Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/GkzyCTtQgJ8dBkHB4oCVjJgT3J4.roa
File:                     GkzyCTtQgJ8dBkHB4oCVjJgT3J4.roa (raw, json)
Hash identifier:          cqMCtanotc9o715GKzQ++A7tlhjIB+8017rRwrJMApU=
Subject key identifier:   1A:4C:F2:09:3B:50:80:9F:1D:06:41:C1:E2:80:95:8C:98:13:DC:9E
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/GkzyCTtQgJ8dBkHB4oCVjJgT3J4.roa
Signing time:             Thu 15 Sep 2022 02:43:33 +0000
ROA not before:           Thu 15 Sep 2022 02:43:33 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     9919
IP address blocks:        218.210.64.0/18 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4036 (0xfc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 15 02:43:33 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=1A4CF2093B50809F1D0641C1E280958C9813DC9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:ad:f4:15:62:a2:b3:53:b5:5f:39:c7:74:fa:
                    32:4a:42:15:8c:45:7c:d4:6a:10:96:16:c0:b8:65:
                    cd:9a:1b:59:c1:d4:e3:32:02:94:8b:b6:b8:6e:a0:
                    ce:84:87:58:79:dd:d3:ef:fc:bb:a2:be:26:c9:56:
                    95:77:54:ec:ce:ba:57:a7:61:74:98:9f:40:e5:46:
                    1b:f0:7f:db:11:c4:9e:2c:e3:b8:da:a8:1e:60:44:
                    db:46:80:1b:c2:84:4e:2f:28:d5:fe:e7:02:52:26:
                    c7:b0:d3:f2:d5:35:01:d6:e8:2e:de:85:fc:ca:19:
                    58:c1:2e:15:1b:53:20:63:38:e2:86:69:be:66:3c:
                    bd:91:53:af:4b:42:55:61:b9:16:14:27:85:e9:31:
                    36:6a:0f:1b:22:e7:49:b7:45:52:c4:2b:31:16:24:
                    0a:3a:8a:5d:17:66:a1:12:48:43:78:ea:c2:61:95:
                    f1:b5:72:87:68:0e:f0:f6:25:7d:69:5a:80:58:74:
                    9b:fe:06:5d:c7:50:5f:1c:d9:55:4d:36:d3:d3:6a:
                    f2:6a:44:24:06:f6:3b:03:e4:f1:56:72:d0:2e:6f:
                    00:ee:d2:b8:3b:d4:0a:a1:39:1c:d5:a2:d0:34:40:
                    b7:13:06:a2:1f:ab:c1:6c:cc:4c:de:9a:ec:7d:e1:
                    5a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:4C:F2:09:3B:50:80:9F:1D:06:41:C1:E2:80:95:8C:98:13:DC:9E
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/GkzyCTtQgJ8dBkHB4oCVjJgT3J4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.210.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         25:9b:01:2e:7c:1f:2d:c5:15:a4:cc:31:13:77:73:12:13:15:
         4f:73:9a:13:e8:8c:fc:20:84:f0:fc:cf:98:68:e2:10:12:fe:
         9c:45:55:f0:f8:af:72:41:39:9e:e0:55:c8:ae:e2:eb:cc:71:
         ec:60:59:d0:db:04:89:50:7c:fc:e0:80:6a:10:06:65:bd:e6:
         50:c9:73:28:b2:ef:a3:1b:55:7e:11:dd:6d:5d:51:d0:45:d6:
         bb:fd:82:32:bd:cd:ce:55:ec:e1:f1:92:c4:56:3a:8e:ad:4a:
         96:aa:33:7a:df:51:f7:90:3b:c3:13:f4:f0:01:f9:b8:f5:57:
         0a:21:05:67:bf:70:68:ae:23:21:34:ad:5c:f8:47:ce:fa:79:
         df:c1:96:43:0f:56:8d:1f:37:74:81:c1:ba:27:a7:40:77:70:
         af:17:de:06:3d:89:22:4f:a8:30:98:1a:7c:42:70:ae:db:63:
         7e:7e:55:68:ae:63:b1:a2:72:e9:26:65:a1:f9:fb:56:bb:00:
         48:e3:7b:fe:55:86:29:ed:4b:7a:8f:8e:f7:42:af:c8:5e:39:
         c6:41:aa:55:14:0f:0d:2d:5e:75:22:df:ea:38:83:8d:a4:0a:
         b9:33:61:00:6b:97:ea:6b:39:dc:3e:e3:5f:ea:c9:8e:d7:d8:
         3a:06:0f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----