Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/6C-5j4SqJPvSpRZTxemCPTvoghs.roa
File:                     6C-5j4SqJPvSpRZTxemCPTvoghs.roa (raw, json)
Hash identifier:          A1C7+wRdsb7h4txgACsD5j8V93NDhSkgMCfwycRDB4c=
Subject key identifier:   E8:2F:B9:8F:84:AA:24:FB:D2:A5:16:53:C5:E9:82:3D:3B:E8:82:1B
Certificate issuer:       /CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Certificate serial:       0C6F
Authority key identifier: B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/6C-5j4SqJPvSpRZTxemCPTvoghs.roa
Signing time:             Thu 15 Sep 2022 02:43:44 +0000
ROA not before:           Thu 15 Sep 2022 02:43:44 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     9919
IP address blocks:        192.72.3.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3183 (0xc6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
        Validity
            Not Before: Sep 15 02:43:44 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=E82FB98F84AA24FBD2A51653C5E9823D3BE8821B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4d:b1:5f:dc:7b:cb:ec:03:df:fa:21:de:d2:
                    64:ab:b8:56:5d:06:50:6a:bc:0f:81:78:f6:2c:b3:
                    c0:dc:57:95:50:5e:8b:34:a0:d7:39:98:5c:17:eb:
                    0a:4c:88:55:ca:9f:96:88:d2:2f:4e:cb:12:12:2e:
                    e6:d9:0a:d0:f2:2e:28:50:be:5e:7e:dc:3b:6a:4f:
                    ad:21:59:e0:ff:b2:6d:64:46:48:07:a6:2b:09:56:
                    f4:32:ee:c9:5a:97:fa:53:88:97:b9:30:8a:f5:32:
                    4e:6f:29:dc:07:0e:1c:57:d3:10:18:39:cd:8e:03:
                    75:35:22:f0:dd:4f:59:02:d9:da:9d:4c:a0:56:32:
                    99:23:0f:c8:05:02:f9:ad:e1:d5:9d:ca:5c:3f:4e:
                    a0:53:e7:72:11:15:15:05:3e:3c:a8:fe:35:a6:91:
                    5c:5f:d0:b8:e9:a7:ac:8e:8d:68:5c:0d:5d:eb:2a:
                    d9:74:ac:9e:54:a7:9b:d6:be:9b:81:d1:fb:73:1b:
                    6a:94:21:7d:95:8d:44:8c:e4:ac:5f:ec:e0:39:b9:
                    24:82:53:4a:72:73:9a:91:00:6b:88:6d:73:fa:4d:
                    d0:c5:33:26:5b:c4:bd:0f:bd:4a:c9:53:1b:46:fb:
                    b0:db:ae:41:34:a2:50:c5:4e:82:3b:0a:e6:b4:0d:
                    7e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:2F:B9:8F:84:AA:24:FB:D2:A5:16:53:C5:E9:82:3D:3B:E8:82:1B
            X509v3 Authority Key Identifier:
                keyid:B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/6C-5j4SqJPvSpRZTxemCPTvoghs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.72.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:55:80:0f:79:1d:16:17:22:ea:53:5d:93:29:b6:84:98:ff:
         c3:e9:f5:82:88:42:08:b9:39:be:3f:e7:25:ab:18:a4:7f:41:
         e1:3d:71:cc:a4:4c:28:1d:7e:61:6e:6c:b6:59:71:81:b9:ba:
         0d:08:27:8f:09:13:8b:f3:a7:04:3a:3c:00:28:59:73:83:3b:
         d1:8b:c2:e1:4f:88:b1:87:98:6f:d2:5d:5f:06:6c:7f:29:e9:
         ba:16:db:2b:91:9e:41:1f:7b:e4:79:b8:47:7b:e9:b5:2a:b3:
         47:4b:e5:65:1f:8a:50:17:32:a3:ee:c5:63:a4:96:ed:d7:da:
         f7:36:ff:22:d8:5c:74:ec:73:07:9e:59:7d:87:93:ec:53:f6:
         6e:b0:8d:81:39:54:8d:e3:fd:d9:c4:9f:7f:fc:51:37:75:22:
         de:d8:47:c0:f6:fa:6b:46:3f:38:ba:a4:c1:3c:34:e8:36:15:
         ad:63:8f:0f:33:6e:da:3a:29:7e:fe:54:e2:c3:c7:79:f8:5a:
         19:50:8e:6d:3c:40:50:17:2b:97:46:8b:6d:41:14:12:6f:c4:
         19:fc:a3:ea:ca:0b:3d:f0:b0:9d:5e:c4:de:d2:ef:ef:5b:6d:
         2e:40:f6:44:49:89:f1:9c:f1:2f:7d:5a:c1:20:c9:97:63:55:
         fd:20:02:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----