Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/_hf6oNwHGQ10tEJcSn7X9O398_M.roa
File:                     _hf6oNwHGQ10tEJcSn7X9O398_M.roa (raw, json)
Hash identifier:          SLfVmbon/5fp0LrKkFP3wZdEYwlMD1z5STetNEKOzyU=
Subject key identifier:   FE:17:FA:A0:DC:07:19:0D:74:B4:42:5C:4A:7E:D7:F4:ED:FD:F3:F3
Certificate issuer:       /CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Certificate serial:       0C6F
Authority key identifier: B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/_hf6oNwHGQ10tEJcSn7X9O398_M.roa
Signing time:             Thu 15 Sep 2022 02:43:15 +0000
ROA not before:           Thu 15 Sep 2022 02:43:15 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     4780
IP address blocks:        192.72.8.0/21 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3183 (0xc6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
        Validity
            Not Before: Sep 15 02:43:15 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=FE17FAA0DC07190D74B4425C4A7ED7F4EDFDF3F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:06:c5:84:a9:21:c4:29:e7:e6:64:94:a6:5c:
                    0b:60:0e:74:67:18:63:bd:df:46:94:77:01:10:eb:
                    df:9e:63:c3:15:fb:75:35:30:f7:2a:bf:5c:24:a9:
                    ec:e9:af:14:40:ee:c6:33:08:d3:90:e5:0c:69:6f:
                    88:7c:05:50:c9:9b:0a:73:86:41:04:5e:cb:1c:eb:
                    d1:84:3f:5b:ed:d2:46:21:ba:37:3e:24:ea:31:61:
                    cb:ac:f6:29:3d:f6:b8:60:fe:25:e9:a1:e1:19:31:
                    71:fd:7d:ab:4e:b4:e4:9e:19:19:11:96:09:c9:b2:
                    8f:f3:ff:e8:73:0e:7c:cd:a5:7a:82:ef:08:c7:23:
                    cf:19:d7:80:a3:50:f5:7c:7e:93:59:2e:7b:33:f2:
                    cb:c0:38:07:da:6c:62:2c:ae:02:88:45:d1:b0:80:
                    fb:a6:2e:9b:85:8d:b3:82:4c:e6:01:32:b9:bd:88:
                    55:23:a6:42:ba:da:0d:f6:4c:3f:67:71:ac:ee:f4:
                    0b:df:77:64:51:10:76:b3:1a:f3:8b:d4:ff:3a:4f:
                    d5:26:60:b5:68:9e:ad:84:6a:8c:20:76:ef:f1:ed:
                    c5:31:eb:ea:26:1e:b2:4a:ae:8d:ab:53:b1:66:66:
                    66:30:9c:98:31:85:46:7b:81:44:a6:48:b9:91:c5:
                    59:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:17:FA:A0:DC:07:19:0D:74:B4:42:5C:4A:7E:D7:F4:ED:FD:F3:F3
            X509v3 Authority Key Identifier:
                keyid:B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/_hf6oNwHGQ10tEJcSn7X9O398_M.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.72.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         26:c2:a8:af:91:ba:9b:fa:c7:85:ff:8e:e6:1f:f8:1a:4a:d1:
         ed:ae:75:3f:e3:44:54:53:cc:af:24:0f:13:80:1f:a6:9e:fe:
         c8:ad:4c:c5:61:e2:73:6b:d3:cb:04:ea:97:b5:37:da:d9:18:
         89:37:d9:7f:39:ca:a2:8b:44:2d:74:03:0a:0f:3b:bf:0b:14:
         16:82:41:63:02:91:9c:e8:8d:6e:ed:3f:04:12:fc:49:3a:9a:
         c8:de:f6:d9:f5:5a:7f:59:35:26:00:9f:af:a1:cf:40:b3:6b:
         54:6e:c4:8c:df:4b:97:41:19:d8:77:6e:67:ca:ff:97:51:4c:
         90:30:cd:69:70:b9:68:64:23:0a:09:4d:53:29:56:02:a0:18:
         06:cd:64:56:9f:7b:b7:2d:d9:8d:55:04:07:a9:fc:db:ef:68:
         e6:1f:51:44:b8:d0:78:a4:b5:da:0e:38:f8:9a:42:3d:99:9b:
         19:00:06:93:65:42:2f:67:e8:9b:1f:c7:44:51:6c:c9:c6:7b:
         68:79:8d:bd:eb:1a:77:2f:dd:4d:b9:f4:55:47:98:12:fa:38:
         aa:08:e9:06:90:35:b3:57:f2:5f:1a:6c:92:1e:35:96:c1:b1:
         5a:1a:c2:b1:6e:e5:c0:43:98:0f:f4:c0:0c:94:44:b9:0a:4e:
         13:e3:4d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----