Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/SnAZNFc_ThpnTqGSk55q7FiV3pI.roa
File:                     SnAZNFc_ThpnTqGSk55q7FiV3pI.roa (raw, json)
Hash identifier:          z5yDyyd7pF9IIO0DqDBV9VN1Vb2hoEIZhiqp+bQ56qM=
Subject key identifier:   4A:70:19:34:57:3F:4E:1A:67:4E:A1:92:93:9E:6A:EC:58:95:DE:92
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/SnAZNFc_ThpnTqGSk55q7FiV3pI.roa
Signing time:             Thu 15 Sep 2022 02:42:45 +0000
ROA not before:           Thu 15 Sep 2022 02:42:45 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     9919
IP address blocks:        42.0.64.0/18 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4036 (0xfc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 15 02:42:45 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=4A701934573F4E1A674EA192939E6AEC5895DE92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:a0:1c:08:dc:59:99:9a:dd:c3:6f:7c:a8:87:
                    9a:72:b4:47:eb:96:c8:52:67:87:9a:93:60:12:ce:
                    3c:d1:32:7d:b3:34:d1:64:93:7a:ed:d6:39:1b:9e:
                    27:13:eb:2e:58:1e:dd:17:72:45:a4:94:c4:2f:17:
                    0f:df:40:3d:55:e4:18:cc:d3:94:93:c9:1e:03:92:
                    b3:14:f7:d6:c6:17:58:18:96:52:f7:cd:f3:60:49:
                    b3:c9:aa:2f:76:0e:fa:16:39:89:83:40:aa:97:7f:
                    00:d1:2b:f0:06:91:77:7c:59:ec:ad:11:56:79:64:
                    d9:6a:c5:e5:3a:4f:84:3f:1d:fd:60:69:02:af:4a:
                    0a:66:6e:84:74:86:b5:c2:b1:87:70:37:00:5a:3a:
                    f3:61:10:32:a6:8b:d3:2a:88:42:19:b3:23:52:7b:
                    83:22:a2:ca:ee:70:22:b3:f4:ab:5c:2e:dd:99:5f:
                    f6:d1:5d:52:e5:5d:cf:75:0d:bb:64:e7:2b:7e:1d:
                    9b:c5:9f:8a:b6:64:2f:40:3f:bb:10:6b:01:63:cd:
                    ba:36:30:04:b7:bd:55:ec:4b:e1:d9:1d:4f:be:6d:
                    75:ae:0b:fd:fb:67:8f:28:bd:4f:76:e8:38:9c:f8:
                    18:cc:17:2b:ff:f0:95:8b:43:d8:97:4d:2a:00:71:
                    16:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:70:19:34:57:3F:4E:1A:67:4E:A1:92:93:9E:6A:EC:58:95:DE:92
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/SnAZNFc_ThpnTqGSk55q7FiV3pI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  42.0.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         44:e0:b2:17:6e:11:bd:ca:3f:b2:b7:e7:84:55:10:12:cf:15:
         88:b8:cf:fe:20:28:26:9c:aa:7b:e6:46:e6:6e:8f:82:2f:15:
         cd:38:d2:0a:06:f9:9e:e3:0b:21:23:f2:70:55:20:18:69:de:
         4a:43:5b:d9:29:bc:e7:b2:e8:b5:21:7f:b5:94:e4:1f:55:dd:
         7c:5c:c1:49:23:06:38:6b:7c:5d:aa:39:47:2a:bf:2d:a3:07:
         df:78:d7:ca:da:fc:83:7c:97:10:5c:48:2d:ec:aa:eb:c0:c3:
         cb:c1:63:11:76:8e:72:2c:b3:e4:a3:b7:01:28:e8:92:a3:17:
         72:18:31:15:e4:4b:44:fd:11:d6:e7:80:17:ac:55:26:49:c3:
         a9:c5:e6:3a:57:6b:5b:09:0e:60:8b:d6:5c:4b:94:7a:a5:66:
         2c:1f:8e:e1:9b:dd:ba:f2:d5:11:2e:6c:e3:de:84:f5:be:5d:
         19:fe:3a:1c:65:8a:38:53:1c:27:0a:46:76:00:27:b7:00:aa:
         d9:09:64:6d:e6:5c:52:34:e4:b2:56:88:ca:d7:be:8f:bc:e9:
         03:cf:4e:68:95:39:33:c2:08:73:37:dd:bb:ed:5b:54:b7:fb:
         0d:ef:3c:1d:b1:b6:58:5b:6c:c6:a1:84:16:ec:20:36:d0:05:
         92:9c:1d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----