Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/aahQV-FRh2zEEAIb-ljBtqTvTB8.roa
File:                     aahQV-FRh2zEEAIb-ljBtqTvTB8.roa (raw, json)
Hash identifier:          3jW87/BaXYojAFxFcrzGm3hgk6fvpxZsme72GAVtBIg=
Subject key identifier:   69:A8:50:57:E1:51:87:6C:C4:10:02:1B:FA:58:C1:B6:A4:EF:4C:1F
Certificate issuer:       /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial:       0D76
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/aahQV-FRh2zEEAIb-ljBtqTvTB8.roa
Signing time:             Thu 15 Sep 2022 02:48:40 +0000
ROA not before:           Thu 15 Sep 2022 02:48:40 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     3462
IP address blocks:        211.23.0.0/16 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3446 (0xd76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
        Validity
            Not Before: Sep 15 02:48:40 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=69A85057E151876CC410021BFA58C1B6A4EF4C1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e4:55:19:53:82:bc:e0:be:69:8a:a3:e4:54:
                    17:cd:af:ea:a6:d6:c5:48:6c:c2:f8:e6:e8:ee:aa:
                    2d:41:30:ba:a1:ec:f1:c1:fd:61:e6:e8:1c:e1:d7:
                    be:b7:8f:14:55:fb:a9:3f:b3:34:b9:01:f9:85:41:
                    8b:34:b2:d6:b4:24:03:20:e1:72:6f:14:6f:2d:fc:
                    fe:96:bf:4f:8a:43:2d:68:65:bf:03:51:a9:fe:b6:
                    27:2f:0c:53:a9:95:4e:cb:6e:f1:83:ca:6f:99:a9:
                    d3:b5:32:ca:27:06:dc:bc:c2:87:53:9b:22:e8:9d:
                    0f:b2:87:fc:48:7b:91:85:f7:ff:7e:62:4b:5d:63:
                    d0:c5:6d:44:87:59:d1:1d:a8:57:f3:b8:5b:e4:1f:
                    7a:f9:29:aa:0f:a9:e2:15:de:6a:19:c9:97:18:33:
                    38:da:7d:ea:1a:b8:8f:1d:d1:69:59:bd:89:85:35:
                    e8:a3:14:e8:fa:53:86:97:e7:1b:08:37:42:d8:e3:
                    43:e5:b8:59:5c:6f:c4:ef:2a:42:5b:1d:0b:69:3e:
                    9b:b5:8a:70:5c:c7:fd:a9:23:39:15:2c:6f:1b:8b:
                    b0:27:35:b1:e1:16:00:cc:a2:bb:5e:01:88:9d:57:
                    09:f7:55:3b:5c:1e:25:2e:b0:43:ba:09:ad:e2:28:
                    20:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:A8:50:57:E1:51:87:6C:C4:10:02:1B:FA:58:C1:B6:A4:EF:4C:1F
            X509v3 Authority Key Identifier:
                keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/aahQV-FRh2zEEAIb-ljBtqTvTB8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.23.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b2:04:ef:17:ed:6a:fe:40:b1:6f:a8:5b:a2:33:70:b2:e1:02:
         02:d5:13:0a:d6:06:1c:97:2a:a1:57:31:3f:0b:c3:d2:da:f1:
         bb:44:fb:21:93:b0:29:05:2a:4e:14:d9:f3:c6:31:28:16:dc:
         0c:b7:bd:28:84:b8:1b:3a:f7:6f:55:39:47:6d:c8:bb:d2:61:
         c3:ab:d3:66:b7:58:ea:fd:ed:18:f1:cc:49:26:de:e8:41:77:
         c9:1a:14:72:b2:87:fa:aa:7e:84:00:36:18:52:30:c4:66:41:
         e5:e0:2d:d6:2a:5f:c4:8a:69:d7:cf:85:3b:81:89:80:b9:48:
         27:fe:92:fb:72:fd:42:64:6d:81:09:34:b8:b2:6e:3e:ec:a9:
         13:d9:b0:69:d6:10:94:f1:e8:78:9c:ba:82:c9:7f:87:a4:ce:
         12:4d:12:71:7c:0a:44:cf:a5:8c:67:cd:b1:23:50:d3:1f:87:
         79:26:bd:53:52:21:09:af:fb:62:80:5b:43:e7:e3:12:15:c9:
         55:59:37:b2:c8:91:61:c8:b3:cb:19:b2:c2:df:40:22:b9:ae:
         6b:3c:36:48:ea:8d:b4:fa:65:0f:62:db:3f:4e:9f:e3:10:6e:
         20:ce:4b:02:09:b0:60:b3:57:5d:6e:e4:7d:6b:ba:fe:50:01:
         40:16:66:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----