Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/1FYNG3TURz6I1x3q9T92N2vly9M.roa
File:                     1FYNG3TURz6I1x3q9T92N2vly9M.roa (raw, json)
Hash identifier:          Gqjf8xtOLnUcoxMFs9/bjiTvFCPEy18xbXnSKZv9m5c=
Subject key identifier:   D4:56:0D:1B:74:D4:47:3E:88:D7:1D:EA:F5:3F:76:37:6B:E5:CB:D3
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/1FYNG3TURz6I1x3q9T92N2vly9M.roa
Signing time:             Thu 15 Sep 2022 02:42:44 +0000
ROA not before:           Thu 15 Sep 2022 02:42:44 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     4780
IP address blocks:        123.51.128.0/17 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4036 (0xfc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 15 02:42:44 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=D4560D1B74D4473E88D71DEAF53F76376BE5CBD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:1e:5a:21:dd:95:a9:b1:56:0b:3f:d8:12:e7:
                    9f:7b:49:24:7d:8f:ec:70:3f:9d:e9:52:c6:83:e0:
                    bc:3e:11:ef:77:11:17:41:26:63:58:53:83:e7:16:
                    ef:ff:54:fb:8c:eb:5b:67:01:42:5e:a6:73:91:b0:
                    40:59:cd:06:e8:83:dc:dd:f3:0e:72:cf:66:1a:23:
                    c0:8a:b1:2d:c6:c0:58:e2:7d:ef:cf:09:82:40:3e:
                    eb:2c:93:dc:3c:51:5e:f1:ff:fa:c1:f2:0f:ce:46:
                    e9:99:fa:f2:9c:85:b3:ad:ac:99:1f:05:9c:fe:b8:
                    6d:ab:dd:33:57:83:f5:9d:21:57:d5:da:97:46:b8:
                    c7:ec:ae:24:7d:ef:55:aa:af:d7:9d:50:f9:80:a3:
                    58:cf:4c:06:9c:a8:b0:18:df:f4:87:6d:d9:52:58:
                    ce:78:c2:08:62:db:ff:af:48:68:11:f5:25:8e:da:
                    da:94:ce:97:ec:e7:b3:ba:f1:34:86:f4:82:74:6d:
                    63:4b:54:2d:cc:42:05:65:28:be:c1:1c:45:d5:72:
                    b2:a8:9a:46:df:90:cf:d1:78:99:5c:65:d1:93:7c:
                    ed:3d:df:5e:18:65:c9:07:24:47:91:d0:6c:e1:25:
                    ec:d2:83:b5:fd:35:65:00:05:b9:4d:ab:e6:e5:1b:
                    10:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:56:0D:1B:74:D4:47:3E:88:D7:1D:EA:F5:3F:76:37:6B:E5:CB:D3
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/1FYNG3TURz6I1x3q9T92N2vly9M.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.51.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         60:7d:53:33:e1:04:77:88:8a:aa:d2:5b:ba:02:47:43:ff:4f:
         52:f5:23:28:35:b2:e1:4d:91:f0:12:b8:cf:84:94:22:4f:f7:
         55:19:2e:6d:de:c8:d4:be:82:fd:47:39:de:5b:b9:e1:35:c5:
         4c:c9:08:34:1c:6f:d8:08:d8:29:63:97:cb:6d:63:cc:49:7f:
         fc:ca:3e:f9:19:93:e2:44:56:fa:1b:80:eb:7c:e5:0d:6a:64:
         20:62:86:75:56:5c:0c:b5:54:d0:0a:d3:e6:49:f9:bf:6c:8c:
         a9:f5:87:55:a3:85:7c:7f:ee:44:ed:1f:ee:c9:17:ae:fd:20:
         00:b2:b8:b8:1d:d1:0f:57:bd:f0:59:d7:02:ba:3d:da:67:2c:
         b3:be:15:43:14:09:7b:81:f8:f8:1c:54:31:e1:37:c5:fd:46:
         e6:24:7c:7c:1c:2b:cf:6e:31:0f:80:71:44:43:79:44:ef:68:
         40:5a:58:a8:c1:cd:59:db:3b:da:d1:ab:fc:24:7f:a1:bf:d6:
         75:01:83:f2:f6:9e:cc:83:ba:67:46:c1:09:a9:00:9b:a1:79:
         2e:d2:9f:c5:f5:72:4f:15:8c:13:3f:0d:33:78:39:bf:34:c5:
         88:22:4b:32:5a:44:a3:42:8b:e9:03:b4:92:76:0c:77:02:fd:
         6a:81:6f:0d
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICD8QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMjA5MTUw
MjQyNDRaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEQ0NTYwRDFCNzRENDQ3
M0U4OEQ3MURFQUY1M0Y3NjM3NkJFNUNCRDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDPHloh3ZWpsVYLP9gS5597SSR9j+xwP53pUsaD4Lw+Ee93ERdB
JmNYU4PnFu//VPuM61tnAUJepnORsEBZzQbog9zd8w5yz2YaI8CKsS3GwFjife/P
CYJAPussk9w8UV7x//rB8g/ORumZ+vKchbOtrJkfBZz+uG2r3TNXg/WdIVfV2pdG
uMfsriR971Wqr9edUPmAo1jPTAacqLAY3/SHbdlSWM54wghi2/+vSGgR9SWO2tqU
zpfs57O68TSG9IJ0bWNLVC3MQgVlKL7BHEXVcrKomkbfkM/ReJlcZdGTfO09314Y
ZckHJEeR0GzhJezSg7X9NWUABblNq+blGxAbAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQU1FYNG3TURz6I1x3q9T92N2vly9MwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvMUZZTkczVFVSejZJMXgzcTlUOTJO
MnZseTlNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEB3szgDAN
BgkqhkiG9w0BAQsFAAOCAQEAYH1TM+EEd4iKqtJbugJHQ/9PUvUjKDWy4U2R8BK4
z4SUIk/3VRkubd7I1L6C/Uc53lu54TXFTMkINBxv2AjYKWOXy21jzEl//Mo++RmT
4kRW+huA63zlDWpkIGKGdVZcDLVU0ArT5kn5v2yMqfWHVaOFfH/uRO0f7skXrv0g
ALK4uB3RD1e98FnXAro92mcss74VQxQJe4H4+BxUMeE3xf1G5iR8fBwrz24xD4Bx
REN5RO9oQFpYqMHNWds72tGr/CR/ob/WdQGD8vaezIO6Z0bBCakAm6F5LtKfxfVy
TxWMEz8NM3g5vzTFiCJLMlpEo0KL6QO0knYMdwL9aoFvDQ==
-----END CERTIFICATE-----