Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HHRCOLTD/ER60CMF4tR8oNk2B1VqVIzY1Zfc.roa
File:                     ER60CMF4tR8oNk2B1VqVIzY1Zfc.roa (raw, json)
Hash identifier:          KeFr1iPfTzhitLpmeLXN53qonCV3VNQ4vyq0RzTFh68=
Subject key identifier:   11:1E:B4:08:C1:78:B5:1F:28:36:4D:81:D5:5A:95:23:36:35:65:F7
Certificate issuer:       /CN=385713E359FCB9CAB12F20DB3FF190FCA81E323E
Certificate serial:       0A68
Authority key identifier: 38:57:13:E3:59:FC:B9:CA:B1:2F:20:DB:3F:F1:90:FC:A8:1E:32:3E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/OFcT41n8ucqxLyDbP_GQ_KgeMj4.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HHRCOLTD/ER60CMF4tR8oNk2B1VqVIzY1Zfc.roa
Signing time:             Thu 15 Sep 2022 02:47:53 +0000
ROA not before:           Thu 15 Sep 2022 02:47:53 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     131657
IP address blocks:        2403:9340::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2664 (0xa68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=385713E359FCB9CAB12F20DB3FF190FCA81E323E
        Validity
            Not Before: Sep 15 02:47:53 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=111EB408C178B51F28364D81D55A9523363565F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:b3:47:04:d2:51:e4:b9:21:7c:63:0d:67:96:
                    a1:e2:e7:de:d4:65:ae:f3:9e:c1:91:d4:39:bb:4a:
                    5d:d6:7c:87:6a:40:a6:19:eb:dd:a9:04:cc:46:8d:
                    26:6f:ed:2b:ab:5a:08:78:23:07:de:2f:b3:f0:94:
                    fe:4c:d6:e7:d1:f9:42:06:fe:cc:d3:df:a1:d1:75:
                    b9:cc:04:ab:4b:7e:6f:a1:6d:7b:a0:a4:90:29:63:
                    83:40:ba:cc:e1:7d:ff:e1:43:19:85:a6:6f:ff:9b:
                    31:86:89:2c:93:c2:b8:b0:ab:f2:b3:16:b0:d9:95:
                    97:6a:79:9b:22:d8:d2:1d:ff:3b:c0:ff:4c:48:01:
                    18:f8:55:55:07:62:35:40:6d:7e:3a:63:06:f5:ef:
                    f2:d9:0e:99:04:b7:53:43:a7:67:3c:55:5e:c6:a6:
                    76:d2:c5:2b:49:3e:6a:1c:70:83:2d:8b:e8:89:10:
                    1c:c7:0c:75:1f:20:9b:fd:c9:97:56:b9:f1:f1:9e:
                    0e:04:bd:f8:78:70:d1:15:1b:40:44:77:3c:29:97:
                    30:3d:74:66:bb:eb:7d:d5:93:c3:d5:e2:55:3e:7f:
                    17:9f:9e:33:71:98:e5:ae:52:21:bf:13:6e:51:49:
                    3a:2d:f6:1f:76:31:9f:c0:df:8b:41:08:e5:2b:e1:
                    30:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:1E:B4:08:C1:78:B5:1F:28:36:4D:81:D5:5A:95:23:36:35:65:F7
            X509v3 Authority Key Identifier:
                keyid:38:57:13:E3:59:FC:B9:CA:B1:2F:20:DB:3F:F1:90:FC:A8:1E:32:3E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HHRCOLTD/OFcT41n8ucqxLyDbP_GQ_KgeMj4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OFcT41n8ucqxLyDbP_GQ_KgeMj4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HHRCOLTD/ER60CMF4tR8oNk2B1VqVIzY1Zfc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:9340::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:a8:14:ba:0b:c5:26:99:91:61:5a:ca:50:7d:05:c0:c3:c5:
         84:d6:46:84:d3:db:4c:ba:08:94:a9:81:33:cf:97:e7:8f:40:
         a5:e2:75:d5:6f:e1:e0:25:0e:09:1f:0b:0d:b2:3f:25:21:2b:
         73:f0:e5:0b:e6:fd:46:bd:55:a9:5e:ca:7b:03:b7:d6:b4:83:
         53:dd:30:f1:9a:0e:9a:3c:14:22:e4:76:47:0a:6c:a2:f2:2e:
         82:cb:96:c2:af:41:2c:fd:fb:cf:f1:e3:2d:49:5e:8c:13:76:
         15:4a:d1:fa:84:a2:3b:b3:6e:22:cb:7c:26:c1:ca:bd:2c:6e:
         41:94:15:a1:24:a0:d5:53:7d:27:80:ff:c0:64:cb:a8:8d:98:
         d9:26:c4:12:89:31:01:7c:25:2e:88:26:2d:27:69:f9:37:5b:
         8e:0b:44:0b:81:6c:56:88:af:98:c8:d8:c7:48:02:05:7e:3e:
         15:a7:01:b5:a0:dd:3c:b1:2c:41:2d:b2:c0:82:79:11:ec:03:
         6f:53:08:f5:f8:d2:89:21:4e:11:fe:41:85:f2:11:db:e6:2c:
         3e:b8:28:73:46:42:19:6f:0e:18:42:fa:0b:76:a8:8b:ca:6b:
         46:26:b7:78:f6:11:15:66:df:09:13:d8:64:4c:a3:2c:ce:e1:
         91:0e:64:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----