Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/UqtLCSB3N98Q9GwCYvQzScx8Eu8.roa
File:                     UqtLCSB3N98Q9GwCYvQzScx8Eu8.roa (raw, json)
Hash identifier:          YJPhr9AfeGBlZp2SLABgNMrY/vDiG4zpBH6nip11UEE=
Subject key identifier:   52:AB:4B:09:20:77:37:DF:10:F4:6C:02:62:F4:33:49:CC:7C:12:EF
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/UqtLCSB3N98Q9GwCYvQzScx8Eu8.roa
Signing time:             Thu 15 Sep 2022 02:43:19 +0000
ROA not before:           Thu 15 Sep 2022 02:43:19 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     9919
IP address blocks:        2401:8000::/26 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4036 (0xfc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 15 02:43:19 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=52AB4B09207737DF10F46C0262F43349CC7C12EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:6a:c5:31:aa:dd:58:2c:e4:58:b9:21:d5:30:
                    e5:83:d5:36:73:dc:3c:38:8b:8b:95:1c:80:c4:99:
                    b4:40:58:07:9b:6b:8e:98:cd:1a:5f:7c:72:59:43:
                    89:e6:e1:11:04:81:2d:42:2c:19:c5:0a:b8:2a:2f:
                    e0:0b:b2:3c:b4:8f:d1:11:20:e6:97:c7:77:52:fd:
                    d7:e0:e7:e1:bd:47:48:02:17:4a:ae:e6:3c:f2:49:
                    a4:30:89:94:37:9c:c4:fd:05:56:d1:a5:40:41:b0:
                    16:7e:94:f6:ae:e9:ab:32:25:a0:5a:9c:28:0f:0e:
                    29:53:db:2b:19:5c:06:3e:48:e4:bb:c7:6f:9b:2c:
                    fe:10:94:bc:fe:00:5d:f1:1d:27:28:c4:0e:74:26:
                    f3:54:f4:a9:e6:55:f2:20:61:58:0d:f6:cc:80:b1:
                    a4:64:30:cf:d0:9b:e8:90:54:16:d5:20:c8:59:65:
                    ed:37:26:85:9e:b3:bf:3e:cd:ee:f2:3e:d2:1c:19:
                    da:5b:ea:ce:a4:d8:e1:14:80:2a:66:73:48:fe:47:
                    51:b4:ba:6b:d0:97:9e:01:eb:87:3a:1c:2c:10:06:
                    fd:8a:a4:ec:2d:72:36:4c:5c:42:f2:fc:ed:d5:09:
                    6b:92:9c:1d:fa:7b:09:89:4b:8c:24:28:9a:a0:7c:
                    8c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:AB:4B:09:20:77:37:DF:10:F4:6C:02:62:F4:33:49:CC:7C:12:EF
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/UqtLCSB3N98Q9GwCYvQzScx8Eu8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:8000::/26

    Signature Algorithm: sha256WithRSAEncryption
         16:54:92:f9:c3:db:f4:a6:6f:5c:2c:0c:eb:29:86:9b:de:9b:
         69:9d:39:1e:00:93:29:ac:ee:1f:df:6f:c2:51:86:24:52:b0:
         a1:49:ce:9b:98:ed:7e:88:7e:e1:11:96:a2:99:0c:09:bc:6f:
         5d:88:f0:67:ab:ec:51:84:41:3b:4e:a7:0d:14:b1:2f:aa:1f:
         3e:b0:ab:e6:1b:fd:bc:0a:8d:96:d0:72:12:1e:b3:73:74:81:
         04:15:f8:a5:fb:12:f9:ee:64:0d:fe:c9:26:f6:dd:96:d6:98:
         04:7a:c4:7f:17:82:f8:94:ac:6a:8f:75:37:b7:6c:13:fa:d5:
         30:13:2a:1b:90:c8:6d:4f:f3:01:4c:f5:7e:3c:4b:cc:7c:a3:
         cd:99:a9:92:95:a9:7e:b7:90:73:71:43:08:78:f7:bf:1f:f3:
         43:04:cc:80:06:7c:24:db:8e:7f:84:99:20:7e:39:15:a9:a3:
         48:f9:6b:b5:63:ae:d0:b2:b3:b6:ae:ea:dd:19:cd:47:50:4e:
         45:33:f5:08:83:57:ac:2b:50:4e:f0:5e:65:bf:eb:55:d7:21:
         58:c6:9c:dc:70:01:4b:ad:13:49:bc:2a:bc:39:72:c2:75:3f:
         2c:42:fc:99:29:4b:ca:7f:5e:59:1c:22:c1:96:cb:37:d8:9c:
         0d:9c:dc:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----