Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/INFORICH/FGU6tnTlTQ8cmU2UsPDBgSI4fcI.roa
File:                     FGU6tnTlTQ8cmU2UsPDBgSI4fcI.roa (raw, json)
Hash identifier:          ES9atv6DimE4Dkr1UqJnXZ3yTUOhBcITGVMI9Gsy/EY=
Subject key identifier:   14:65:3A:B6:74:E5:4D:0F:1C:99:4D:94:B0:F0:C1:81:22:38:7D:C2
Certificate issuer:       /CN=9197E979AFBB1BEC2EFC2647207560561BE900B6
Certificate serial:       031A
Authority key identifier: 91:97:E9:79:AF:BB:1B:EC:2E:FC:26:47:20:75:60:56:1B:E9:00:B6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/kZfpea-7G-wu_CZHIHVgVhvpALY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/INFORICH/FGU6tnTlTQ8cmU2UsPDBgSI4fcI.roa
Signing time:             Thu 15 Sep 2022 02:41:32 +0000
ROA not before:           Thu 15 Sep 2022 02:41:32 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     131677
IP address blocks:        2406:3a40::/32 maxlen: 64

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 794 (0x31a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9197E979AFBB1BEC2EFC2647207560561BE900B6
        Validity
            Not Before: Sep 15 02:41:32 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=14653AB674E54D0F1C994D94B0F0C18122387DC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:82:5c:f9:8d:37:8f:95:e4:31:09:16:53:66:
                    e9:01:f9:81:0c:8f:29:f0:39:0e:60:6b:4d:88:68:
                    7d:a6:8f:83:05:49:8c:44:4b:9b:30:ba:bb:21:2d:
                    24:bc:ed:dd:41:dc:99:38:b3:36:b0:63:0b:c5:08:
                    62:cb:f7:c0:73:25:99:4f:8d:2d:f2:f6:71:8e:35:
                    26:1f:36:fa:fd:4c:d5:cf:5a:4e:a5:39:84:b6:de:
                    81:14:6d:82:98:e2:6b:0e:03:b1:32:db:82:92:e2:
                    1d:a5:c3:ef:38:c5:fe:86:a0:75:4e:b7:5d:79:7d:
                    a2:35:a2:b1:8a:b9:2f:19:d3:90:9d:af:ce:6d:9b:
                    78:92:4c:fd:42:68:a3:2f:59:d3:d9:35:cb:ca:63:
                    36:ee:ff:aa:44:5f:d6:1b:20:47:75:b6:e9:33:21:
                    c0:c7:97:fc:14:e6:1f:6c:f2:27:dd:8a:10:66:d3:
                    f8:fb:5a:81:da:6b:22:43:12:f6:6d:73:32:ab:1e:
                    5e:fe:19:22:cc:67:5a:2b:fb:e2:ba:23:28:ba:01:
                    87:86:72:0f:8e:3d:41:ca:80:cf:e6:72:4a:47:49:
                    8b:7c:4d:bc:35:f1:bb:7d:10:00:f0:e9:23:b3:9e:
                    b4:15:e6:a3:c5:b1:69:71:93:06:98:a6:85:f9:b7:
                    bc:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:65:3A:B6:74:E5:4D:0F:1C:99:4D:94:B0:F0:C1:81:22:38:7D:C2
            X509v3 Authority Key Identifier:
                keyid:91:97:E9:79:AF:BB:1B:EC:2E:FC:26:47:20:75:60:56:1B:E9:00:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/INFORICH/kZfpea-7G-wu_CZHIHVgVhvpALY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/kZfpea-7G-wu_CZHIHVgVhvpALY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/INFORICH/FGU6tnTlTQ8cmU2UsPDBgSI4fcI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:3a40::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:ad:56:ae:53:d3:b8:84:41:f5:fe:5b:9d:b1:df:66:99:a2:
         1e:cd:fc:69:2a:f9:ea:6c:16:8f:a6:57:b2:0f:e3:4e:ba:1a:
         3a:00:02:dc:62:98:40:a6:be:4f:7c:b4:60:19:7f:b8:8e:99:
         12:c6:f7:a8:64:c6:00:97:44:04:0c:03:34:87:7e:f9:fb:31:
         94:ac:e3:63:4e:fe:52:fd:d8:3a:f0:9a:04:23:a1:3f:56:da:
         a0:87:9a:29:ad:36:55:50:ec:af:b8:12:f6:fb:d3:fb:0d:5c:
         a2:21:9f:8a:62:54:63:74:98:23:e5:f2:52:b6:23:41:bf:46:
         90:34:ff:54:78:22:8f:35:28:50:6d:d6:d9:81:52:d6:c1:44:
         c2:60:fd:91:49:ab:57:e8:90:a4:2c:d2:02:1c:0e:08:c8:12:
         91:84:dd:f6:1e:25:d3:f5:3b:68:94:f6:2c:bf:31:c8:a5:09:
         4c:95:4c:1f:1e:18:77:9d:29:7c:81:ad:b2:c9:77:a4:f6:a6:
         55:ea:b5:37:b4:11:9f:e2:65:bb:61:4b:68:63:2b:c7:09:d1:
         df:46:6f:74:85:7d:cc:a7:d7:dd:1c:70:7f:fe:f2:ea:a2:59:
         5d:17:98:26:fc:ef:37:bb:52:56:ea:0b:f0:ca:72:68:1f:e2:
         07:5b:c0:62
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICAxowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTE5
N0U5NzlBRkJCMUJFQzJFRkMyNjQ3MjA3NTYwNTYxQkU5MDBCNjAeFw0yMjA5MTUw
MjQxMzJaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDE0NjUzQUI2NzRFNTRE
MEYxQzk5NEQ5NEIwRjBDMTgxMjIzODdEQzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDQglz5jTePleQxCRZTZukB+YEMjynwOQ5ga02IaH2mj4MFSYxE
S5swurshLSS87d1B3Jk4szawYwvFCGLL98BzJZlPjS3y9nGONSYfNvr9TNXPWk6l
OYS23oEUbYKY4msOA7Ey24KS4h2lw+84xf6GoHVOt115faI1orGKuS8Z05Cdr85t
m3iSTP1CaKMvWdPZNcvKYzbu/6pEX9YbIEd1tukzIcDHl/wU5h9s8ifdihBm0/j7
WoHaayJDEvZtczKrHl7+GSLMZ1or++K6Iyi6AYeGcg+OPUHKgM/mckpHSYt8Tbw1
8bt9EADw6SOznrQV5qPFsWlxkwaYpoX5t7w3AgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUFGU6tnTlTQ8cmU2UsPDBgSI4fcIwHwYDVR0jBBgwFoAUkZfpea+7G+wu/CZH
IHVgVhvpALYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSU5GT1JJ
Q0gva1pmcGVhLTdHLXd1X0NaSElIVmdWaHZwQUxZLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9rWmZwZWEtN0ctd3VfQ1pISUhWZ1ZodnBBTFkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9JTkZPUklDSC9GR1U2dG5UbFRROGNt
VTJVc1BEQmdTSTRmY0kucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAH
AwUAJAY6QDANBgkqhkiG9w0BAQsFAAOCAQEAfa1WrlPTuIRB9f5bnbHfZpmiHs38
aSr56mwWj6ZXsg/jTroaOgAC3GKYQKa+T3y0YBl/uI6ZEsb3qGTGAJdEBAwDNId+
+fsxlKzjY07+Uv3YOvCaBCOhP1baoIeaKa02VVDsr7gS9vvT+w1coiGfimJUY3SY
I+XyUrYjQb9GkDT/VHgijzUoUG3W2YFS1sFEwmD9kUmrV+iQpCzSAhwOCMgSkYTd
9h4l0/U7aJT2LL8xyKUJTJVMHx4Yd50pfIGtssl3pPamVeq1N7QRn+Jlu2FLaGMr
xwnR30ZvdIV9zKfX3Rxwf/7y6qJZXReYJvzvN7tSVuoL8MpyaB/iB1vAYg==
-----END CERTIFICATE-----