Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/OXyFNsB-qf69HFuw6jxDQuUJB0Q.roa
File:                     OXyFNsB-qf69HFuw6jxDQuUJB0Q.roa (raw, json)
Hash identifier:          O6antgmEqgCYLgHWuC+ZHV3cv4LQHSEvMlmEhGOu6BQ=
Subject key identifier:   39:7C:85:36:C0:7E:A9:FE:BD:1C:5B:B0:EA:3C:43:42:E5:09:07:44
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/OXyFNsB-qf69HFuw6jxDQuUJB0Q.roa
Signing time:             Thu 15 Sep 2022 02:43:43 +0000
ROA not before:           Thu 15 Sep 2022 02:43:43 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     4780
IP address blocks:        122.147.16.0/21 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4036 (0xfc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 15 02:43:43 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=397C8536C07EA9FEBD1C5BB0EA3C4342E5090744
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b2:b0:bb:15:47:3c:93:2a:14:ff:98:41:bd:
                    15:57:1c:36:3a:56:72:2c:43:b3:af:09:cb:49:91:
                    b1:d1:13:16:38:54:bd:38:15:06:0c:57:c9:f3:5e:
                    5f:af:e8:b9:78:b4:fb:e0:1b:42:39:65:3b:83:0a:
                    01:60:86:76:29:3e:09:4d:c3:39:a1:4b:e2:ab:2f:
                    be:5f:bb:68:b5:a8:10:90:0b:4b:21:12:2e:5f:f6:
                    9d:cf:74:1e:71:c8:33:39:32:68:cd:55:80:8d:cf:
                    ee:ec:50:52:e7:4d:ab:ff:ba:57:c6:9a:b7:c5:f4:
                    1f:58:b3:81:d2:76:5e:a2:b9:5a:25:34:a5:95:64:
                    59:41:f1:92:e6:9e:33:a6:86:ac:9d:88:dd:0d:02:
                    34:e0:d4:94:8f:83:9a:ab:49:09:91:32:1c:43:06:
                    a0:3f:36:a7:fc:6f:cb:7a:53:e6:32:ec:43:1a:5f:
                    e3:0f:d5:76:a0:16:1d:df:6b:7d:c6:eb:5d:95:48:
                    c2:80:ca:bd:20:f4:60:42:55:8b:fc:d2:43:17:57:
                    cd:2c:82:82:54:4a:97:6a:fe:3c:79:bc:0c:7a:b6:
                    0d:a7:8b:34:b3:e8:1d:8a:50:d6:5d:15:2e:1d:22:
                    82:50:93:82:26:a0:50:43:7e:00:0f:51:ae:28:2e:
                    5d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:7C:85:36:C0:7E:A9:FE:BD:1C:5B:B0:EA:3C:43:42:E5:09:07:44
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/OXyFNsB-qf69HFuw6jxDQuUJB0Q.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.147.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         c6:e9:18:3c:fa:de:9a:c1:85:89:ff:51:f5:7d:03:f7:1e:a4:
         f1:77:d3:90:35:1d:1c:c7:93:b0:25:7b:a0:d2:e0:87:6f:de:
         2e:45:02:5c:bd:e6:0d:ef:d5:f1:b6:87:b7:65:79:49:08:a7:
         b2:b0:b8:1e:da:09:b2:8a:ae:7c:cc:1b:6f:2c:05:ee:69:79:
         f9:a6:45:03:c2:37:30:27:a6:45:24:e2:12:a9:af:fb:3a:26:
         3b:bb:1c:c6:31:14:81:fb:9b:56:4f:4e:bc:e5:c7:2a:e5:ed:
         db:88:b7:37:7a:17:87:56:13:af:f6:63:9f:e4:da:db:5d:75:
         e9:e2:05:e9:45:86:99:4e:0a:c8:b4:39:d7:a9:00:0e:1c:d3:
         9a:1d:46:25:da:f9:79:93:6a:70:81:2c:fc:d0:62:42:38:6c:
         62:66:39:db:6c:05:7e:f2:ab:d5:01:e6:49:35:34:1e:f1:57:
         6f:f5:75:30:c1:43:fa:68:4e:9d:d7:33:a3:44:4c:81:e0:aa:
         6a:73:d4:0e:db:27:2b:8b:52:f6:11:f0:7d:17:e5:67:f6:9b:
         95:90:b6:8f:ad:47:89:d2:14:11:c3:6a:ae:85:ac:f1:88:fd:
         57:c4:54:e5:34:9d:bb:cf:dd:6c:dd:88:6c:6e:cb:c0:ef:b8:
         f7:ef:ba:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----