Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CKMATES/gFojuoQQ0Xd4WDXIKUgTff_pwtI.roa
File:                     gFojuoQQ0Xd4WDXIKUgTff_pwtI.roa (raw, json)
Hash identifier:          xTU0ok8Mxj0UIH/LvpraMR/D9JVmvoc5GIjRAmhvxz4=
Subject key identifier:   80:5A:23:BA:84:10:D1:77:78:58:35:C8:29:48:13:7D:FF:E9:C2:D2
Certificate issuer:       /CN=5CD10AD5B6A4775D3C504D661071F8CE243E2807
Certificate serial:       0A0B
Authority key identifier: 5C:D1:0A:D5:B6:A4:77:5D:3C:50:4D:66:10:71:F8:CE:24:3E:28:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/XNEK1bakd108UE1mEHH4ziQ-KAc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/gFojuoQQ0Xd4WDXIKUgTff_pwtI.roa
Signing time:             Thu 15 Sep 2022 02:50:00 +0000
ROA not before:           Thu 15 Sep 2022 02:50:00 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     16509
IP address blocks:        103.119.213.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2571 (0xa0b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CD10AD5B6A4775D3C504D661071F8CE243E2807
        Validity
            Not Before: Sep 15 02:50:00 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=805A23BA8410D177785835C82948137DFFE9C2D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:58:0e:a8:a7:c2:67:6b:0f:b5:39:a8:20:ba:
                    24:1c:ec:d5:89:02:60:27:d8:6c:a8:a3:65:34:9a:
                    a0:83:46:78:3a:e1:ea:23:70:92:69:e4:dc:2c:b5:
                    31:2a:13:79:17:a6:69:d9:d1:e3:44:dd:7f:46:8d:
                    99:08:0f:cb:54:b1:52:81:ec:a1:17:c9:00:16:43:
                    5f:6d:c7:33:8a:7a:df:c2:f9:37:da:b8:a0:6c:3b:
                    a6:55:c1:c2:89:d7:95:2b:72:75:6f:b7:6a:55:05:
                    11:79:17:c9:3c:ed:78:1c:6f:55:00:7a:db:34:d6:
                    92:74:21:36:88:80:28:94:bc:64:83:3f:9b:c0:ec:
                    e1:cb:97:5e:73:dd:6d:70:b1:f1:00:cc:47:25:52:
                    f4:0c:92:57:45:ca:c4:73:f1:de:6b:55:a0:37:2f:
                    35:3c:05:6a:e1:1f:87:57:ad:ff:60:f0:a1:81:e8:
                    d4:61:eb:3b:9a:0b:6e:b8:02:8e:56:5d:ad:37:45:
                    bd:32:80:4b:1e:4a:75:2f:86:74:c8:99:d0:c1:34:
                    03:68:ca:22:9e:91:a6:32:44:b1:b7:49:9d:da:e6:
                    d2:8f:09:78:e1:4d:3f:a4:46:04:c2:9f:aa:b2:f7:
                    94:f4:cd:9f:bc:75:40:e5:ca:f2:22:8f:7b:28:e3:
                    f6:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:5A:23:BA:84:10:D1:77:78:58:35:C8:29:48:13:7D:FF:E9:C2:D2
            X509v3 Authority Key Identifier:
                keyid:5C:D1:0A:D5:B6:A4:77:5D:3C:50:4D:66:10:71:F8:CE:24:3E:28:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/XNEK1bakd108UE1mEHH4ziQ-KAc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XNEK1bakd108UE1mEHH4ziQ-KAc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/gFojuoQQ0Xd4WDXIKUgTff_pwtI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.119.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:83:fa:fb:89:b4:71:09:fc:87:c5:7f:0b:3e:88:d4:b8:d6:
         d5:d1:20:f3:f4:aa:9d:dc:a0:4c:2a:25:a5:eb:ac:82:a3:dd:
         a1:0e:6b:21:14:9f:7a:a7:83:02:65:e8:38:47:55:c8:81:75:
         e2:c1:ed:f0:09:90:1c:26:f7:da:02:37:8b:8a:ba:2e:b4:f0:
         e0:85:c0:51:53:42:13:cb:de:40:4a:91:4f:42:22:71:e9:bd:
         b4:42:d8:fa:1c:39:64:fa:16:fa:31:6d:60:c5:b7:30:94:16:
         e4:46:c5:1e:7f:0f:f2:1d:e2:b8:8e:60:d7:27:c5:7d:51:2a:
         22:9b:43:52:1c:05:7a:73:09:2c:99:3b:d4:0a:56:0a:ea:02:
         b0:2e:cc:02:e5:00:f3:6b:f3:63:c3:32:4b:e1:73:79:ed:7c:
         6f:f4:3d:0f:96:fe:43:53:70:50:1b:35:9e:73:53:b8:d7:ec:
         c6:9e:19:3f:b5:c7:09:6c:98:30:2f:b9:ea:9b:45:d6:8e:0c:
         a9:16:fc:4d:25:f6:e0:e0:7c:2c:a5:57:13:4d:8d:de:d8:1b:
         3a:08:81:d7:78:e4:07:4c:f5:3a:d5:7d:31:5a:a3:79:89:2d:
         be:4f:51:a9:c4:10:fc:0c:3f:c7:48:d2:21:cb:b2:44:f0:99:
         fe:c2:59:9b
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICCgswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUNE
MTBBRDVCNkE0Nzc1RDNDNTA0RDY2MTA3MUY4Q0UyNDNFMjgwNzAeFw0yMjA5MTUw
MjUwMDBaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDgwNUEyM0JBODQxMEQx
Nzc3ODU4MzVDODI5NDgxMzdERkZFOUMyRDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDGWA6op8Jnaw+1OagguiQc7NWJAmAn2Gyoo2U0mqCDRng64eoj
cJJp5NwstTEqE3kXpmnZ0eNE3X9GjZkID8tUsVKB7KEXyQAWQ19txzOKet/C+Tfa
uKBsO6ZVwcKJ15UrcnVvt2pVBRF5F8k87Xgcb1UAets01pJ0ITaIgCiUvGSDP5vA
7OHLl15z3W1wsfEAzEclUvQMkldFysRz8d5rVaA3LzU8BWrhH4dXrf9g8KGB6NRh
6zuaC264Ao5WXa03Rb0ygEseSnUvhnTImdDBNANoyiKekaYyRLG3SZ3a5tKPCXjh
TT+kRgTCn6qy95T0zZ+8dUDlyvIij3so4/abAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUgFojuoQQ0Xd4WDXIKUgTff/pwtIwHwYDVR0jBBgwFoAUXNEK1bakd108UE1m
EHH4ziQ+KAcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0tNQVRF
Uy9YTkVLMWJha2QxMDhVRTFtRUhINHppUS1LQWMuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL1hORUsxYmFrZDEwOFVFMW1FSEg0emlRLUtBYy5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0NLTUFURVMvZ0ZvanVvUVEwWGQ0V0RY
SUtVZ1RmZl9wd3RJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
AGd31TANBgkqhkiG9w0BAQsFAAOCAQEAb4P6+4m0cQn8h8V/Cz6I1LjW1dEg8/Sq
ndygTColpeusgqPdoQ5rIRSfeqeDAmXoOEdVyIF14sHt8AmQHCb32gI3i4q6LrTw
4IXAUVNCE8veQEqRT0Iicem9tELY+hw5ZPoW+jFtYMW3MJQW5EbFHn8P8h3iuI5g
1yfFfVEqIptDUhwFenMJLJk71ApWCuoCsC7MAuUA82vzY8MyS+Fzee18b/Q9D5b+
Q1NwUBs1nnNTuNfsxp4ZP7XHCWyYMC+56ptF1o4MqRb8TSX24OB8LKVXE02N3tgb
OgiB13jkB0z1OtV9MVqjeYktvk9RqcQQ/Aw/x0jSIcuyRPCZ/sJZmw==
-----END CERTIFICATE-----