Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HUANGDEXIA/nrm5daHH8a7BmV4MellnqEoQHWs.roa
File:                     nrm5daHH8a7BmV4MellnqEoQHWs.roa (raw, json)
Hash identifier:          B/8ij8d98EtHJv7SWIpJdUowK0ZiNaoBHXlmRByAwpA=
Subject key identifier:   9E:B9:B9:75:A1:C7:F1:AE:C1:99:5E:0C:7A:59:67:A8:4A:10:1D:6B
Certificate issuer:       /CN=CAA8405CBD8CE6AE1EA3A9DAA6779756EC6EDC42
Certificate serial:       05
Authority key identifier: CA:A8:40:5C:BD:8C:E6:AE:1E:A3:A9:DA:A6:77:97:56:EC:6E:DC:42
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/yqhAXL2M5q4eo6napneXVuxu3EI.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HUANGDEXIA/nrm5daHH8a7BmV4MellnqEoQHWs.roa
Signing time:             Wed 20 Sep 2023 18:51:53 +0000
ROA not before:           Wed 20 Sep 2023 18:51:53 +0000
ROA not after:            Wed 18 Sep 2024 09:08:14 +0000
asID:                     131642
IP address blocks:        2401:39a0::/32 maxlen: 64

Validation:               Failed, certificate revoked on Wed 04 Sep 2024 09:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAA8405CBD8CE6AE1EA3A9DAA6779756EC6EDC42
        Validity
            Not Before: Sep 20 18:51:53 2023 GMT
            Not After : Sep 18 09:08:14 2024 GMT
        Subject: CN=9EB9B975A1C7F1AEC1995E0C7A5967A84A101D6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:54:e3:7f:28:f0:2e:21:6f:e6:9f:37:e4:74:
                    07:86:28:9e:96:93:fb:ef:58:71:fd:90:12:c0:a9:
                    49:b9:07:03:c0:21:ba:8d:36:d8:3e:c0:ab:9d:79:
                    18:18:ed:fb:1f:18:6f:78:3e:1d:22:6a:da:89:8a:
                    63:7d:56:c7:c6:33:0e:53:30:0b:95:18:dd:4e:4b:
                    32:65:1e:d2:cb:ec:24:50:94:f6:93:fc:a1:da:7b:
                    83:56:c8:1d:1e:f7:15:e9:1e:d2:00:61:97:98:61:
                    1d:1d:07:be:5e:74:15:8e:b2:56:49:60:1d:db:19:
                    7e:62:dc:12:58:d4:f6:9b:36:86:40:0f:1b:9e:6a:
                    8f:c8:5d:40:b6:20:45:14:13:46:22:37:ac:8a:5b:
                    0d:d6:36:4c:c0:db:87:df:12:3d:e5:cc:90:e0:16:
                    63:4e:70:4d:ef:4e:87:a9:e8:7f:a9:c9:45:55:50:
                    59:16:e4:9c:fc:dd:06:49:f0:b5:e5:fe:3e:9b:93:
                    97:94:20:cf:5c:9c:dd:fb:1e:a6:e0:7d:92:43:8f:
                    2a:82:dc:ad:f2:97:e0:db:3c:5b:e3:0a:74:c5:b2:
                    ac:93:9c:b4:05:0c:81:6c:64:7d:f6:72:a4:54:6f:
                    9c:4b:d3:cf:2f:39:3d:8a:bb:f9:e8:55:54:0d:c5:
                    6f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:B9:B9:75:A1:C7:F1:AE:C1:99:5E:0C:7A:59:67:A8:4A:10:1D:6B
            X509v3 Authority Key Identifier:
                keyid:CA:A8:40:5C:BD:8C:E6:AE:1E:A3:A9:DA:A6:77:97:56:EC:6E:DC:42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HUANGDEXIA/yqhAXL2M5q4eo6napneXVuxu3EI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/yqhAXL2M5q4eo6napneXVuxu3EI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HUANGDEXIA/nrm5daHH8a7BmV4MellnqEoQHWs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:39a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:26:03:23:cd:41:09:a7:e5:8d:f7:96:a8:a7:73:9a:40:07:
         ba:4c:6e:39:dc:37:a8:6c:43:1c:8b:92:38:cf:20:8d:6c:0f:
         40:56:cd:88:1c:e1:13:30:6d:0a:e8:8f:2d:6b:ca:16:98:f9:
         22:b8:cc:a3:ab:e9:d4:5a:04:d3:5c:c9:dc:43:c9:af:97:7d:
         65:9a:d1:41:6f:de:da:58:3e:a7:f6:61:f9:c0:46:5d:40:11:
         8e:d2:cd:12:28:26:d4:0c:90:e8:a4:dd:66:68:fd:de:90:37:
         b6:79:46:81:62:a5:6b:fa:2e:b0:f3:06:49:94:70:63:14:5c:
         90:b9:bc:67:bf:a1:9d:69:c6:84:d7:16:b9:6d:54:a7:2f:83:
         c3:fa:12:83:ea:4d:4e:29:9e:ae:fc:f2:cf:ce:16:e6:db:68:
         71:68:26:cb:79:54:01:4b:0e:94:6c:d6:98:a8:b7:f9:da:bb:
         c2:07:15:9e:b9:0d:8d:e1:1f:dd:1c:c8:92:1e:08:ce:cb:5c:
         37:9e:ec:37:c3:a8:f0:58:13:2f:85:cb:55:68:83:65:99:f0:
         7c:de:87:27:3a:08:ad:43:ac:9f:39:1b:b8:3c:3d:c7:5a:1c:
         56:f7:86:a5:1b:91:b1:b8:26:dd:0d:46:30:a3:1f:a3:f4:dd:
         08:65:d6:e0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----