Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/XmdlmAOaIJNJGM9y8F51Qhbhmvs.roa
File:                     XmdlmAOaIJNJGM9y8F51Qhbhmvs.roa (raw, json)
Hash identifier:          /1zmkVIuBwGCS1l7ekwghTrLvl5IqTZ50ef9lvbzxhM=
Subject key identifier:   5E:67:65:98:03:9A:20:93:49:18:CF:72:F0:5E:75:42:16:E1:9A:FB
Certificate issuer:       /CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Certificate serial:       0C6F
Authority key identifier: B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/XmdlmAOaIJNJGM9y8F51Qhbhmvs.roa
Signing time:             Thu 15 Sep 2022 02:43:37 +0000
ROA not before:           Thu 15 Sep 2022 02:43:37 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     9919
IP address blocks:        192.72.8.0/21 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3183 (0xc6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
        Validity
            Not Before: Sep 15 02:43:37 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=5E676598039A20934918CF72F05E754216E19AFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:fc:ca:69:fc:41:6c:e0:7c:3d:d1:14:04:66:
                    ad:80:0b:3e:69:44:63:5e:f6:76:84:9a:b9:26:03:
                    26:ac:00:11:04:c1:12:da:44:7b:12:19:bc:76:57:
                    f7:a3:cc:9b:62:f1:30:3d:b6:5f:6e:76:01:58:e7:
                    15:d2:d7:da:42:c8:06:6c:08:1c:7e:73:f2:2d:46:
                    b6:5f:8f:30:d6:a5:86:19:89:92:f0:48:8f:8f:24:
                    45:3c:2a:2d:d5:35:d5:20:49:cd:0f:31:f3:f9:65:
                    99:4b:56:54:6b:7e:ae:2a:c2:e0:48:82:28:d2:f9:
                    36:30:1e:09:58:49:7f:ee:47:67:ae:b5:99:94:0c:
                    f0:4d:03:e8:a5:8d:fa:be:15:32:e8:b7:b3:ad:45:
                    07:a3:86:e3:a9:2a:13:55:c9:27:54:3c:ea:90:d4:
                    54:5f:63:dd:fd:7a:e2:9f:fe:b5:0c:5b:5d:31:3b:
                    da:3b:3c:ab:ce:5d:b1:52:c6:d2:19:c2:ee:aa:2a:
                    a7:06:bf:27:3e:ca:f3:18:fe:73:60:15:61:4e:25:
                    83:0e:5d:37:08:c2:29:4e:05:6a:20:d2:d7:46:ac:
                    74:f5:45:ec:e6:c3:d4:fa:1f:13:2e:b7:40:57:36:
                    38:91:1c:07:80:3a:4d:d7:52:50:e5:15:4b:28:7f:
                    2a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:67:65:98:03:9A:20:93:49:18:CF:72:F0:5E:75:42:16:E1:9A:FB
            X509v3 Authority Key Identifier:
                keyid:B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/XmdlmAOaIJNJGM9y8F51Qhbhmvs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.72.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         60:f0:d4:19:8d:b9:56:28:04:f1:68:6b:36:87:60:bd:d4:53:
         98:a5:b3:5f:0a:41:18:a1:2b:ae:5d:55:85:70:04:60:06:ac:
         3c:e6:44:f2:24:ae:59:89:f5:86:61:d0:98:b5:20:2f:cc:9a:
         85:4a:ed:8f:47:a8:07:62:fd:86:27:38:6f:af:f7:44:ad:c5:
         2b:5a:9a:c1:d2:5f:a8:45:7e:43:e6:61:8f:3f:ea:a0:46:e8:
         9f:fa:e1:db:d3:e0:c9:0c:f1:a8:dc:6a:3a:fa:a7:99:58:2e:
         8e:07:b9:d8:ef:c9:1b:ef:00:14:ce:12:16:35:30:5e:22:a8:
         51:7a:2c:55:cb:a5:34:38:38:fa:b6:a8:61:90:49:38:ee:b8:
         03:96:7e:ef:1d:fd:4c:b1:25:02:1d:23:2f:b2:76:0d:a0:77:
         25:05:ab:2e:96:11:0c:54:47:86:fa:59:30:98:9d:92:18:9f:
         0a:76:e4:5f:48:bf:eb:1b:96:47:7f:02:ed:33:cb:70:d1:dd:
         a6:92:c7:17:53:31:58:a9:47:b4:f5:f3:37:e9:43:f5:b4:b4:
         29:f1:f9:b6:3e:cc:ff:e5:96:01:64:a8:a0:14:55:00:de:09:
         b1:b0:ca:44:cb:c1:d4:2f:45:b0:12:d3:e0:67:e1:40:f5:bf:
         9b:a2:92:e0
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICDG8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjRB
NjVBMEVCODY2OTIxOUM0MTg1NDQyRDQ5RkM5RDZGODI1QjY2NTAeFw0yMjA5MTUw
MjQzMzdaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDVFNjc2NTk4MDM5QTIw
OTM0OTE4Q0Y3MkYwNUU3NTQyMTZFMTlBRkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDB/Mpp/EFs4Hw90RQEZq2ACz5pRGNe9naEmrkmAyasABEEwRLa
RHsSGbx2V/ejzJti8TA9tl9udgFY5xXS19pCyAZsCBx+c/ItRrZfjzDWpYYZiZLw
SI+PJEU8Ki3VNdUgSc0PMfP5ZZlLVlRrfq4qwuBIgijS+TYwHglYSX/uR2eutZmU
DPBNA+iljfq+FTLot7OtRQejhuOpKhNVySdUPOqQ1FRfY939euKf/rUMW10xO9o7
PKvOXbFSxtIZwu6qKqcGvyc+yvMY/nNgFWFOJYMOXTcIwilOBWog0tdGrHT1Rezm
w9T6HxMut0BXNjiRHAeAOk3XUlDlFUsofyqFAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUXmdlmAOaIJNJGM9y8F51QhbhmvswHwYDVR0jBBgwFoAUtKZaDrhmkhnEGFRC
1J/J1vgltmUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy90
S1phRHJobWtobkVHRlJDMUpfSjF2Z2x0bVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L3RLWmFEcmhta2huRUdGUkMxSl9KMXZnbHRtVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvWG1kbG1BT2FJSk5KR005eThGNTFR
aGJobXZzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA8BICDAN
BgkqhkiG9w0BAQsFAAOCAQEAYPDUGY25VigE8WhrNodgvdRTmKWzXwpBGKErrl1V
hXAEYAasPOZE8iSuWYn1hmHQmLUgL8yahUrtj0eoB2L9hic4b6/3RK3FK1qawdJf
qEV+Q+Zhjz/qoEbon/rh29PgyQzxqNxqOvqnmVgujge52O/JG+8AFM4SFjUwXiKo
UXosVculNDg4+raoYZBJOO64A5Z+7x39TLElAh0jL7J2DaB3JQWrLpYRDFRHhvpZ
MJidkhifCnbkX0i/6xuWR38C7TPLcNHdppLHF1MxWKlHtPXzN+lD9bS0KfH5tj7M
/+WWAWSooBRVAN4JsbDKRMvB1C9FsBLT4GfhQPW/m6KS4A==
-----END CERTIFICATE-----