Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/Y9YRX0YvBBWdtP8GxWpExLaYIQM.roa
File:                     Y9YRX0YvBBWdtP8GxWpExLaYIQM.roa (raw, json)
Hash identifier:          X+bjUIqiJa9WJbPtY6dxy4rIbCnoKQcq2rSah9AZfS4=
Subject key identifier:   63:D6:11:5F:46:2F:04:15:9D:B4:FF:06:C5:6A:44:C4:B6:98:21:03
Certificate issuer:       /CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Certificate serial:       0C6F
Authority key identifier: B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Y9YRX0YvBBWdtP8GxWpExLaYIQM.roa
Signing time:             Thu 15 Sep 2022 02:43:52 +0000
ROA not before:           Thu 15 Sep 2022 02:43:52 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     9919
IP address blocks:        192.72.4.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3183 (0xc6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
        Validity
            Not Before: Sep 15 02:43:52 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=63D6115F462F04159DB4FF06C56A44C4B6982103
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:26:9f:7b:6f:5a:5f:ef:95:1f:f5:7d:84:1c:
                    43:08:eb:39:b3:8e:a2:9a:3c:52:a3:db:c4:6c:c3:
                    34:9a:90:82:62:da:86:90:dc:25:38:76:79:7e:4d:
                    39:2f:c1:48:40:c3:c6:70:02:c4:0d:6b:5f:25:45:
                    87:93:86:b2:17:ac:d6:06:ed:0d:38:14:74:18:d0:
                    f4:ce:96:cd:ef:73:fd:91:07:0a:b3:37:e5:32:3b:
                    e1:16:4b:b0:f9:9f:2d:45:9d:33:89:ac:fd:90:70:
                    7c:1b:2e:3b:ca:23:23:17:d1:10:2d:df:fa:c8:9e:
                    85:e0:df:79:f5:bc:e0:54:67:c3:63:b0:34:b0:5a:
                    f5:81:ba:0c:f1:6c:a7:b9:bd:89:86:5e:11:33:22:
                    11:9e:09:02:44:4c:17:8b:e7:de:46:34:a9:7b:42:
                    46:68:41:38:56:99:e3:5d:e8:97:67:0e:5a:4a:7e:
                    4e:57:bf:cc:07:a6:dc:e8:31:7b:e3:87:cf:38:bc:
                    33:d1:05:b3:fa:23:6f:82:f1:ef:f5:c9:fb:e3:59:
                    91:10:21:2d:10:4c:02:94:0b:48:3e:cb:d8:3e:22:
                    f8:c5:89:a2:65:12:98:84:05:0c:8d:05:80:23:94:
                    c6:85:63:24:b0:f3:4d:4b:3b:ab:ff:d8:d9:07:65:
                    50:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:D6:11:5F:46:2F:04:15:9D:B4:FF:06:C5:6A:44:C4:B6:98:21:03
            X509v3 Authority Key Identifier:
                keyid:B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Y9YRX0YvBBWdtP8GxWpExLaYIQM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.72.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:bf:1d:fa:ab:7d:ac:c5:a4:12:07:c7:92:19:66:62:31:68:
         f9:2e:83:b7:06:36:91:bb:a7:d6:7c:7d:a3:30:2e:5a:b6:8d:
         23:b9:4d:6f:af:92:85:4d:e3:7d:73:8b:cb:1e:df:33:47:ff:
         d6:56:f1:db:86:d8:d0:22:63:c7:90:09:69:65:1b:56:d8:70:
         04:35:b6:53:c5:7c:bb:fd:47:a5:3e:8b:e6:e0:8f:2f:e1:a6:
         f7:18:5c:f8:0d:2c:03:86:2a:32:21:81:65:48:88:3f:21:97:
         cd:7c:84:e3:eb:02:83:96:74:67:db:90:b1:d3:8c:31:ba:d7:
         55:0f:55:85:3e:ae:8d:ac:78:ce:89:d6:28:79:e9:79:5a:0b:
         f6:35:4c:bd:31:b1:22:b9:32:84:50:88:64:95:88:e5:aa:36:
         d5:3f:20:d5:54:c2:d4:66:ff:52:89:2a:6f:d6:92:54:0b:7b:
         11:03:e0:08:6c:00:43:da:df:9f:96:68:45:d2:99:73:50:85:
         e6:53:55:eb:87:7a:5f:a4:72:a3:b5:6a:14:ee:d3:d0:5d:4b:
         db:d3:33:b7:03:6b:c8:c1:5b:07:7d:6c:e3:29:bd:5c:5d:f8:
         28:02:2f:fa:15:9a:0c:58:9f:df:28:d5:67:2d:e9:b0:7f:8c:
         db:da:d1:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----