Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/c2E_TfgFIz-ii8Yn1xzQYYXrMcQ.roa
File:                     c2E_TfgFIz-ii8Yn1xzQYYXrMcQ.roa (raw, json)
Hash identifier:          u/odVp1N+bd8U669z+MbtwXoVQ3hLAXFbxi8BjPekxY=
Subject key identifier:   73:61:3F:4D:F8:05:23:3F:A2:8B:C6:27:D7:1C:D0:61:85:EB:31:C4
Certificate issuer:       /CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Certificate serial:       0C6F
Authority key identifier: B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/c2E_TfgFIz-ii8Yn1xzQYYXrMcQ.roa
Signing time:             Thu 15 Sep 2022 02:43:17 +0000
ROA not before:           Thu 15 Sep 2022 02:43:17 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     9919
IP address blocks:        192.72.128.0/18 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3183 (0xc6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
        Validity
            Not Before: Sep 15 02:43:17 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=73613F4DF805233FA28BC627D71CD06185EB31C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:53:f1:93:79:96:ce:79:f4:4c:2d:3b:b4:5d:
                    ac:e6:1f:42:50:f0:a1:7e:36:72:23:29:f4:fc:f8:
                    a3:63:f4:a7:b8:4c:ee:a1:c0:8a:39:08:83:69:11:
                    3a:e3:ee:8e:77:3b:79:d5:86:16:72:4d:ba:c5:71:
                    ca:80:83:ee:7b:08:1f:d4:e7:38:a4:f0:a4:54:d7:
                    9e:16:7b:a8:b4:c2:d1:71:0f:b8:67:95:3d:0f:a0:
                    c5:76:ed:5b:89:3d:50:3b:f9:19:b6:63:10:42:96:
                    31:82:e0:57:ec:72:57:98:d8:0d:0b:87:11:a7:cd:
                    e5:6e:d8:7f:6c:e8:8a:76:08:7a:21:af:d1:97:d5:
                    e2:ca:60:7b:86:1d:ef:48:73:8b:ef:6a:67:2f:f9:
                    16:7b:aa:77:81:2c:2c:39:25:c9:4c:57:90:31:a2:
                    29:2b:d6:9e:86:55:02:0d:17:72:6d:c2:a2:1f:b4:
                    e7:a6:64:d8:74:ee:75:59:27:1a:b7:a4:c8:33:77:
                    13:dc:44:d9:9a:91:25:4d:df:04:63:22:64:a8:84:
                    3b:ef:79:48:d7:27:a6:27:1a:72:0a:34:a9:ba:9a:
                    47:54:82:b9:a1:0b:db:03:b4:be:73:35:3a:e7:db:
                    38:75:56:aa:3d:1c:e6:87:c1:01:70:73:c7:32:f8:
                    0c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:61:3F:4D:F8:05:23:3F:A2:8B:C6:27:D7:1C:D0:61:85:EB:31:C4
            X509v3 Authority Key Identifier:
                keyid:B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/c2E_TfgFIz-ii8Yn1xzQYYXrMcQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.72.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         a2:04:48:96:83:bc:72:72:20:9a:55:9a:1d:e9:f0:8f:21:f0:
         bb:bf:08:a4:5b:be:b1:40:e5:e8:b3:ad:0f:d5:f5:a9:7e:56:
         c4:3a:2b:1c:be:35:a8:df:50:b9:ef:43:38:af:2a:cf:9d:9b:
         0a:8f:da:01:83:bc:30:b6:cf:0b:47:98:43:98:40:73:61:27:
         43:5a:0f:1f:fb:aa:62:56:b1:2c:48:f0:87:b7:e2:80:cc:3f:
         71:16:81:17:b4:0b:58:58:88:de:cf:b1:80:73:f5:b7:87:1d:
         4c:3f:b4:66:e0:f6:03:7c:e2:95:dc:c4:64:21:cf:3e:44:63:
         cd:60:33:34:f7:3d:41:4b:cf:2a:6e:ae:86:dd:79:a6:21:89:
         b0:b3:97:e5:b5:bf:50:21:18:34:05:e8:b6:cf:b7:91:84:5f:
         91:df:b6:8c:35:32:31:97:e0:95:25:36:20:b0:fc:ea:d6:e8:
         04:48:c4:e6:d0:5e:70:65:df:a2:45:75:6e:1a:95:66:ba:6c:
         c1:69:c9:c2:a7:12:32:7b:7e:3a:5b:df:1b:3e:c6:9f:32:fe:
         12:25:16:95:c9:57:be:43:57:17:87:0a:56:ef:e0:98:8d:6e:
         48:bd:7d:79:41:8c:9a:c9:02:28:28:4d:8d:05:fb:81:a3:08:
         20:6f:67:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----