Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/h0mQ8wxuj44HQBzt4OIYZ3Sk3Is.roa
File:                     h0mQ8wxuj44HQBzt4OIYZ3Sk3Is.roa (raw, json)
Hash identifier:          rq2LcjSjpEQgvXUcOYkForh4Gzn6eGLDt1aVS3u25X4=
Subject key identifier:   87:49:90:F3:0C:6E:8F:8E:07:40:1C:ED:E0:E2:18:67:74:A4:DC:8B
Certificate issuer:       /CN=165495E8D327E4F62D5A16438F080E608A34D0D3
Certificate serial:       0E65
Authority key identifier: 16:54:95:E8:D3:27:E4:F6:2D:5A:16:43:8F:08:0E:60:8A:34:D0:D3
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/FlSV6NMn5PYtWhZDjwgOYIo00NM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/h0mQ8wxuj44HQBzt4OIYZ3Sk3Is.roa
Signing time:             Mon 26 Aug 2024 05:17:00 +0000
ROA not before:           Mon 26 Aug 2024 05:17:00 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     64271
IP address blocks:        2404:bac0::/32 maxlen: 32

Validation:               Failed, certificate revoked on Fri 20 Sep 2024 06:53:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3685 (0xe65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=165495E8D327E4F62D5A16438F080E608A34D0D3
        Validity
            Not Before: Aug 26 05:17:00 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=874990F30C6E8F8E07401CEDE0E2186774A4DC8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:df:06:70:94:13:f5:34:77:51:76:53:d9:5b:
                    8b:74:d3:c7:86:9e:9e:27:38:53:87:49:5f:60:08:
                    7d:dc:d8:d0:b7:d2:f7:40:26:a0:32:11:45:7a:11:
                    c3:02:ed:ed:36:ca:9c:69:a3:01:4b:8a:30:c7:fc:
                    f3:06:15:6b:ed:5d:4c:65:8c:88:cc:c9:17:8d:d1:
                    ed:e5:76:0c:53:dd:cc:4d:09:77:5c:ab:b5:f9:92:
                    49:f5:3a:6f:42:93:0e:2b:12:b2:53:be:2d:43:eb:
                    da:b7:a6:7b:f5:bd:f9:5e:84:43:e1:1f:75:8d:d3:
                    f4:d8:51:77:67:98:c8:f2:63:8b:08:98:1c:6a:a9:
                    a3:8a:45:3b:70:51:ef:ed:56:91:67:2e:47:c9:60:
                    43:7f:8c:9a:1b:7b:a3:92:c2:16:60:fc:f2:08:ec:
                    47:22:c1:99:c8:10:01:b6:22:ee:75:26:8d:7e:a1:
                    0c:5b:71:c9:6b:4e:74:ca:a8:8d:ea:91:2a:68:8f:
                    2a:af:07:ea:15:1f:76:00:af:a0:89:0e:3d:27:4c:
                    b6:94:a1:c9:d0:cd:86:89:ed:e3:a8:88:09:b9:82:
                    b9:7d:1c:bd:78:b9:49:7f:2a:d8:8f:9a:57:6b:ec:
                    7d:fb:5b:9a:ab:d7:99:34:ac:86:e3:7e:9b:25:61:
                    f9:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:49:90:F3:0C:6E:8F:8E:07:40:1C:ED:E0:E2:18:67:74:A4:DC:8B
            X509v3 Authority Key Identifier:
                keyid:16:54:95:E8:D3:27:E4:F6:2D:5A:16:43:8F:08:0E:60:8A:34:D0:D3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/FlSV6NMn5PYtWhZDjwgOYIo00NM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FlSV6NMn5PYtWhZDjwgOYIo00NM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/h0mQ8wxuj44HQBzt4OIYZ3Sk3Is.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:bac0::/32

    Signature Algorithm: sha256WithRSAEncryption
         25:a6:c9:c3:34:e1:87:c7:5c:86:26:05:75:34:f0:e0:a8:37:
         c0:a3:bc:28:42:e6:0b:44:a0:38:e3:a3:23:a8:73:58:97:15:
         ae:cf:b0:8a:fe:54:61:52:77:22:26:c8:e5:c3:29:56:d8:3a:
         f9:83:03:17:26:1f:6c:f2:ab:54:7b:53:70:de:87:03:4c:00:
         f7:f1:60:1d:b3:22:de:3a:02:2d:86:d4:c5:08:6d:e7:dd:21:
         39:3b:21:58:b5:f7:ba:c1:29:67:00:06:07:9b:07:84:98:7a:
         00:0d:c6:30:4f:7f:5a:dd:97:25:99:be:7b:3d:c9:36:6a:2e:
         25:c9:01:30:3b:e3:e6:42:d0:e5:e3:d2:a0:b2:00:a1:cf:b1:
         b3:d1:ad:61:34:e2:ff:1b:9c:1f:06:06:e9:c7:8d:6c:ea:55:
         b6:73:0b:84:f5:84:54:2c:f2:9c:b9:a7:80:dc:a9:de:b6:a7:
         83:c0:e5:d5:8e:b0:36:ae:8f:e0:b9:47:4a:2f:2f:23:f4:df:
         36:35:2d:b0:de:19:0d:17:03:d0:bd:d4:1b:e3:39:d9:e5:e1:
         bf:3b:51:99:ea:a2:2b:3d:d8:f4:12:ec:98:bc:a7:99:1d:5a:
         3c:61:2b:85:cd:c6:b2:ae:3a:2d:c7:45:53:fa:e8:de:d0:5f:
         7d:bc:57:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----