Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/COCHENTEK/9DbJZ1Zj2xC9ul8yCkpLto5s4F0.roa
File:                     9DbJZ1Zj2xC9ul8yCkpLto5s4F0.roa (raw, json)
Hash identifier:          m76nZIgp7hfA6sPAafhctr17ODpXqqQDhmbEuSPVy8c=
Subject key identifier:   F4:36:C9:67:56:63:DB:10:BD:BA:5F:32:0A:4A:4B:B6:8E:6C:E0:5D
Certificate issuer:       /CN=A736CFF1948740614D0321E63B8403EB9AB9748D
Certificate serial:       08
Authority key identifier: A7:36:CF:F1:94:87:40:61:4D:03:21:E6:3B:84:03:EB:9A:B9:74:8D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/pzbP8ZSHQGFNAyHmO4QD65q5dI0.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/COCHENTEK/9DbJZ1Zj2xC9ul8yCkpLto5s4F0.roa
Signing time:             Tue 06 Dec 2022 11:13:09 +0000
ROA not before:           Tue 06 Dec 2022 11:13:09 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38136
IP address blocks:        103.36.24.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A736CFF1948740614D0321E63B8403EB9AB9748D
        Validity
            Not Before: Dec  6 11:13:09 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=F436C9675663DB10BDBA5F320A4A4BB68E6CE05D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b4:cb:97:c5:58:1d:b2:89:66:f8:d9:ec:04:
                    b5:f9:60:24:3a:ce:a1:74:4e:6b:2f:6d:fe:24:7a:
                    c9:e4:68:f3:bd:84:a2:f1:7a:ec:f6:97:ca:70:a0:
                    32:e5:3e:a5:57:9c:a5:ee:ec:ce:75:2d:71:b1:c7:
                    58:f0:b5:5a:df:70:ca:60:c9:aa:b4:b5:00:3b:3b:
                    e6:df:ed:92:8f:35:1d:81:3c:a3:74:32:ea:fa:66:
                    3c:6d:4a:a3:cc:09:7b:85:83:37:a8:14:26:c1:99:
                    d1:f3:34:09:17:ce:b0:5a:7e:a4:29:cd:45:27:04:
                    19:2a:30:34:d5:51:0c:c8:fe:72:50:05:7d:d5:74:
                    9e:0f:f3:ca:54:d4:ed:1a:ad:1d:41:b3:70:a0:db:
                    be:3b:3a:7c:b3:81:92:d0:f1:a9:7e:6f:c5:a0:72:
                    0a:ce:62:23:69:37:4a:c1:a3:3d:be:db:46:80:e2:
                    28:5b:78:26:53:66:a6:16:0e:12:39:08:b2:9e:62:
                    b4:7e:0c:ed:82:4b:ee:1a:ee:40:cf:c2:7a:08:71:
                    29:5a:71:8c:19:79:e0:23:dc:ae:33:f0:8e:05:52:
                    fb:ad:bf:87:0d:a9:e5:f8:d9:a4:c3:ac:a3:88:8c:
                    71:c5:f9:fa:bf:03:41:6e:d0:30:69:72:e8:b1:07:
                    be:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:36:C9:67:56:63:DB:10:BD:BA:5F:32:0A:4A:4B:B6:8E:6C:E0:5D
            X509v3 Authority Key Identifier:
                keyid:A7:36:CF:F1:94:87:40:61:4D:03:21:E6:3B:84:03:EB:9A:B9:74:8D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/COCHENTEK/pzbP8ZSHQGFNAyHmO4QD65q5dI0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/pzbP8ZSHQGFNAyHmO4QD65q5dI0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/COCHENTEK/9DbJZ1Zj2xC9ul8yCkpLto5s4F0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.36.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         95:d1:5f:4a:00:b6:94:46:b7:de:01:df:c7:70:44:f2:c2:fe:
         47:c7:71:52:0a:ae:53:ee:91:2f:5a:9c:aa:fa:53:52:1e:8c:
         ba:d0:bb:0d:48:f1:1f:e5:3b:e1:b3:35:98:7f:bc:38:e2:0e:
         76:35:f2:ab:dd:58:66:32:25:6e:5b:20:e0:2c:59:62:56:fb:
         b3:53:cd:b7:84:70:55:e7:a2:5b:b8:cb:58:e8:0a:6d:30:44:
         0a:b3:46:45:7c:9e:35:84:d2:5c:94:1b:aa:59:25:36:33:92:
         fb:df:52:ee:4a:58:d2:9a:d2:4f:f9:a3:43:3b:c8:73:01:21:
         a0:74:60:4d:71:a8:dd:03:c6:5a:54:4e:7a:54:ee:c1:39:4c:
         13:a7:31:c4:26:7c:d3:fa:8d:5a:a5:ae:b3:97:6a:72:b4:8a:
         40:83:07:69:72:12:b9:54:d9:85:5a:42:a7:c9:04:1f:79:34:
         cd:dc:59:41:81:0d:b6:85:9e:b8:d2:e5:fe:b7:72:f2:18:f2:
         d2:76:24:1a:92:c7:62:76:a5:f1:64:fd:aa:cc:14:88:cf:6a:
         f2:16:6c:20:c8:2f:e9:dd:f6:dd:4e:8b:69:13:24:90:89:89:
         3f:3d:c2:74:d7:a2:bd:03:94:31:cc:09:de:cc:74:63:75:96:
         99:28:85:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----