Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/XSeymmSqH5RlHFHNm4RBJIFKoRM.roa
File:                     XSeymmSqH5RlHFHNm4RBJIFKoRM.roa (raw, json)
Hash identifier:          5fnNkimk9uIcqw9eOXwalmvBQHlR1yAO3O2TkQm0pYk=
Subject key identifier:   5D:27:B2:9A:64:AA:1F:94:65:1C:51:CD:9B:84:41:24:81:4A:A1:13
Certificate issuer:       /CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Certificate serial:       0C6F
Authority key identifier: B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/XSeymmSqH5RlHFHNm4RBJIFKoRM.roa
Signing time:             Thu 15 Sep 2022 02:42:50 +0000
ROA not before:           Thu 15 Sep 2022 02:42:50 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     9919
IP address blocks:        192.72.192.0/19 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3183 (0xc6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
        Validity
            Not Before: Sep 15 02:42:50 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=5D27B29A64AA1F94651C51CD9B844124814AA113
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:00:42:7a:7a:03:b3:44:19:56:4d:a2:5e:0e:
                    63:aa:7c:f5:80:0e:3e:37:97:b9:3a:fa:b8:b1:32:
                    6b:ef:c0:53:d6:92:b8:df:a2:a2:2e:aa:96:69:2b:
                    af:63:d8:af:4e:f8:ce:53:2a:bb:59:58:e0:e7:63:
                    fa:82:62:ad:71:17:4e:f4:c3:e9:97:72:22:02:7f:
                    93:d4:94:bd:f3:ec:85:ab:9d:58:99:5e:14:cb:8b:
                    ae:4e:22:71:63:12:f6:80:27:38:41:e3:09:5e:8a:
                    82:ef:06:8e:5d:d9:cf:0d:1e:98:0c:b2:9e:eb:39:
                    64:b3:42:d0:d8:b1:1d:cc:e5:f3:37:63:1e:40:36:
                    ec:76:da:53:a9:7d:ea:00:ab:f3:55:86:15:28:51:
                    db:ab:d5:06:60:a3:7e:04:f2:4a:99:ac:f8:af:94:
                    e4:46:e4:97:f6:d1:bc:69:c3:41:6e:6f:07:0f:6b:
                    f8:ac:43:9b:66:52:26:33:97:d7:27:32:30:42:0e:
                    84:c9:ec:19:25:15:6b:c2:dc:84:ca:42:b5:05:ed:
                    f2:ea:9e:1f:29:34:74:58:03:c0:c8:7b:2f:5c:4a:
                    24:82:2b:37:d1:c5:ae:ac:cd:0f:35:be:ed:60:bc:
                    3f:9f:02:fe:3c:a3:36:1c:f6:04:7e:43:c8:08:38:
                    d9:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:27:B2:9A:64:AA:1F:94:65:1C:51:CD:9B:84:41:24:81:4A:A1:13
            X509v3 Authority Key Identifier:
                keyid:B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/XSeymmSqH5RlHFHNm4RBJIFKoRM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.72.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8d:11:bc:7e:5a:45:e4:b7:f1:59:5f:b6:f8:12:e2:53:67:57:
         36:37:b2:84:75:f5:2a:fa:7d:ec:0f:56:a9:81:97:84:d4:5b:
         59:59:71:a4:f9:31:7d:28:53:fc:6a:74:fc:3b:e4:7d:ba:dc:
         6d:22:6c:b5:1d:4c:8f:af:b6:8a:a5:1b:d6:a9:dc:1b:7d:37:
         90:df:98:3a:67:38:83:fa:33:9c:ca:a6:31:e5:07:3e:c9:63:
         2d:fa:55:07:b6:f6:8e:97:d5:3e:fb:9e:9c:c8:e6:d4:24:8a:
         88:5b:22:a1:f0:81:04:74:4d:06:d8:eb:e0:1a:34:fc:25:2b:
         38:fe:75:82:85:44:a9:ed:c3:e3:70:7d:29:48:30:f3:96:6d:
         3d:42:83:52:95:6b:99:fb:cc:48:5f:fc:13:33:3c:24:81:b2:
         48:9a:6a:25:f0:42:45:89:68:ca:6c:ff:67:43:c2:b0:94:44:
         a6:4b:4f:dc:f8:de:90:05:47:97:e8:33:19:57:14:84:1c:8f:
         b9:9f:11:95:a9:2b:fd:f9:f5:32:ba:0d:ff:80:94:93:a6:cb:
         ca:59:7c:e9:7d:57:5d:aa:d7:c4:b0:32:89:2b:7c:c9:46:8e:
         68:eb:64:74:af:9f:e3:96:f2:a9:b1:85:12:e0:fd:5c:a7:5f:
         70:1d:4d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----