Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/_7Cj1DA0T4d4U2X-mbb6gjaocQY.roa
File:                     _7Cj1DA0T4d4U2X-mbb6gjaocQY.roa (raw, json)
Hash identifier:          kbCdv3PZP4tcuuH2+erWmjmfZXtTszSyuc4ZiG3YrSs=
Subject key identifier:   FF:B0:A3:D4:30:34:4F:87:78:53:65:FE:99:B6:FA:82:36:A8:71:06
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/_7Cj1DA0T4d4U2X-mbb6gjaocQY.roa
Signing time:             Thu 15 Sep 2022 02:43:12 +0000
ROA not before:           Thu 15 Sep 2022 02:43:12 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     4780
IP address blocks:        112.104.0.0/16 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4036 (0xfc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 15 02:43:12 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=FFB0A3D430344F87785365FE99B6FA8236A87106
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:08:25:8b:cc:a4:17:17:78:e2:38:f4:7a:d1:
                    c1:d7:71:a8:1d:de:c8:9a:6a:d9:94:19:9a:c2:8e:
                    80:ed:d3:07:9c:57:a5:3c:24:e2:fb:10:98:be:fd:
                    4c:23:c9:f8:0c:9f:ea:a5:1d:90:dd:29:0d:05:2a:
                    f3:ec:14:3c:13:89:97:af:8d:98:f1:47:dc:10:e2:
                    9c:f5:e5:ee:72:f8:fe:62:13:9d:56:9e:cb:42:97:
                    ff:7f:f0:54:d0:17:d6:b5:3d:b0:6c:12:40:55:49:
                    23:ba:5c:10:33:8e:d5:c8:97:ed:cb:6e:85:17:c2:
                    ca:e7:2e:3c:3f:c8:54:a3:a5:82:bd:f4:4d:1c:56:
                    d1:8d:7b:b2:52:5d:df:3d:cd:5d:f0:ea:00:79:85:
                    c6:74:31:0a:db:49:37:1e:f5:86:47:9f:17:65:71:
                    7f:87:32:eb:b1:48:04:77:f5:b7:f7:fb:48:52:73:
                    b8:e4:8c:28:0e:72:0a:21:db:1e:ff:75:e8:38:94:
                    f9:4e:82:05:c8:22:f3:6f:de:1d:6a:c4:cc:7b:df:
                    52:cc:fe:09:b2:7e:98:a1:51:53:1b:60:6f:37:79:
                    f5:d8:cf:c9:c1:6f:63:69:95:f8:84:5c:07:29:e2:
                    17:ba:24:0f:18:af:a2:2b:47:59:d1:d8:7d:e2:b4:
                    b3:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:B0:A3:D4:30:34:4F:87:78:53:65:FE:99:B6:FA:82:36:A8:71:06
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/_7Cj1DA0T4d4U2X-mbb6gjaocQY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.104.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         99:f6:26:8e:2c:1f:20:78:a3:ad:dd:e8:5c:a5:97:ba:fc:43:
         6a:cd:83:4b:d0:b8:49:1d:2c:12:bf:24:7c:84:3e:25:a2:ea:
         ed:d7:43:07:e4:ea:82:87:99:b8:90:ae:66:3b:be:bb:94:14:
         82:16:55:37:69:4d:a4:24:fe:55:a4:8e:80:12:d4:36:36:a7:
         e3:12:55:ac:e1:19:e0:03:c1:5d:df:f4:a7:83:6e:d9:7e:a4:
         f7:88:ab:22:db:5c:52:f7:19:26:c8:5f:2a:d2:a0:fe:f1:fd:
         f7:e1:75:ff:61:0e:bd:ca:8c:cb:66:3b:a2:9f:03:90:87:ba:
         21:27:f4:18:4e:71:cd:7c:05:f3:93:9c:a4:c7:a3:a0:93:28:
         21:f6:d3:23:1d:bd:8b:35:86:82:b5:84:2f:69:fa:9b:2d:6d:
         b3:a0:32:3d:b4:86:31:55:c5:fc:3f:44:4b:9f:ff:58:81:33:
         e7:9a:33:2e:86:44:66:6b:b0:d2:54:de:3d:60:0c:a9:42:1f:
         51:45:f9:da:33:e0:bc:42:c3:4b:b4:26:fd:c2:e0:2d:09:ce:
         fc:46:de:9c:72:8b:8b:7e:39:dc:a6:2c:3f:af:75:c3:29:fb:
         c0:7f:51:8f:f1:0e:ad:f5:46:cd:e0:9d:54:d4:a8:05:7b:c8:
         08:56:19:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----