Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/M4o4ErC2z_9OyB82MeS-kYJ10oM.roa
File:                     M4o4ErC2z_9OyB82MeS-kYJ10oM.roa (raw, json)
Hash identifier:          E5jbP64FRZpBxLJvLDwA9OdaL+3dhdxu+8e1qYAnnx8=
Subject key identifier:   33:8A:38:12:B0:B6:CF:FF:4E:C8:1F:36:31:E4:BE:91:82:75:D2:83
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/M4o4ErC2z_9OyB82MeS-kYJ10oM.roa
Signing time:             Thu 15 Sep 2022 02:42:43 +0000
ROA not before:           Thu 15 Sep 2022 02:42:43 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     9919
IP address blocks:        175.182.77.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4036 (0xfc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 15 02:42:43 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=338A3812B0B6CFFF4EC81F3631E4BE918275D283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:42:92:33:65:9b:b2:36:92:ae:b3:52:20:c5:
                    ef:2d:36:3e:63:3b:64:b4:5f:95:85:50:23:d1:00:
                    fb:2b:f7:f1:40:0c:f7:af:87:5e:f7:99:88:00:58:
                    bc:90:a0:80:d6:80:5f:96:b8:e4:23:e4:55:11:6d:
                    92:05:87:90:cd:2b:be:cb:bc:0f:07:2b:29:3c:66:
                    31:3b:ff:7a:1e:78:29:ac:f5:db:69:1c:18:e9:b7:
                    84:1e:d1:fe:0b:0b:89:b8:42:25:4b:87:12:d8:49:
                    b1:dd:c4:fd:95:52:26:75:75:85:50:57:e2:cb:f8:
                    f2:74:d0:1b:fd:fd:78:16:9e:47:89:4d:55:ae:b7:
                    8d:bc:32:6f:d8:4c:74:fb:1e:ba:7b:1e:e8:bd:9c:
                    79:2e:22:87:83:c7:f6:c9:1e:a0:d5:d3:43:13:b6:
                    16:92:d5:ae:1f:76:77:c4:ec:c4:6f:1c:f7:9e:be:
                    28:74:fa:92:32:3c:ab:64:7b:f7:38:5a:d2:e6:8f:
                    b4:72:42:4e:59:27:db:12:6a:37:a0:e0:ae:7e:bc:
                    d2:01:d7:66:e6:19:2c:68:5e:d8:28:73:d8:2a:f8:
                    4a:30:97:38:da:95:98:00:eb:ad:70:d5:46:56:93:
                    28:88:04:9d:0f:0b:e3:c6:6b:7a:d5:11:d7:ba:ef:
                    a0:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:8A:38:12:B0:B6:CF:FF:4E:C8:1F:36:31:E4:BE:91:82:75:D2:83
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/M4o4ErC2z_9OyB82MeS-kYJ10oM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.182.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:8e:13:90:56:1a:54:86:0d:f1:41:e7:ac:e0:3a:c3:8c:f7:
         24:04:2b:27:d9:8d:ae:0b:30:37:fc:fd:b4:0d:6b:63:84:bc:
         66:9b:e6:a7:01:4e:9a:da:52:7e:03:d0:5b:9e:46:6e:d1:51:
         5a:97:06:26:1e:9b:df:94:4a:1f:a2:e1:24:ac:41:07:93:3a:
         94:cb:1f:c8:0b:f2:ca:59:40:1e:20:9f:44:f3:17:c3:b3:e4:
         be:e6:1e:3a:0c:9d:80:3e:ba:75:32:22:f1:1d:f4:bb:87:76:
         4d:24:c2:c4:7b:b7:ce:bb:09:0d:6d:c8:b0:eb:48:aa:c8:a2:
         75:0c:3a:c6:d0:12:83:07:00:f6:82:4c:30:72:c2:3b:af:ae:
         0c:69:a6:b4:d5:fa:2e:c5:f4:3d:9d:31:b9:3c:97:df:88:6a:
         f3:e7:54:2d:7a:f8:a0:75:49:87:c7:7f:dd:ad:52:c8:ed:7c:
         fd:ba:5d:7d:8b:71:89:da:75:f9:43:cd:df:20:64:c3:ea:11:
         1d:a2:f0:dc:0f:72:76:fd:2c:7b:c9:ea:66:54:e4:0e:80:1e:
         49:e0:16:2d:a5:bb:0c:04:40:14:90:86:e5:e9:8f:17:96:6a:
         fd:54:38:52:ef:ca:ce:c5:82:0e:9a:ec:93:54:9d:31:b9:0d:
         61:58:47:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----