Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/ClsHuFMqQyLtBHsnSEL3bKP_8ac.roa
File:                     ClsHuFMqQyLtBHsnSEL3bKP_8ac.roa (raw, json)
Hash identifier:          TEURWdEmuv2dxSMUhJk52DkwDvMUV8XQXiWMZZzJWnc=
Subject key identifier:   0A:5B:07:B8:53:2A:43:22:ED:04:7B:27:48:42:F7:6C:A3:FF:F1:A7
Certificate issuer:       /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial:       0DD9
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/ClsHuFMqQyLtBHsnSEL3bKP_8ac.roa
Signing time:             Thu 29 Dec 2022 09:31:55 +0000
ROA not before:           Thu 29 Dec 2022 09:31:55 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     17408
IP address blocks:        150.117.128.0/19 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3545 (0xdd9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
        Validity
            Not Before: Dec 29 09:31:55 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=0A5B07B8532A4322ED047B274842F76CA3FFF1A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:82:8e:2b:08:fc:e1:14:61:cf:3d:4d:74:fd:
                    b5:ff:71:6e:a6:b4:f6:93:0a:f9:a1:f3:c8:03:4e:
                    b9:12:65:fb:b2:b2:3f:d1:28:57:de:ca:86:6c:bc:
                    25:00:e4:cb:58:22:ab:72:2f:5c:2e:15:a3:bd:63:
                    f8:d0:dc:6b:4d:56:6f:33:ef:36:05:ac:9f:bc:da:
                    b3:36:b2:6d:04:22:40:9f:3a:48:57:f0:4b:58:39:
                    49:1f:93:94:70:0c:31:e4:94:c7:10:d4:79:58:25:
                    bf:b4:b7:e7:f6:4f:40:4f:02:01:c7:74:18:de:97:
                    4a:8f:e6:d0:9d:c9:9c:7e:bc:f3:b7:88:0b:4d:58:
                    47:d9:f4:9e:88:77:c8:09:32:e2:d3:77:fb:78:11:
                    02:f3:d3:66:3b:63:11:fe:ab:ed:6a:38:ff:a4:84:
                    4d:a2:6e:5b:46:68:3e:ef:71:ac:be:d6:12:a0:f4:
                    9b:05:d6:a9:8c:67:58:f3:6c:bf:77:6e:bc:aa:d3:
                    5f:49:77:c4:96:f5:02:5a:10:8f:c2:e7:26:22:9e:
                    2c:f1:9c:60:ff:a5:95:fa:cf:22:ca:d8:59:c1:a7:
                    f8:ca:22:ed:71:15:68:12:e7:c9:e8:c1:2c:35:f4:
                    ef:ee:f4:54:e0:65:f9:d6:03:d0:2d:76:8a:f0:83:
                    b2:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:5B:07:B8:53:2A:43:22:ED:04:7B:27:48:42:F7:6C:A3:FF:F1:A7
            X509v3 Authority Key Identifier:
                keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/ClsHuFMqQyLtBHsnSEL3bKP_8ac.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.117.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b4:ca:1f:a3:34:a6:47:96:1b:6d:82:50:2f:8f:8f:ca:91:72:
         bd:2d:92:3a:7c:e6:8a:06:22:33:55:68:d6:78:7d:51:dc:12:
         b0:fe:f3:be:4f:15:b5:b6:49:5b:a6:79:90:91:3a:3f:df:fe:
         b0:c7:58:ca:f9:98:fa:f3:a3:eb:de:8f:6e:63:0c:64:8a:1a:
         a5:2e:9f:28:ce:83:6c:e0:94:8c:d1:27:f4:39:17:4c:17:b6:
         67:65:82:38:0c:15:b4:99:b6:cc:3b:c3:a2:b9:07:6e:6d:45:
         3f:52:53:97:2b:58:ca:8c:88:99:75:05:89:b0:25:01:96:eb:
         16:6c:2d:60:52:32:2e:d5:d8:d3:fc:2d:ca:48:f9:ba:1e:91:
         3e:45:0d:3d:65:9a:c4:27:a5:27:8f:fc:b3:88:bd:b1:60:1a:
         61:d5:68:95:28:92:6a:39:6c:ed:dd:3b:ce:7e:71:79:21:e0:
         5f:2d:14:18:67:3c:76:d7:87:4b:99:ea:c6:f9:2a:c3:e5:4e:
         40:63:09:93:53:c7:b5:31:6e:d5:f6:f1:d8:05:65:0e:84:5d:
         2f:e7:77:8d:81:23:e8:ef:b8:50:1f:7e:96:29:6d:84:e0:9c:
         8b:2d:02:2e:50:2b:28:20:35:44:d2:ad:c1:ed:a7:f8:be:4a:
         44:29:65:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----