Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/DlxV5Ar_CoEYF_XXA0Aodv0zGcA.roa
File:                     DlxV5Ar_CoEYF_XXA0Aodv0zGcA.roa (raw, json)
Hash identifier:          my2wKm9n7ckITd60wEgb55E4QVR+bvPE0EvPt1EqulU=
Subject key identifier:   0E:5C:55:E4:0A:FF:0A:81:18:17:F5:D7:03:40:28:76:FD:33:19:C0
Certificate issuer:       /CN=87A4AFD9E7FC1FED4F9545DE41CE4413DACB0E05
Certificate serial:       0A51
Authority key identifier: 87:A4:AF:D9:E7:FC:1F:ED:4F:95:45:DE:41:CE:44:13:DA:CB:0E:05
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/DlxV5Ar_CoEYF_XXA0Aodv0zGcA.roa
Signing time:             Thu 15 Sep 2022 02:42:20 +0000
ROA not before:           Thu 15 Sep 2022 02:42:20 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     131149
IP address blocks:        43.254.16.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2641 (0xa51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87A4AFD9E7FC1FED4F9545DE41CE4413DACB0E05
        Validity
            Not Before: Sep 15 02:42:20 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=0E5C55E40AFF0A811817F5D703402876FD3319C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:cf:c8:04:2c:bd:9a:17:36:03:84:72:26:34:
                    81:ba:3d:41:ab:ab:13:9a:81:01:9b:83:39:e6:ef:
                    8d:cb:5b:6e:c0:b4:cf:85:26:48:78:03:a4:43:85:
                    96:68:29:9b:b0:6c:3b:47:8e:5e:4e:69:bc:2f:52:
                    b5:38:54:98:72:a8:16:fa:12:3a:f8:58:d7:f6:e5:
                    a5:1d:4e:8d:92:04:fe:51:c7:f3:91:2f:c3:4e:b8:
                    3e:ea:81:28:9a:3e:2b:eb:b3:55:94:18:2d:5a:34:
                    d8:19:31:a7:78:99:27:54:3f:cc:af:4b:35:5b:95:
                    7a:ad:f9:66:3f:39:60:99:23:ff:d3:d3:84:8c:fb:
                    67:04:24:01:08:e5:29:2c:c2:c6:da:06:9c:cc:f0:
                    e4:b2:17:b8:13:29:d3:42:a6:c8:d6:93:8f:15:7e:
                    fd:6a:33:f1:55:07:48:5a:f2:36:e6:41:49:6c:33:
                    53:64:c1:05:cb:2f:e1:10:51:ba:ab:e0:17:5b:ce:
                    78:c6:ee:6a:dc:47:2e:51:68:97:6c:07:a3:44:32:
                    77:fe:13:ea:a3:2b:39:f3:f7:72:48:29:35:3e:a1:
                    65:3c:df:8b:93:72:41:5f:5a:8f:1a:97:e8:48:d5:
                    59:d7:f2:85:02:5e:c4:9f:ec:9c:f6:c5:a0:7a:e4:
                    48:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:5C:55:E4:0A:FF:0A:81:18:17:F5:D7:03:40:28:76:FD:33:19:C0
            X509v3 Authority Key Identifier:
                keyid:87:A4:AF:D9:E7:FC:1F:ED:4F:95:45:DE:41:CE:44:13:DA:CB:0E:05

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/DlxV5Ar_CoEYF_XXA0Aodv0zGcA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.254.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:cd:56:e9:61:8e:c8:5f:07:d8:c3:22:03:56:f7:8e:1c:6d:
         e6:fb:6d:f4:21:06:9b:a7:7c:17:74:6b:fa:dd:f9:79:70:85:
         79:68:fb:52:e5:e2:41:c8:b3:24:f0:2b:cc:63:86:fa:67:88:
         b9:13:53:31:41:2c:e3:16:41:92:2c:29:d0:72:a2:14:53:9d:
         1f:9b:f2:2b:a1:92:2b:61:84:d3:07:63:af:d6:02:5a:81:5f:
         5f:21:de:26:29:39:1f:4a:d0:09:11:e8:f4:8b:8b:f1:6b:de:
         17:f1:b6:4c:0b:01:41:d6:ad:df:df:56:35:36:bc:e5:74:65:
         d4:e2:c1:0a:68:d1:75:d7:48:47:e6:37:72:4f:3d:04:f5:00:
         f5:5e:2b:ce:f2:05:c2:ea:3a:f8:95:64:c2:03:e6:6c:53:81:
         b7:b6:72:bc:b1:ab:b4:db:a0:0c:eb:2d:90:3e:55:54:91:ee:
         f8:52:71:ee:48:2d:2d:c3:e1:22:98:44:17:e7:71:da:dc:d2:
         5a:ee:f7:b5:36:8c:4e:28:e2:32:b5:59:11:1f:8b:cc:6b:58:
         1f:fc:4b:7a:31:52:4f:a2:c5:0b:eb:99:5a:15:0c:39:ab:17:
         21:4d:45:fe:b2:ae:d8:89:08:79:55:e2:3d:3f:37:e2:26:64:
         e5:2b:54:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----