Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/dTNjgUT1SMCy-K5Fz7eipsu21iA.roa
File:                     dTNjgUT1SMCy-K5Fz7eipsu21iA.roa (raw, json)
Hash identifier:          7B5392Op+g6967s6GTfGJrx0r4V6tFcyc9alG5DUIrU=
Subject key identifier:   75:33:63:81:44:F5:48:C0:B2:F8:AE:45:CF:B7:A2:A6:CB:B6:D6:20
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/dTNjgUT1SMCy-K5Fz7eipsu21iA.roa
Signing time:             Thu 15 Sep 2022 02:42:57 +0000
ROA not before:           Thu 15 Sep 2022 02:42:57 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     4780
IP address blocks:        106.104.0.0/14 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4036 (0xfc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 15 02:42:57 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=7533638144F548C0B2F8AE45CFB7A2A6CBB6D620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:cf:7e:46:f5:d9:f8:09:8a:5e:42:59:61:2d:
                    d8:e6:66:75:79:eb:1f:16:9b:be:15:2c:2b:59:28:
                    79:6f:73:69:e3:73:9a:27:07:2a:3f:f7:ec:2f:5f:
                    7d:e3:80:b8:32:b6:6a:69:e7:fb:1e:23:4d:35:7e:
                    7e:40:39:62:08:d2:31:11:16:bc:28:73:a5:0c:f6:
                    2b:b0:f2:5f:32:eb:0b:df:1d:8f:5b:10:a7:4a:ea:
                    cd:b4:45:90:41:a0:b3:de:f4:98:ad:7b:bf:14:42:
                    36:58:8e:ec:1c:ef:06:8a:af:8b:b0:9b:44:c2:59:
                    d4:0c:07:fb:d6:55:bd:68:89:8a:c3:c3:26:e4:db:
                    68:23:1b:27:99:3c:5c:f2:70:0d:a8:27:e4:ac:75:
                    59:2b:cb:7f:ab:36:94:7c:53:2d:bc:5e:8a:fe:3a:
                    f4:82:44:d7:e3:d3:f8:b1:5a:32:87:be:e2:46:23:
                    92:7e:4d:58:93:cf:ba:42:e5:64:f0:8a:07:4b:8d:
                    b1:9e:a6:da:14:2d:d5:e4:f7:45:c5:e0:90:2f:40:
                    06:de:a4:51:c4:7a:fb:9e:16:f2:5c:e3:34:01:a0:
                    26:4a:40:ef:f8:d5:89:9a:9e:cd:d9:ea:01:9d:84:
                    f9:38:1f:44:5f:50:87:ee:a2:1f:6b:f6:4c:6d:3a:
                    be:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:33:63:81:44:F5:48:C0:B2:F8:AE:45:CF:B7:A2:A6:CB:B6:D6:20
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/dTNjgUT1SMCy-K5Fz7eipsu21iA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.104.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         24:e3:96:7e:1c:fe:09:f4:7d:db:5b:78:f1:57:09:3a:bc:02:
         d1:9d:89:35:cc:5e:e0:76:93:a1:af:ad:92:48:e9:f0:b3:c0:
         35:38:42:8a:a7:be:3f:e2:a8:51:b3:31:65:b0:6d:08:50:24:
         e3:d4:4b:7c:47:00:49:de:e2:0b:d5:be:40:80:09:39:f8:fc:
         f7:ed:4e:2b:cc:52:02:9c:14:00:c0:83:38:af:a2:b5:48:7b:
         9e:8b:70:77:20:f2:a0:ea:3f:9d:e1:fb:92:f0:ce:96:4b:c8:
         85:e1:4a:0e:09:13:45:ab:64:d9:7c:e5:07:b6:69:c5:75:b4:
         62:26:dd:02:8c:45:cd:a1:6b:44:94:07:82:0b:86:47:9d:d0:
         d4:00:91:ea:72:b8:87:37:89:b7:d0:4e:83:85:f3:cf:30:dc:
         b9:be:18:a3:ea:75:14:28:d7:13:e3:8c:ea:82:f6:dc:71:9f:
         04:f5:77:61:27:07:c4:94:2e:3a:89:77:df:41:d0:c4:03:93:
         43:47:0f:a2:fd:c1:42:c3:23:70:96:37:36:16:24:da:63:1a:
         67:72:ae:32:86:e1:61:da:b2:9c:8a:2b:91:5b:90:b7:34:bf:
         e8:a6:03:d3:d7:52:a6:ed:ad:2d:1d:fc:58:cb:2d:f8:49:ee:
         30:43:73:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----