Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/5PP6KwQA1g0Nwn73Smigj7Tnhss.roa
File:                     5PP6KwQA1g0Nwn73Smigj7Tnhss.roa (raw, json)
Hash identifier:          xjWVH1fp1bmZtppFdCVU3AkA7j6JGOTNoAXAR1qROEY=
Subject key identifier:   E4:F3:FA:2B:04:00:D6:0D:0D:C2:7E:F7:4A:68:A0:8F:B4:E7:86:CB
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/5PP6KwQA1g0Nwn73Smigj7Tnhss.roa
Signing time:             Thu 15 Sep 2022 02:43:58 +0000
ROA not before:           Thu 15 Sep 2022 02:43:58 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     9919
IP address blocks:        218.210.0.0/15 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4036 (0xfc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 15 02:43:58 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=E4F3FA2B0400D60D0DC27EF74A68A08FB4E786CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:58:b7:48:f6:2a:ef:64:f2:7b:f8:60:24:c4:
                    e5:c3:c7:17:a9:1b:86:de:25:61:5c:8b:f7:52:00:
                    6b:d7:4d:59:1d:59:d3:23:89:33:84:7b:f7:40:d8:
                    95:94:ba:89:49:22:b9:1f:5b:f3:2e:09:20:31:41:
                    fd:0b:cd:16:9f:f8:d4:94:2d:b1:d9:3e:08:1a:83:
                    27:3e:1d:9b:47:8d:0a:b8:b9:bd:03:42:0b:d4:3f:
                    0c:b7:cc:0a:8d:6f:69:50:3e:48:77:75:06:88:f6:
                    cd:da:5c:0d:e3:c7:93:5a:5f:f6:e3:93:0e:b5:ea:
                    a1:f2:53:e4:01:a5:7e:5f:cb:ef:c0:f8:af:1b:a7:
                    5e:aa:89:02:56:40:1e:66:15:26:e9:2e:de:43:8c:
                    fa:f5:df:3f:14:4e:fe:8e:6c:79:8d:41:a6:db:ac:
                    d6:54:dd:05:35:94:e9:a9:3b:6b:a4:12:9b:f1:e7:
                    24:e2:57:2a:be:7f:41:cf:48:a0:09:f9:93:e3:32:
                    bf:f8:a2:43:6f:8b:36:28:57:05:0c:fe:9d:ce:6e:
                    ba:9f:4b:78:61:12:9e:18:75:7f:aa:80:c5:79:41:
                    a9:48:52:4c:0b:3b:70:c2:51:fe:e3:75:62:33:39:
                    c1:5f:d4:e1:f7:48:99:1b:ff:e5:95:00:65:ba:e2:
                    c7:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:F3:FA:2B:04:00:D6:0D:0D:C2:7E:F7:4A:68:A0:8F:B4:E7:86:CB
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/5PP6KwQA1g0Nwn73Smigj7Tnhss.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.210.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         ca:8d:92:35:d7:31:3a:62:5c:d7:97:42:80:e0:e3:ed:18:7f:
         be:1c:02:89:33:6d:a8:97:e5:e6:ac:68:bf:28:d8:ed:45:14:
         37:66:67:7c:34:c5:e3:60:26:95:aa:49:c3:5c:a5:7e:87:92:
         fb:fc:ae:6b:36:b0:ae:18:05:bd:c8:b6:64:1d:94:70:ae:ec:
         89:c0:af:e9:ef:f7:61:34:31:12:bf:1d:75:9a:7e:d8:76:92:
         ce:0f:fe:e2:6e:ea:b9:81:aa:eb:ad:b9:13:df:eb:5f:11:c0:
         04:a8:fd:da:04:c8:e5:58:75:ec:34:c6:e7:c9:3b:ed:85:94:
         0b:c6:cd:73:f6:0a:1a:66:5b:d1:01:7b:4f:02:10:9c:2f:c1:
         af:00:03:cb:72:6c:c0:ea:13:ee:b3:83:f1:65:2c:00:0e:a0:
         d6:b4:8a:fc:b9:a9:78:9b:4d:c6:55:d3:cd:1f:4b:44:e0:fb:
         58:53:af:0b:e4:b5:c9:1f:d4:5b:da:e7:6c:8d:8e:68:05:3b:
         69:67:ba:9b:54:8c:d5:b8:37:29:47:24:46:f2:ab:fd:69:1c:
         34:fc:4c:69:3d:3e:55:05:b5:06:c5:7e:aa:b5:e7:cf:7e:ed:
         f0:33:23:ce:ce:1a:a8:dd:6a:54:32:4d:45:72:e3:b9:00:ef:
         7c:37:7b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----