Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/L9IUwFqGcwBea8AUH-bWLt9qhhk.roa
File:                     L9IUwFqGcwBea8AUH-bWLt9qhhk.roa (raw, json)
Hash identifier:          zz6kUzaDfezU/DM7aegy/FeKglZQz3r8txq9gkxMIqk=
Subject key identifier:   2F:D2:14:C0:5A:86:73:00:5E:6B:C0:14:1F:E6:D6:2E:DF:6A:86:19
Certificate issuer:       /CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Certificate serial:       0C6F
Authority key identifier: B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/L9IUwFqGcwBea8AUH-bWLt9qhhk.roa
Signing time:             Thu 15 Sep 2022 02:43:12 +0000
ROA not before:           Thu 15 Sep 2022 02:43:12 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     4780
IP address blocks:        192.72.192.0/19 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3183 (0xc6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
        Validity
            Not Before: Sep 15 02:43:12 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=2FD214C05A8673005E6BC0141FE6D62EDF6A8619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ba:3b:78:75:5e:0e:0d:78:95:36:43:89:d7:
                    7b:4d:79:bc:21:28:a7:1b:ee:50:c7:9a:60:e9:3a:
                    a7:91:c0:91:73:2e:db:e3:12:91:5a:1a:7a:e2:c6:
                    74:73:40:25:f3:56:b3:9b:7c:c8:2d:68:be:6d:38:
                    41:db:4f:06:60:ee:45:59:33:d8:82:7e:64:b4:6c:
                    16:c8:47:e0:02:db:23:74:09:13:33:06:50:ad:4c:
                    9f:10:c5:6d:8c:9d:bd:df:04:2d:43:cb:ea:3f:51:
                    f5:d8:b6:2c:88:15:ab:93:2c:d5:50:95:6f:66:a7:
                    cb:b6:1b:80:bc:b8:29:4b:23:7f:93:be:95:94:04:
                    59:a7:3c:0a:53:e3:72:f8:ea:fa:2d:00:8c:44:7f:
                    58:1e:06:36:f6:19:b1:d2:9a:52:68:91:15:b6:ad:
                    b1:4d:8b:49:b3:8e:51:5c:98:94:1d:6b:3f:82:e0:
                    7e:a1:3b:e7:99:25:95:5c:e8:63:05:00:e9:e5:6f:
                    5f:0c:d3:01:2e:2b:19:4d:1b:71:0f:68:06:56:fd:
                    82:3c:cf:74:23:3b:c8:00:17:a9:10:c5:22:53:5b:
                    8f:3d:e8:cf:74:a0:13:ce:09:57:66:04:39:9c:76:
                    f8:6a:70:9a:fe:81:4b:dd:a4:3f:4c:23:23:83:90:
                    a0:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:D2:14:C0:5A:86:73:00:5E:6B:C0:14:1F:E6:D6:2E:DF:6A:86:19
            X509v3 Authority Key Identifier:
                keyid:B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/L9IUwFqGcwBea8AUH-bWLt9qhhk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.72.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         7b:e2:9f:33:cb:4d:76:d6:1c:97:3b:55:ac:28:7d:dd:90:b4:
         3e:76:8b:77:0d:11:9f:c8:45:d9:37:3e:23:62:6a:25:a9:02:
         1b:a4:9c:ac:47:d6:87:c7:7c:e2:79:01:1e:2b:b9:54:e0:5a:
         91:b3:37:86:0b:64:39:19:c3:bc:10:27:f8:ec:9f:e9:79:79:
         7d:a5:8c:a9:98:a3:08:5d:4f:64:c2:fa:ef:25:23:c3:eb:8f:
         50:c4:b4:d0:4d:09:f9:a8:1b:ba:48:37:a9:c5:56:f3:f4:9d:
         82:55:30:06:45:dc:e3:39:db:7f:e5:24:f6:90:81:20:b1:25:
         ef:e1:42:61:4b:31:79:69:f1:95:c3:25:09:f9:d3:9e:87:30:
         c5:69:cb:86:c6:db:3f:38:ab:a0:9e:8b:d5:80:40:06:98:b2:
         cd:53:26:f6:90:2e:b0:19:8a:84:3e:94:77:e7:4b:d7:36:a5:
         36:3c:8e:f1:37:7e:fa:61:df:e4:f9:78:53:41:cf:8a:78:e0:
         68:bf:38:de:84:7e:bc:3e:a3:7b:4c:24:0e:a4:c2:b5:7b:43:
         5a:db:5c:0e:11:4e:6f:fe:b7:19:cc:61:c0:99:20:5d:03:9b:
         e9:c0:53:96:be:ea:0e:0a:09:1e:7e:0c:4b:a7:dc:53:0b:25:
         1d:b4:60:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----