Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/5W88E8LidycL_INXrK11WIsZLXM.roa
File:                     5W88E8LidycL_INXrK11WIsZLXM.roa (raw, json)
Hash identifier:          +UsuLgJ0HgVsC7OtiHXN96reQ0b5OaeskOOpMv15E7s=
Subject key identifier:   E5:6F:3C:13:C2:E2:77:27:0B:FC:83:57:AC:AD:75:58:8B:19:2D:73
Certificate issuer:       /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial:       0F63
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/5W88E8LidycL_INXrK11WIsZLXM.roa
Signing time:             Thu 15 Sep 2022 02:39:50 +0000
ROA not before:           Thu 15 Sep 2022 02:39:50 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     131627
IP address blocks:        219.91.64.0/18 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3939 (0xf63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
        Validity
            Not Before: Sep 15 02:39:50 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=E56F3C13C2E277270BFC8357ACAD75588B192D73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:8a:2b:f0:84:53:6b:df:7e:7b:b4:75:e5:2a:
                    db:8d:a2:43:c3:34:e4:4f:25:19:87:22:e1:eb:09:
                    8b:3f:c9:34:dd:f5:74:e6:72:57:67:6d:a9:4c:c8:
                    f4:8d:a3:c6:fe:84:38:a8:40:74:91:45:79:9b:a8:
                    04:db:e7:be:ae:b5:5f:04:5e:56:92:d6:1b:30:fc:
                    37:74:5f:0d:c6:03:f0:6e:72:31:7b:e8:d0:7c:76:
                    34:a3:87:8b:2b:36:4b:41:72:84:f9:9f:83:8a:b8:
                    f9:7b:d9:2a:fa:64:24:10:04:86:69:d1:13:f3:1a:
                    73:fc:b8:d5:aa:79:7e:b1:b4:0b:31:cb:7f:ef:df:
                    01:c3:aa:cb:ab:e0:99:fb:12:37:95:76:a6:80:74:
                    08:4c:78:80:33:72:95:a1:03:37:fd:3f:5c:c6:d5:
                    09:40:f6:1d:39:78:b1:6e:d7:56:4d:a9:45:0f:03:
                    bc:f8:cc:b9:19:d8:42:f6:b6:a0:9e:7b:cf:73:a7:
                    e4:bd:44:c4:13:52:ec:14:3b:e0:b8:64:1a:6b:7e:
                    fc:8d:cf:bb:09:6c:7c:12:de:04:29:2e:5a:be:1f:
                    19:70:f1:e5:a1:d0:d5:98:c0:fb:99:c3:31:f9:d2:
                    68:fb:4d:21:ae:5b:cb:eb:f1:b3:38:e2:c3:03:cf:
                    7d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:6F:3C:13:C2:E2:77:27:0B:FC:83:57:AC:AD:75:58:8B:19:2D:73
            X509v3 Authority Key Identifier:
                keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/5W88E8LidycL_INXrK11WIsZLXM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.91.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         83:f8:10:b5:86:39:a7:3d:ff:20:ea:8f:cb:3c:b4:35:ad:c3:
         40:da:7d:ed:94:a8:a4:14:a2:20:66:26:a0:49:71:5e:44:ba:
         a6:fe:b0:94:41:31:f7:86:81:22:62:3f:1d:76:5d:3a:18:37:
         ee:21:7a:9b:2a:a3:04:85:fc:b4:2e:d0:6f:ff:a4:37:ac:a9:
         36:cd:1c:e7:6c:c2:37:e6:56:0c:ac:35:60:fb:cb:cd:c0:86:
         5c:a7:8d:c2:ad:a0:c6:76:1c:19:8a:07:ea:d5:7d:07:9c:8c:
         86:80:e6:4c:7c:d8:e1:ae:b8:35:fe:69:9d:17:f5:df:a2:c9:
         09:e9:06:dc:47:43:f8:5c:fa:f8:ed:aa:9b:34:1c:52:76:03:
         90:06:2a:c2:61:cb:0f:56:0f:61:1c:96:28:46:39:4e:40:7a:
         90:cc:9e:63:11:e3:75:b9:f4:35:5d:01:5f:dd:62:c6:e0:e8:
         26:9a:cd:24:b9:93:33:6b:4f:52:b9:48:b4:a0:36:b1:c4:64:
         89:67:b4:e7:0e:b5:8d:41:6e:84:e2:c8:14:41:ed:11:10:88:
         0c:97:ab:c4:ba:9a:f4:25:97:55:cc:e1:10:11:06:57:b7:ce:
         97:bd:fb:7f:ff:68:dd:33:2c:5e:a4:68:0e:ea:dd:aa:58:bc:
         29:5f:b7:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----