Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WOLFNET/H06HD0Dg35etoo8jQbiFpUpxENo.roa
File:                     H06HD0Dg35etoo8jQbiFpUpxENo.roa (raw, json)
Hash identifier:          YYVVb2DaMnvWqU45jz/xFy7zrSNVZujbGmB5kbipCAk=
Subject key identifier:   1F:4E:87:0F:40:E0:DF:97:AD:A2:8F:23:41:B8:85:A5:4A:71:10:DA
Certificate issuer:       /CN=C3FC116A3CCB105AB50DA417679B1F9C70A4BD97
Certificate serial:       01C4
Authority key identifier: C3:FC:11:6A:3C:CB:10:5A:B5:0D:A4:17:67:9B:1F:9C:70:A4:BD:97
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/w_wRajzLEFq1DaQXZ5sfnHCkvZc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WOLFNET/H06HD0Dg35etoo8jQbiFpUpxENo.roa
Signing time:             Tue 14 Mar 2023 10:07:15 +0000
ROA not before:           Tue 14 Mar 2023 10:07:15 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38846
IP address blocks:        2407:a0c0::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 452 (0x1c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3FC116A3CCB105AB50DA417679B1F9C70A4BD97
        Validity
            Not Before: Mar 14 10:07:15 2023 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=1F4E870F40E0DF97ADA28F2341B885A54A7110DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a6:c7:f6:80:d2:67:f6:67:c7:39:ec:25:75:
                    e9:74:ed:a4:68:00:49:fc:56:32:3f:0d:f9:b2:b9:
                    d2:86:e2:f7:9f:0a:58:7b:4e:cf:71:66:bf:4a:5a:
                    58:1e:6c:dc:d3:70:85:70:d1:ff:7e:68:a0:b8:97:
                    b4:aa:14:cf:78:7e:d7:42:32:f1:5d:86:70:b3:83:
                    40:7b:23:42:ac:2d:95:87:7d:97:f7:5f:1d:3d:a8:
                    c9:5e:d9:e3:23:f1:69:d9:69:a9:2c:ee:ef:a4:e9:
                    48:48:ef:cb:2d:32:f8:f0:74:1a:3b:5f:31:0d:a7:
                    6c:c8:a0:00:4f:c0:0f:ae:83:63:2e:21:88:28:80:
                    a4:3c:55:f5:25:db:d6:c2:3f:7b:45:f0:fd:45:28:
                    b6:2f:83:9e:db:46:95:f2:bb:de:8d:98:c7:ac:e7:
                    d6:d8:c4:25:70:e2:fd:e2:8d:8c:5c:a8:39:e5:a8:
                    32:98:23:d4:7e:24:44:80:bc:40:19:b6:42:0e:4c:
                    04:a3:e0:e5:56:3e:d1:ce:74:1b:1f:fd:b1:40:4a:
                    12:84:59:9b:1e:ae:56:0a:0d:33:6b:e8:72:5c:86:
                    2a:38:2f:50:d1:e7:48:95:1c:d9:07:cf:a0:38:6e:
                    e6:db:01:64:a4:81:e8:c0:ea:d4:72:30:8e:fe:73:
                    5c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:4E:87:0F:40:E0:DF:97:AD:A2:8F:23:41:B8:85:A5:4A:71:10:DA
            X509v3 Authority Key Identifier:
                keyid:C3:FC:11:6A:3C:CB:10:5A:B5:0D:A4:17:67:9B:1F:9C:70:A4:BD:97

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WOLFNET/w_wRajzLEFq1DaQXZ5sfnHCkvZc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/w_wRajzLEFq1DaQXZ5sfnHCkvZc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WOLFNET/H06HD0Dg35etoo8jQbiFpUpxENo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:a0c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:d6:bb:89:cb:fb:95:4f:dc:01:95:6a:57:8e:92:5d:b0:0f:
         8e:91:4b:1e:66:eb:ad:6a:02:eb:a4:62:f5:f2:f7:83:33:ee:
         88:bb:22:8c:0d:24:8f:82:42:e7:3b:79:c8:22:6e:63:94:fd:
         ea:78:f4:e9:59:a9:81:9d:f9:fc:14:68:7c:fb:b8:a9:c0:6c:
         05:27:cf:7e:a3:6a:91:42:a5:da:9a:92:b4:a1:87:6b:20:1a:
         95:2b:86:2c:b1:83:84:9c:07:86:a9:5d:28:f0:5d:aa:9b:d8:
         de:c1:9c:2c:f7:b4:1f:d7:9b:31:2d:73:b7:71:f2:8a:99:18:
         46:ff:5f:5b:43:d2:f0:da:45:cf:81:9f:af:11:c3:2b:50:35:
         7f:eb:d0:4c:a2:ce:38:c9:72:fa:8c:87:c8:d1:48:40:0f:4a:
         df:a7:6d:62:ea:80:b4:a6:61:a2:12:27:a5:c2:0e:41:86:2b:
         c9:89:7a:32:90:70:14:7f:77:2a:af:2d:66:2e:eb:ae:8d:2f:
         24:1b:42:ad:6b:b6:15:f4:fe:4e:c8:07:a5:a7:54:61:e9:b4:
         be:5a:66:95:79:c1:48:26:e2:2c:8f:e7:cf:d2:92:4b:ba:73:
         2e:1d:76:19:a8:8d:01:4a:7a:7d:3d:1f:7e:57:04:9c:29:23:
         46:e0:d6:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----