Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/TRfCdCXvJDNWzN7tSmbnnquq6SU.roa
File:                     TRfCdCXvJDNWzN7tSmbnnquq6SU.roa (raw, json)
Hash identifier:          Y0qycHOP0/vxIArIplVq89JhOIsR3dLPeIRrXob4tw0=
Subject key identifier:   4D:17:C2:74:25:EF:24:33:56:CC:DE:ED:4A:66:E7:9E:AB:AA:E9:25
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/TRfCdCXvJDNWzN7tSmbnnquq6SU.roa
Signing time:             Thu 15 Sep 2022 02:43:10 +0000
ROA not before:           Thu 15 Sep 2022 02:43:10 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     131627
IP address blocks:        103.234.40.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4036 (0xfc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 15 02:43:10 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=4D17C27425EF243356CCDEED4A66E79EABAAE925
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:cc:42:98:38:20:30:8f:9d:51:d4:f2:99:26:
                    11:cd:92:2d:5d:08:5b:50:b1:f5:ad:2d:03:8b:fd:
                    69:88:37:49:29:49:f6:13:8a:a4:4b:48:1d:b4:aa:
                    48:9a:36:1e:6c:94:97:f3:9f:39:4a:8e:9b:98:f1:
                    c7:5c:4a:93:52:b8:e3:91:cf:d8:6a:66:f5:bd:0a:
                    17:9a:9d:0d:7a:5d:0c:41:b1:4f:04:cc:75:e8:08:
                    53:a8:d8:fb:7a:92:00:e2:68:27:79:41:31:13:fa:
                    2e:66:ed:76:82:ba:87:54:3a:c2:d0:a4:f0:71:93:
                    1c:84:db:6e:88:b7:82:2c:55:2b:99:f6:03:88:f0:
                    8b:86:06:60:50:3f:56:8a:a5:0a:26:bc:69:42:87:
                    65:94:ed:90:60:43:9f:ce:d1:bf:9f:c4:fa:1c:c6:
                    eb:65:a4:65:69:4d:6b:3a:72:3f:0d:32:f3:cb:d5:
                    3c:67:32:c4:fa:a7:cf:cb:c7:79:dc:58:16:42:40:
                    08:f2:70:e8:ac:13:78:ff:07:a2:b0:ce:bb:80:c5:
                    35:08:fb:42:4c:a2:32:f8:44:0e:cb:f9:75:74:f5:
                    50:23:fd:79:ef:39:b3:33:c1:39:13:1d:8c:c6:dc:
                    66:90:b3:d5:74:c4:4e:b2:f8:63:8e:16:36:62:33:
                    d5:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:17:C2:74:25:EF:24:33:56:CC:DE:ED:4A:66:E7:9E:AB:AA:E9:25
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/TRfCdCXvJDNWzN7tSmbnnquq6SU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.234.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:ce:8e:b1:e0:33:4e:8c:c9:9c:6e:7f:d7:c7:8d:06:80:c4:
         13:b7:ec:30:11:63:cb:c0:e5:ff:f2:76:7a:69:af:de:d0:71:
         7c:9e:12:93:36:b5:25:03:d1:fe:00:ae:36:f3:67:4a:ee:a9:
         d6:25:19:4a:4e:41:e5:c8:8c:8d:1e:af:65:b1:82:bf:93:2d:
         8d:0b:87:73:ba:a3:4d:22:ee:9f:a2:2d:0f:65:56:32:54:d7:
         ea:3a:ca:72:03:b7:0a:28:3d:a9:ac:81:68:c9:2b:12:44:81:
         41:10:93:68:3b:d9:a2:7a:4d:41:44:9e:4b:24:51:ed:aa:0e:
         54:15:3f:f8:5c:0d:b1:e9:65:62:a5:9e:38:91:27:a1:c9:9b:
         6b:d0:c9:8d:03:02:24:e2:2e:5e:e8:16:44:5b:00:d9:55:b0:
         91:aa:a6:25:d6:06:bf:b9:e1:de:1a:dc:92:07:81:1f:01:01:
         89:76:7a:23:39:87:bc:5b:9c:34:5c:76:fa:18:bd:18:42:e2:
         fd:03:f5:5a:fe:69:d4:78:b1:82:37:f0:17:6b:86:73:0b:6b:
         c1:be:b0:74:09:d6:cd:59:26:1f:0e:08:89:39:1c:d8:4a:33:
         60:26:c3:d4:2d:38:db:f9:da:f3:bd:08:70:4f:37:26:7e:48:
         a8:da:62:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----