Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/6m2_PjHaUyg0qPZYymbmTCL-2ZU.roa
File:                     6m2_PjHaUyg0qPZYymbmTCL-2ZU.roa (raw, json)
Hash identifier:          hCu+VraTHmZViuyQbWw8fuuNEY+OsAM6NEQJe/0PmDg=
Subject key identifier:   EA:6D:BF:3E:31:DA:53:28:34:A8:F6:58:CA:66:E6:4C:22:FE:D9:95
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/6m2_PjHaUyg0qPZYymbmTCL-2ZU.roa
Signing time:             Thu 15 Sep 2022 02:43:10 +0000
ROA not before:           Thu 15 Sep 2022 02:43:10 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     131597
IP address blocks:        106.105.232.0/21 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4036 (0xfc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 15 02:43:10 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=EA6DBF3E31DA532834A8F658CA66E64C22FED995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0b:9a:f0:77:68:1b:01:b6:7c:aa:cc:b6:d8:
                    0e:95:d3:40:13:58:c4:50:04:02:21:95:1b:d1:1c:
                    0a:39:0b:29:90:62:33:d9:a2:eb:e5:2a:5a:f0:e0:
                    c0:47:07:77:ae:64:e6:26:41:03:a1:ce:92:ef:24:
                    90:cf:be:5c:ca:43:14:c2:4e:65:8d:b9:c0:d8:9e:
                    20:ca:73:91:4f:3d:30:e3:fd:54:ff:0f:42:e7:2a:
                    1b:80:19:18:d0:b3:f2:36:21:91:7e:1c:76:c4:6d:
                    48:45:4c:7f:c5:4e:d1:b3:eb:11:bd:ed:e9:57:89:
                    87:b3:89:75:44:27:b5:50:45:33:0b:6a:88:34:24:
                    fd:44:d6:02:19:ca:9f:06:fc:4a:68:eb:b4:2f:4c:
                    6e:2a:e4:fa:b5:85:7e:dd:8c:cd:f3:8b:59:c8:26:
                    96:02:c3:f9:cb:0c:79:da:0a:a4:57:d5:f8:3b:3c:
                    4e:54:20:de:4c:d9:21:d3:a4:04:5b:f4:c4:92:e9:
                    fc:51:c2:24:55:49:d3:1e:5e:9e:62:f1:45:4d:cb:
                    ba:c1:3f:ad:94:7a:2b:07:83:ae:f6:66:a2:58:a4:
                    7d:3d:18:d5:6c:ed:53:cd:11:0f:71:5b:21:80:6d:
                    b9:18:9e:b9:2d:16:36:4e:23:66:74:80:e0:82:e2:
                    13:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:6D:BF:3E:31:DA:53:28:34:A8:F6:58:CA:66:E6:4C:22:FE:D9:95
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/6m2_PjHaUyg0qPZYymbmTCL-2ZU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.105.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         bd:fb:3e:8d:ff:90:40:1e:96:4b:ff:9c:64:81:88:b5:b6:ef:
         3d:cd:52:c9:3e:bd:8d:9c:99:54:bb:81:c9:ec:e0:2f:3d:73:
         0d:63:9e:60:31:54:f6:b6:dd:72:87:63:e4:0e:d2:34:fe:3a:
         ea:ee:cf:d3:d5:a3:1f:ee:da:be:e0:81:cc:fa:2c:d8:31:cf:
         3f:b2:0c:65:8c:98:ea:55:bf:90:74:c3:72:22:7c:c2:71:14:
         da:22:f1:30:30:fd:d8:64:e6:17:88:97:8b:61:d7:06:e6:f1:
         e1:fa:13:e1:e7:84:cc:81:92:a9:2a:d7:29:b4:ab:f9:77:91:
         b4:51:a3:47:c6:a4:d5:49:ad:92:2e:8b:0a:89:32:57:c4:fd:
         8e:a3:5f:56:86:75:14:00:ab:8d:c9:d4:93:ef:b4:7c:73:47:
         69:a7:a2:03:c0:1b:fe:c9:ef:ee:02:7a:51:19:8e:2a:57:4e:
         9d:6f:f4:67:71:41:c9:e2:91:bb:0b:13:79:0d:46:33:8a:0e:
         15:8c:d6:8c:b6:bb:f9:6c:d1:54:0f:36:22:66:8a:6e:9e:52:
         75:62:3b:63:cb:72:ee:f4:6a:3f:18:49:4c:f3:8a:14:8d:85:
         a6:21:d1:45:30:98:71:6b:1a:2c:47:55:34:93:83:2a:40:1e:
         be:ae:62:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----