Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/tnrRYkiNASaghceEvuEC6_rSXBU.roa
File:                     tnrRYkiNASaghceEvuEC6_rSXBU.roa (raw, json)
Hash identifier:          r7ACsU5iI7lnn0XjnZlbUmkjPJaNZCLcpIsOKk6emy0=
Subject key identifier:   B6:7A:D1:62:48:8D:01:26:A0:85:C7:84:BE:E1:02:EB:FA:D2:5C:15
Certificate issuer:       /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial:       0D76
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/tnrRYkiNASaghceEvuEC6_rSXBU.roa
Signing time:             Thu 15 Sep 2022 02:48:29 +0000
ROA not before:           Thu 15 Sep 2022 02:48:29 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     9680
IP address blocks:        2001:b000:591::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3446 (0xd76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
        Validity
            Not Before: Sep 15 02:48:29 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=B67AD162488D0126A085C784BEE102EBFAD25C15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5f:31:5e:bd:73:ea:58:f2:16:13:41:81:aa:
                    a6:c0:14:2d:90:6f:16:3a:0e:fe:8e:24:e4:38:f6:
                    63:da:ab:69:be:51:77:09:6d:ab:7d:3f:a0:41:23:
                    63:4e:ac:59:b1:cf:45:fb:1a:1d:e3:8a:b4:fd:21:
                    84:7c:28:ce:5f:80:3c:94:1a:54:65:35:48:83:2b:
                    46:a8:2e:70:d2:92:fd:21:7f:20:55:90:e8:ba:95:
                    a2:a1:56:7d:a7:d9:51:99:88:6f:b6:80:37:44:42:
                    fa:a8:86:7f:fc:42:3a:e4:6b:81:50:59:3d:29:c8:
                    97:11:26:5d:0a:c9:db:8f:f8:95:17:88:c9:f9:87:
                    8e:ee:d9:72:cd:1d:cf:46:2a:6c:2a:67:77:56:a0:
                    70:cb:4f:78:d4:99:66:90:3a:1a:8b:aa:3d:9f:6a:
                    65:a3:df:78:0e:ec:29:b8:3e:37:3e:19:72:c3:cc:
                    48:b3:35:a4:4c:f1:39:61:9d:8d:2a:97:7e:84:89:
                    24:3f:7b:c5:ba:ab:61:7a:01:15:31:c2:d5:39:4c:
                    71:9c:65:f1:b3:8c:36:3e:29:66:0e:00:83:ea:a0:
                    40:64:89:74:d5:fd:46:ec:2a:84:8d:18:37:e5:52:
                    b7:0b:c8:1e:b6:db:03:5c:b2:51:6e:26:d3:83:d9:
                    40:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:7A:D1:62:48:8D:01:26:A0:85:C7:84:BE:E1:02:EB:FA:D2:5C:15
            X509v3 Authority Key Identifier:
                keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/tnrRYkiNASaghceEvuEC6_rSXBU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:b000:591::/48

    Signature Algorithm: sha256WithRSAEncryption
         46:e1:11:ca:63:e4:af:5f:37:0e:b3:3e:37:7f:ab:63:1a:ed:
         46:7f:1d:e5:cd:7f:16:88:c3:a1:7f:b2:39:83:51:fb:66:69:
         ea:8b:6e:90:61:93:dd:fc:0c:b0:c2:71:c1:34:2f:5b:90:97:
         9e:26:50:b5:6f:bd:99:36:bd:91:5a:75:a7:7c:d9:75:6f:8e:
         25:0e:91:da:de:c8:84:6b:7f:f5:d0:90:19:3a:99:72:6d:2c:
         8b:d3:d8:29:17:ed:69:67:bd:6d:09:94:e7:18:49:10:b0:7e:
         11:cc:6e:cb:30:38:b0:56:de:0e:cd:0e:6b:20:89:94:93:42:
         5d:33:3c:fc:f2:e7:72:8a:5c:8c:2c:c6:8a:8a:2c:e5:54:79:
         83:0e:b1:f2:d5:18:46:56:8a:94:70:07:a3:75:48:56:df:0f:
         98:de:cc:8d:a1:8d:b2:ed:09:ae:1e:bb:4b:bb:e7:5a:ad:cd:
         5a:84:77:e2:18:cb:c4:b1:0e:3b:02:bb:4b:5d:7f:b6:5d:54:
         18:7e:08:29:2f:1f:a1:19:d8:06:88:13:4d:29:d9:9b:ab:2c:
         f4:fa:16:40:f3:4d:3f:b6:83:35:17:24:89:2d:08:4c:f6:13:
         99:49:7a:8a:d4:19:9a:ce:03:44:fd:92:06:c5:23:f2:c7:73:
         53:36:df:87
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgICDXYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMjA5MTUw
MjQ4MjlaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEI2N0FEMTYyNDg4RDAx
MjZBMDg1Qzc4NEJFRTEwMkVCRkFEMjVDMTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC8XzFevXPqWPIWE0GBqqbAFC2QbxY6Dv6OJOQ49mPaq2m+UXcJ
bat9P6BBI2NOrFmxz0X7Gh3jirT9IYR8KM5fgDyUGlRlNUiDK0aoLnDSkv0hfyBV
kOi6laKhVn2n2VGZiG+2gDdEQvqohn/8Qjrka4FQWT0pyJcRJl0KyduP+JUXiMn5
h47u2XLNHc9GKmwqZ3dWoHDLT3jUmWaQOhqLqj2famWj33gO7Cm4Pjc+GXLDzEiz
NaRM8TlhnY0ql36EiSQ/e8W6q2F6ARUxwtU5THGcZfGzjDY+KWYOAIPqoEBkiXTV
/UbsKoSNGDflUrcLyB622wNcslFuJtOD2UCJAgMBAAGjggHvMIIB6zAdBgNVHQ4E
FgQUtnrRYkiNASaghceEvuEC6/rSXBUwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC90bnJSWWtpTkFTYWdoY2VFdnVF
QzZfclNYQlUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAGw
AAWRMA0GCSqGSIb3DQEBCwUAA4IBAQBG4RHKY+SvXzcOsz43f6tjGu1Gfx3lzX8W
iMOhf7I5g1H7Zmnqi26QYZPd/AywwnHBNC9bkJeeJlC1b72ZNr2RWnWnfNl1b44l
DpHa3siEa3/10JAZOplybSyL09gpF+1pZ71tCZTnGEkQsH4RzG7LMDiwVt4OzQ5r
IImUk0JdMzz88udyilyMLMaKiizlVHmDDrHy1RhGVoqUcAejdUhW3w+Y3syNoY2y
7QmuHrtLu+darc1ahHfiGMvEsQ47ArtLXX+2XVQYfggpLx+hGdgGiBNNKdmbqyz0
+hZA800/toM1FySJLQhM9hOZSXqK1BmazgNE/ZIGxSPyx3NTNt+H
-----END CERTIFICATE-----