Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/QpaL3OKjU6CWUTf7_ifjCctDkqg.roa
File:                     QpaL3OKjU6CWUTf7_ifjCctDkqg.roa (raw, json)
Hash identifier:          SZnAQ9olmkiG545yu30/G4KDSympXwQzDkrdUVqqjpc=
Subject key identifier:   42:96:8B:DC:E2:A3:53:A0:96:51:37:FB:FE:27:E3:09:CB:43:92:A8
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/QpaL3OKjU6CWUTf7_ifjCctDkqg.roa
Signing time:             Thu 15 Sep 2022 02:43:06 +0000
ROA not before:           Thu 15 Sep 2022 02:43:06 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     136543
IP address blocks:        115.30.65.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4036 (0xfc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 15 02:43:06 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=42968BDCE2A353A0965137FBFE27E309CB4392A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:80:92:05:ea:ea:bf:4a:c6:04:a2:0f:ca:ff:
                    7f:36:4d:fa:02:c9:a5:ac:72:b8:36:2c:0c:7a:f3:
                    d8:40:a0:0a:72:55:68:ab:d6:f0:d1:26:93:bb:35:
                    1b:09:b1:ea:5b:65:16:3a:e9:e9:f5:8b:89:ca:0d:
                    f1:97:4b:be:99:d9:aa:e9:c8:3c:3c:74:2c:dd:28:
                    38:44:d8:e6:7c:65:13:4e:fd:49:ee:66:e0:a9:c6:
                    4e:1b:d0:1c:04:83:df:09:d5:1c:6a:11:3a:eb:7a:
                    ce:54:fe:97:47:c9:31:3d:2d:d4:23:53:35:91:be:
                    70:c7:29:63:af:80:fc:9a:43:c5:b1:d1:ea:ca:ac:
                    30:14:2b:cf:47:a4:de:7a:e9:6e:ff:d9:50:a4:25:
                    ea:eb:24:07:de:db:3c:11:80:1f:cb:cd:55:cf:dc:
                    20:15:7d:20:8c:1f:3e:c2:fc:05:36:98:18:01:9c:
                    d2:4b:43:43:05:e7:d6:35:4f:6f:fd:cf:b2:77:3a:
                    f1:a2:ab:94:5f:ee:60:25:7d:12:9f:0f:b3:47:14:
                    c6:f9:99:24:57:5c:56:74:ed:ee:12:ce:64:b8:e6:
                    01:73:34:b1:3f:f9:7c:7b:50:2a:66:70:34:c0:77:
                    24:bc:f4:72:29:b7:22:d3:05:ab:d4:21:20:db:03:
                    ae:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:96:8B:DC:E2:A3:53:A0:96:51:37:FB:FE:27:E3:09:CB:43:92:A8
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/QpaL3OKjU6CWUTf7_ifjCctDkqg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.30.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:fb:5d:2d:dd:97:4b:a2:df:5e:67:4e:10:cd:19:c1:27:5d:
         67:8c:59:9c:c5:cb:d0:96:67:94:e1:2a:5c:cd:42:16:79:73:
         ae:ef:af:f2:c9:74:58:28:0d:13:fb:b2:17:f2:ea:51:b3:2f:
         33:0c:91:19:07:45:84:e2:36:ba:d7:7e:ea:25:d7:b0:47:e9:
         44:e6:e0:ed:9b:6c:ad:9c:10:af:2a:9e:ef:db:b1:3f:16:5d:
         c2:fd:11:e4:cb:b9:30:14:ca:a7:65:a1:35:7f:f4:f9:35:b5:
         03:83:56:5c:80:f5:56:28:73:de:24:be:b1:45:8e:16:fe:4e:
         e5:d3:7f:cd:e6:f5:db:fc:86:7c:77:6c:10:89:68:6d:9b:56:
         1b:42:de:65:55:ef:fa:57:75:9e:f4:4d:8a:fb:2b:7c:59:a1:
         46:2f:6b:8c:39:ed:95:26:de:93:c4:1c:96:10:ba:2d:65:da:
         79:f9:eb:9c:27:30:4c:2a:7a:7e:df:0b:52:a8:45:4b:9e:ab:
         7d:91:d3:e0:1f:91:80:9a:91:6f:a7:8f:cd:38:d8:5f:03:75:
         58:6b:a1:8c:5b:c4:f7:4f:7b:ba:ce:1c:6e:14:de:a4:15:6f:
         86:41:cd:26:e0:5f:25:41:25:f6:b3:7f:c7:7c:ee:8e:17:53:
         26:d0:4e:a9
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICD8QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMjA5MTUw
MjQzMDZaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDQyOTY4QkRDRTJBMzUz
QTA5NjUxMzdGQkZFMjdFMzA5Q0I0MzkyQTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCygJIF6uq/SsYEog/K/382TfoCyaWscrg2LAx689hAoApyVWir
1vDRJpO7NRsJsepbZRY66en1i4nKDfGXS76Z2arpyDw8dCzdKDhE2OZ8ZRNO/Unu
ZuCpxk4b0BwEg98J1RxqETrres5U/pdHyTE9LdQjUzWRvnDHKWOvgPyaQ8Wx0erK
rDAUK89HpN566W7/2VCkJerrJAfe2zwRgB/LzVXP3CAVfSCMHz7C/AU2mBgBnNJL
Q0MF59Y1T2/9z7J3OvGiq5Rf7mAlfRKfD7NHFMb5mSRXXFZ07e4SzmS45gFzNLE/
+Xx7UCpmcDTAdyS89HIptyLTBavUISDbA65fAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUQpaL3OKjU6CWUTf7/ifjCctDkqgwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvUXBhTDNPS2pVNkNXVVRmN19pZmpD
Y3REa3FnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHMeQTAN
BgkqhkiG9w0BAQsFAAOCAQEAFvtdLd2XS6LfXmdOEM0ZwSddZ4xZnMXL0JZnlOEq
XM1CFnlzru+v8sl0WCgNE/uyF/LqUbMvMwyRGQdFhOI2utd+6iXXsEfpRObg7Zts
rZwQryqe79uxPxZdwv0R5Mu5MBTKp2WhNX/0+TW1A4NWXID1Vihz3iS+sUWOFv5O
5dN/zeb12/yGfHdsEIlobZtWG0LeZVXv+ld1nvRNivsrfFmhRi9rjDntlSbek8Qc
lhC6LWXaefnrnCcwTCp6ft8LUqhFS56rfZHT4B+RgJqRb6ePzTjYXwN1WGuhjFvE
9097us4cbhTepBVvhkHNJuBfJUEl9rN/x3zujhdTJtBOqQ==
-----END CERTIFICATE-----