1:95:76:e8:39:e1:d7:
                    4b:e7:c4:8b:a1:c7:da:11:d5:79:ec:bc:5d:74:3c:
                    15:c3:2a:40:93:2b:8b:8a:5a:11:c0:6b:c4:ec:a3:
                    77:a0:eb:2c:5c:dd:b2:6d:6b:f1:2c:e8:9f:66:d0:
                    95:10:6d:0d:ce:03:ed:4b:73:f1:c9:fd:90:22:97:
                    9e:56:1e:46:c9:5d:56:c4:dd:f8:de:cb:c6:38:4e:
                    25:9f:bc:31:5f:94:c7:9b:38:66:95:8b:4a:92:ae:
                    c4:96:17:0c:e8:86:90:98:bd:17:c0:a1:50:f7:46:
                    ed:3a:83:a1:7e:94:90:ef:b1:d5:58:f9:83:5e:8a:
                    03:51:ee:cb:ab:c2:43:d9:2a:07:c3:69:2e:ec:a7:
                    77:98:47:86:0a:71:bd:9e:7b:11:ca:9e:ff:7a:33:
                    66:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:E1:79:1E:9A:A9:6F:85:38:84:07:22:6D:DA:85:E2:46:A6:09:D8
            X509v3 Authority Key Identifier:
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/rOF5Hpqpb4U4hAcibdqF4kamCdg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.50.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:e9:6a:32:f9:27:56:8c:15:e3:06:2e:6d:61:95:d0:cf:7a:
         5d:53:cf:25:9e:61:28:1b:d7:25:d8:f9:1e:63:35:3b:97:3b:
         eb:f4:b4:a8:24:de:54:69:86:c1:f4:b0:02:65:8e:b8:68:1c:
         cb:ad:49:51:95:45:ce:fa:56:06:f3:3b:8f:bc:0b:89:32:1a:
         22:4e:cf:a3:d3:d2:9a:bc:91:1a:ff:a7:2e:a9:37:f2:18:b9:
         81:e0:ed:f1:ec:76:50:24:e5:30:92:71:e5:2e:fa:d2:16:6c:
         20:16:e4:82:a5:ca:83:6e:0c:03:9b:f1:32:f7:e5:d9:25:a6:
         ae:ad:c6:c8:19:05:79:c9:aa:0c:37:5d:2f:5d:ea:16:9c:cb:
         d7:30:cc:fc:32:7e:ab:cd:89:6f:6e:6f:fa:3d:c3:df:67:18:
         e4:ac:31:a9:18:5d:01:96:0d:5c:b9:f3:df:bc:a0:62:61:dc:
         e5:09:0a:18:bf:7c:0d:0b:f1:68:c0:14:cd:9c:03:a6:64:4a:
         8a:fe:e2:bf:7a:01:25:9e:a7:b1:02:71:6d:aa:48:6b:d0:f5:
         5b:a6:40:9c:ec:9f:56:c6:e8:23:23:1f:c0:0a:38:d7:c0:8a:
         65:3e:31:14:90:76:d3:83:38:bb:02:1d:94:34:49:c5:8e:2a:
         c9:6c:81:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----