Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/XZKJApVM4vVpygrqeM9U3eT4edk.roa
File:                     XZKJApVM4vVpygrqeM9U3eT4edk.roa (raw, json)
Hash identifier:          Ov3AbKOECYm7du/v2HdaF7Am1WvDZJGJ1HEiQ+EiOuE=
Subject key identifier:   5D:92:89:02:95:4C:E2:F5:69:CA:0A:EA:78:CF:54:DD:E4:F8:79:D9
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/XZKJApVM4vVpygrqeM9U3eT4edk.roa
Signing time:             Thu 15 Sep 2022 02:43:39 +0000
ROA not before:           Thu 15 Sep 2022 02:43:39 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     4780
IP address blocks:        112.105.64.0/18 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4036 (0xfc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 15 02:43:39 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=5D928902954CE2F569CA0AEA78CF54DDE4F879D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c8:03:5d:dc:d6:61:19:dd:76:f0:0f:13:71:
                    1e:04:da:20:c4:60:fc:04:bc:1e:28:27:e5:16:85:
                    52:94:08:ce:a5:cd:c7:a2:50:56:1c:aa:41:9f:9a:
                    6d:94:71:28:24:27:a1:65:ff:a4:9d:c1:78:09:35:
                    de:1f:bf:27:31:5f:bc:74:b9:54:ee:1f:36:ee:1d:
                    a8:59:f1:ca:75:74:e1:ab:08:3f:86:b7:b7:6d:fd:
                    7c:ab:c5:ce:b9:39:b9:30:d2:24:a8:aa:62:4d:97:
                    53:4e:f6:4f:69:7c:95:11:41:06:2e:1a:6b:a9:5c:
                    ab:f0:9a:65:03:40:8a:3a:41:32:fe:ec:d1:b0:f6:
                    3a:c2:a8:ae:59:f6:6b:5f:41:d5:52:0c:25:aa:58:
                    b1:ca:dc:6d:09:97:4c:ae:a1:71:8d:e9:d7:57:c7:
                    07:db:6c:f5:7a:a0:3d:9a:3b:69:0e:c3:06:0f:20:
                    d7:0e:f0:f9:a4:ce:0c:82:1f:63:e1:29:6a:c3:1e:
                    08:6a:c4:4b:36:e6:2a:5e:ef:26:0c:6b:3e:cc:df:
                    79:71:c3:a5:85:af:a9:82:2e:5f:2f:f1:19:df:66:
                    e0:7f:16:32:d3:b1:b7:0a:a0:64:4f:0e:61:1d:20:
                    c1:63:8b:97:1b:6c:5d:0a:af:40:01:93:1e:6b:6d:
                    f9:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:92:89:02:95:4C:E2:F5:69:CA:0A:EA:78:CF:54:DD:E4:F8:79:D9
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/XZKJApVM4vVpygrqeM9U3eT4edk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.105.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         83:38:fd:3a:55:c0:86:cc:68:aa:46:2c:55:92:81:47:8f:83:
         41:2b:09:d4:1c:67:1f:0a:59:44:c8:57:4a:f2:67:3c:93:59:
         04:7e:c0:9a:81:84:ec:b9:9c:a0:6d:07:16:0f:2a:6e:f0:d1:
         81:fd:dc:a1:5b:6c:94:cb:fd:f7:7f:2b:b5:5f:80:fa:87:98:
         cf:30:fc:a6:60:7f:ba:f2:70:39:3c:e7:0e:a9:81:44:9c:4d:
         83:d1:42:48:c2:c6:f2:24:e2:4b:b4:75:b7:a1:d3:06:2d:57:
         ab:50:4f:60:fc:86:59:16:bf:65:a4:58:a8:87:5e:83:74:9d:
         26:61:17:26:dc:a5:76:70:d4:27:6d:33:d6:38:78:24:62:07:
         cc:ef:ca:91:b5:0c:a0:a2:0d:3d:a0:9b:b0:3d:8b:6d:23:5f:
         dd:97:b8:ed:4a:78:b6:dd:84:12:4b:f5:93:f7:32:b2:32:7d:
         f6:f4:3c:fa:5c:ae:1f:aa:1d:70:9b:62:df:26:67:d5:0a:cc:
         18:21:79:52:f2:12:73:26:e1:cb:a5:26:54:ae:a5:58:a4:30:
         80:af:7d:97:19:5e:ec:c7:06:ec:ca:f6:10:bf:fb:c2:76:8e:
         17:b7:a9:46:ae:4a:17:dc:b9:91:74:f7:29:b2:c1:44:1b:17:
         ca:76:f4:2f
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICD8QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMjA5MTUw
MjQzMzlaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDVEOTI4OTAyOTU0Q0Uy
RjU2OUNBMEFFQTc4Q0Y1NERERTRGODc5RDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC2yANd3NZhGd128A8TcR4E2iDEYPwEvB4oJ+UWhVKUCM6lzcei
UFYcqkGfmm2UcSgkJ6Fl/6SdwXgJNd4fvycxX7x0uVTuHzbuHahZ8cp1dOGrCD+G
t7dt/Xyrxc65Obkw0iSoqmJNl1NO9k9pfJURQQYuGmupXKvwmmUDQIo6QTL+7NGw
9jrCqK5Z9mtfQdVSDCWqWLHK3G0Jl0yuoXGN6ddXxwfbbPV6oD2aO2kOwwYPINcO
8PmkzgyCH2PhKWrDHghqxEs25ipe7yYMaz7M33lxw6WFr6mCLl8v8RnfZuB/FjLT
sbcKoGRPDmEdIMFji5cbbF0Kr0ABkx5rbfl7AgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUXZKJApVM4vVpygrqeM9U3eT4edkwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvWFpLSkFwVk00dlZweWdycWVNOVUz
ZVQ0ZWRrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBnBpQDAN
BgkqhkiG9w0BAQsFAAOCAQEAgzj9OlXAhsxoqkYsVZKBR4+DQSsJ1BxnHwpZRMhX
SvJnPJNZBH7AmoGE7LmcoG0HFg8qbvDRgf3coVtslMv9938rtV+A+oeYzzD8pmB/
uvJwOTznDqmBRJxNg9FCSMLG8iTiS7R1t6HTBi1Xq1BPYPyGWRa/ZaRYqIdeg3Sd
JmEXJtyldnDUJ20z1jh4JGIHzO/KkbUMoKINPaCbsD2LbSNf3Ze47Up4tt2EEkv1
k/cysjJ99vQ8+lyuH6odcJti3yZn1QrMGCF5UvIScybhy6UmVK6lWKQwgK99lxle
7McG7Mr2EL/7wnaOF7epRq5KF9y5kXT3KbLBRBsXynb0Lw==
-----END CERTIFICATE-----