Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/41inzuX0ZAJo1MdVx8nnS_jttsM.roa
File:                     41inzuX0ZAJo1MdVx8nnS_jttsM.roa (raw, json)
Hash identifier:          h2/BleD/hXF3ohiDIbCy+CQvFj7mqSaS9J5VP7WQZwE=
Subject key identifier:   E3:58:A7:CE:E5:F4:64:02:68:D4:C7:55:C7:C9:E7:4B:F8:ED:B6:C3
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/41inzuX0ZAJo1MdVx8nnS_jttsM.roa
Signing time:             Thu 15 Sep 2022 02:42:56 +0000
ROA not before:           Thu 15 Sep 2022 02:42:56 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     9919
IP address blocks:        122.146.0.0/15 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4036 (0xfc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 15 02:42:56 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=E358A7CEE5F4640268D4C755C7C9E74BF8EDB6C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:11:07:b2:86:4c:bc:cd:84:71:20:9b:57:fd:
                    22:db:95:d8:d0:7e:08:f9:87:8a:6b:d2:bb:6f:c8:
                    f3:ef:67:50:8b:18:3f:c1:a0:c6:fa:bb:05:d4:63:
                    09:29:4d:46:88:33:30:93:d8:22:98:67:77:5a:2e:
                    a9:21:ce:d3:84:d0:2c:ad:c0:84:da:56:db:bd:cd:
                    a3:10:0a:0e:e0:6c:6a:01:c6:f7:4f:3d:b9:1b:75:
                    0d:42:f2:9b:e9:13:49:9c:2f:32:cc:15:40:f7:bc:
                    b6:e3:9a:13:8f:5b:3e:93:50:f9:e3:ac:f2:7c:cf:
                    ce:a7:cb:41:49:7c:41:4b:49:42:32:6e:36:4b:59:
                    d6:50:6d:9b:32:2c:60:73:f5:41:a0:38:aa:a7:9e:
                    1a:62:a1:ca:1f:1f:23:8d:91:c9:a3:74:84:ab:9b:
                    3b:bc:a8:98:dc:0e:04:f3:2e:1d:04:23:e9:0d:de:
                    88:b9:75:e6:0d:4c:85:5b:e6:46:4d:eb:71:38:4f:
                    eb:68:81:3a:f0:fb:5b:20:c6:27:ae:cf:49:bc:59:
                    a6:fe:39:60:f4:59:6a:0f:5d:c9:35:66:b8:bc:a6:
                    7f:b5:7a:9d:2a:1c:f3:6e:fe:2f:58:92:61:6c:03:
                    80:1b:f0:28:6a:1f:5f:d7:44:7f:0d:b0:79:8e:68:
                    fe:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:58:A7:CE:E5:F4:64:02:68:D4:C7:55:C7:C9:E7:4B:F8:ED:B6:C3
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/41inzuX0ZAJo1MdVx8nnS_jttsM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.146.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         39:89:c8:92:58:07:b2:cf:5c:93:08:42:91:70:8b:c7:ae:10:
         4c:f7:d9:07:ad:7a:9d:3c:a6:84:f8:43:de:8e:ec:56:6c:33:
         b1:9d:e9:62:d2:70:09:dc:07:da:cf:f5:72:f7:4e:9f:7a:f0:
         bc:02:fc:f0:65:ff:43:73:37:d2:30:78:cd:ad:c3:01:00:28:
         83:81:83:8a:47:3b:7f:7f:cc:95:44:4a:cb:99:f3:24:7c:86:
         f0:97:23:1d:d5:8a:67:4e:2b:d4:a6:da:a8:5c:6a:d3:1e:da:
         87:f8:07:37:4e:ed:d4:56:7a:ca:1e:61:6f:77:a1:d3:af:bc:
         e9:70:6d:60:3d:3c:dc:d5:d8:54:07:13:f4:bb:7b:47:e3:d9:
         93:61:a3:88:04:91:f7:4f:97:a8:d6:ca:3a:2a:4e:93:a8:fd:
         de:2c:e0:6f:a7:25:d7:e1:e3:a5:4b:c0:d1:24:3d:be:c7:32:
         2e:61:8c:c3:54:b7:c0:5c:33:55:04:ce:e7:4d:03:1f:c1:36:
         cd:69:ba:4c:60:21:8f:bd:71:a7:46:78:29:4b:26:95:cc:88:
         08:79:46:1b:8b:14:e3:c6:72:88:97:6d:97:c5:64:93:53:14:
         98:27:6f:02:25:6c:cd:6a:1e:88:6c:1c:d8:76:47:f8:32:3a:
         6a:1b:9b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----