Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/2UgdhI8Pho9DQYiPg3u3fr20KzM.roa
File:                     2UgdhI8Pho9DQYiPg3u3fr20KzM.roa (raw, json)
Hash identifier:          vihqKEcRaqLUx+eEKHjig31Yg5bIVLRo0WsXps3QqfI=
Subject key identifier:   D9:48:1D:84:8F:0F:86:8F:43:41:88:8F:83:7B:B7:7E:BD:B4:2B:33
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/2UgdhI8Pho9DQYiPg3u3fr20KzM.roa
Signing time:             Thu 15 Sep 2022 02:43:04 +0000
ROA not before:           Thu 15 Sep 2022 02:43:04 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     9919
IP address blocks:        122.146.128.0/17 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4036 (0xfc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 15 02:43:04 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=D9481D848F0F868F4341888F837BB77EBDB42B33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7a:7b:cb:5a:19:be:81:b5:f4:cc:6b:1d:a5:
                    29:d2:9b:9f:6d:6f:cc:44:e0:1f:b5:17:2c:6f:52:
                    d7:52:8e:db:5b:0d:d0:94:e9:d7:d2:d0:35:b3:50:
                    3a:e8:ee:26:55:28:63:6b:c3:7c:a4:9b:4f:26:35:
                    75:ef:92:cb:99:f8:0a:54:f4:dc:c5:f2:12:6e:6b:
                    d4:54:d7:25:fd:2b:48:a1:0d:68:58:1d:b9:e5:36:
                    06:08:f5:d3:ed:f0:0c:44:ee:f7:0a:77:55:53:f8:
                    ff:d6:4b:05:0e:ca:eb:a9:ed:64:6c:5e:82:05:3c:
                    e8:ee:ec:a6:76:27:eb:c7:03:7e:44:e8:c2:ac:fb:
                    b7:0a:db:81:23:52:e1:ad:fe:bc:f6:7e:db:a4:2a:
                    17:f1:35:58:ca:00:84:38:05:15:48:6f:18:47:b1:
                    58:f3:68:e5:21:a6:3f:8b:de:c0:c8:41:6e:9f:45:
                    b5:bd:bb:e5:21:f3:5b:bf:f5:b7:e1:51:e8:62:11:
                    50:d6:36:5d:96:80:9f:46:d1:9d:62:37:98:ca:b3:
                    75:7c:47:57:77:ae:86:47:9a:ec:3e:dc:cd:69:c7:
                    7c:bf:db:e9:dc:98:3e:d8:8d:fa:88:2c:99:3c:b9:
                    75:93:bc:fa:26:b1:03:14:35:ce:fa:10:92:60:4d:
                    8f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:48:1D:84:8F:0F:86:8F:43:41:88:8F:83:7B:B7:7E:BD:B4:2B:33
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/2UgdhI8Pho9DQYiPg3u3fr20KzM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.146.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         02:cb:75:8e:51:3e:51:06:94:f1:8f:e5:23:3d:3f:f6:db:ee:
         ce:df:d0:09:a0:e2:47:fb:d4:06:5d:45:c6:b4:85:90:14:a1:
         c3:b0:64:fb:79:44:b9:7c:0b:ed:a7:3e:c8:ec:f5:f2:ef:69:
         62:1b:76:65:e2:ae:fb:89:c5:ae:26:1a:04:3e:65:40:d0:9a:
         ec:f5:98:2a:a1:57:87:db:cf:bb:7b:07:df:a6:ef:ab:56:2c:
         a8:bb:32:e5:67:4a:6f:b8:f9:ee:da:a3:b8:fe:ca:f9:c4:ec:
         6d:57:49:b3:84:9c:75:d4:c9:26:e7:f4:ce:dd:60:09:c4:28:
         83:cc:a6:df:f1:03:c4:6f:00:9d:cc:76:81:66:58:89:14:7b:
         91:7e:ea:5d:37:ea:f4:b1:a6:dc:86:f4:67:4a:00:ab:4f:fe:
         6a:6a:6c:2c:a0:70:be:09:92:49:70:f3:34:7b:dd:95:c5:e3:
         10:04:fa:4b:12:86:e6:7a:f0:da:4d:2d:e6:19:4d:41:a6:3b:
         32:1e:59:cc:da:46:e0:03:da:67:07:66:a5:2b:ab:5b:4a:9e:
         45:5a:e6:c6:13:67:67:ad:89:8a:99:a2:5f:e0:d4:17:dc:4d:
         0c:1d:0f:34:c7:3d:cf:f5:64:0a:4c:84:1e:87:7d:f5:27:33:
         0d:6a:0a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----