Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/LIANGCAI/mKmMI8EDhtkIaQXomJ8R23Qdcs0.roa
File:                     mKmMI8EDhtkIaQXomJ8R23Qdcs0.roa (raw, json)
Hash identifier:          t+g3OGeoPyOYTKa76n0tOtCC32ccXD8Qn4gt/pvHqZs=
Subject key identifier:   98:A9:8C:23:C1:03:86:D9:08:69:05:E8:98:9F:11:DB:74:1D:72:CD
Certificate issuer:       /CN=5501FE0C3056F611261AC1C0EDC67E2344D7993A
Certificate serial:       06
Authority key identifier: 55:01:FE:0C:30:56:F6:11:26:1A:C1:C0:ED:C6:7E:23:44:D7:99:3A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/VQH-DDBW9hEmGsHA7cZ-I0TXmTo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/LIANGCAI/mKmMI8EDhtkIaQXomJ8R23Qdcs0.roa
Signing time:             Wed 20 Sep 2023 03:54:19 +0000
ROA not before:           Wed 20 Sep 2023 03:54:19 +0000
ROA not after:            Wed 18 Sep 2024 09:08:33 +0000
asID:                     131642
IP address blocks:        2401:3920::/32 maxlen: 64

Validation:               Failed, certificate revoked on Wed 04 Sep 2024 09:17:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5501FE0C3056F611261AC1C0EDC67E2344D7993A
        Validity
            Not Before: Sep 20 03:54:19 2023 GMT
            Not After : Sep 18 09:08:33 2024 GMT
        Subject: CN=98A98C23C10386D9086905E8989F11DB741D72CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:6e:e8:5e:8f:3d:86:6d:d7:c7:85:72:9c:04:
                    e0:f7:76:d8:75:1f:8d:7b:0d:29:0c:6f:2c:80:4b:
                    b9:f7:a4:b3:90:8b:a1:d1:ec:25:14:81:76:6c:c8:
                    ce:59:42:ec:e6:b1:cb:aa:55:2c:c6:d0:3b:fe:b4:
                    ed:0a:18:9a:3e:b3:af:02:29:4f:a0:ad:f2:08:09:
                    fc:62:7d:b9:58:42:1e:0a:1e:ef:3f:25:d7:3b:ce:
                    3b:f0:61:1a:85:ec:57:37:71:93:0e:b2:74:62:8a:
                    fa:84:42:48:97:22:09:79:cb:87:bd:ce:7a:64:f7:
                    0f:93:06:67:d0:ce:c6:1b:37:cf:52:10:5b:bf:4b:
                    73:c2:c1:00:88:22:47:22:3f:03:24:0e:ee:8f:1f:
                    95:2e:84:61:3d:6c:a2:94:9a:35:7a:8c:bf:95:a0:
                    39:a8:7a:75:bc:d3:79:b4:9b:af:cd:d4:03:7e:69:
                    f9:bb:85:f5:7b:1d:d2:35:91:86:5c:96:24:31:68:
                    cd:78:6c:1c:54:77:f3:48:eb:5d:54:e2:76:3f:a0:
                    06:b9:3b:6f:4e:01:fa:8d:44:e8:09:a5:89:f8:9a:
                    90:3f:3b:89:a0:54:64:2b:98:c7:b7:89:07:87:0c:
                    31:d5:74:f7:a2:bf:fa:df:40:6b:eb:8e:fe:25:9b:
                    5a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:A9:8C:23:C1:03:86:D9:08:69:05:E8:98:9F:11:DB:74:1D:72:CD
            X509v3 Authority Key Identifier:
                keyid:55:01:FE:0C:30:56:F6:11:26:1A:C1:C0:ED:C6:7E:23:44:D7:99:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LIANGCAI/VQH-DDBW9hEmGsHA7cZ-I0TXmTo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VQH-DDBW9hEmGsHA7cZ-I0TXmTo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LIANGCAI/mKmMI8EDhtkIaQXomJ8R23Qdcs0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:3920::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:51:50:8a:c2:55:ac:f5:c4:55:9d:2c:4c:b7:f8:0c:8e:78:
         b4:e1:8a:a1:6d:8e:6a:af:40:5b:26:df:53:c2:6e:09:b0:da:
         46:0c:f9:3c:6a:71:2d:e7:71:e7:6b:6b:55:ab:04:58:7b:6c:
         54:45:40:85:05:a8:56:71:6f:9d:b5:c6:6e:d0:03:a4:9f:e3:
         08:49:48:29:56:a0:89:41:89:f7:a9:e8:ab:60:6e:07:5c:e1:
         66:48:01:e3:fb:47:73:85:0d:94:0a:60:b4:37:3c:77:0f:e5:
         45:9f:72:6b:91:93:de:a9:e8:3e:98:dc:a2:f1:6f:bc:89:f6:
         c4:c6:33:68:0b:41:f2:e7:ed:e6:a7:a6:54:b6:a3:93:6d:e7:
         03:7f:45:ce:b8:61:45:09:85:8e:64:37:a4:f7:c4:f2:ef:5b:
         c0:aa:c9:31:66:d7:22:d8:ce:0d:09:8f:42:c9:41:0c:b0:0d:
         44:a7:b4:7a:2d:5a:41:77:b8:e4:61:5b:5e:f9:ae:7e:3a:38:
         80:b8:51:f1:ff:30:d7:6c:7d:f0:d0:04:0c:0c:16:c1:0e:04:
         06:7b:44:66:80:e2:de:1b:53:a5:93:24:c7:67:27:2f:17:dc:
         41:d9:d5:e9:af:db:63:49:78:15:68:bb:c8:07:f1:f5:b3:d6:
         17:f4:15:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----