Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/dYRmXeuw9_WeEHmOgM6xL4io8zA.roa
File:                     dYRmXeuw9_WeEHmOgM6xL4io8zA.roa (raw, json)
Hash identifier:          Z8zbp6S87E6QBtqU8Onr82tOJKUWsehCkZHqKPIyObU=
Subject key identifier:   75:84:66:5D:EB:B0:F7:F5:9E:10:79:8E:80:CE:B1:2F:88:A8:F3:30
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/dYRmXeuw9_WeEHmOgM6xL4io8zA.roa
Signing time:             Thu 15 Sep 2022 02:42:50 +0000
ROA not before:           Thu 15 Sep 2022 02:42:50 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     9919
IP address blocks:        211.78.160.0/19 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4036 (0xfc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 15 02:42:50 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=7584665DEBB0F7F59E10798E80CEB12F88A8F330
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7f:1f:fd:ab:fd:82:91:02:01:a6:ad:d0:60:
                    85:6e:75:8a:dc:bc:7d:53:fd:00:2a:34:e3:a8:59:
                    c3:0a:04:8e:38:b7:15:f4:36:4a:35:c2:db:04:61:
                    0a:35:aa:fc:0b:0d:37:ff:44:45:ad:5d:e0:3c:d7:
                    16:a4:51:1e:25:01:b1:51:2b:19:95:19:bf:3c:9a:
                    f2:cd:42:f0:3e:82:a2:23:95:2e:de:d9:bd:e8:91:
                    91:89:25:18:08:30:e7:63:d3:26:c0:49:d2:9d:1d:
                    5f:88:62:68:e5:f5:8a:2b:d7:15:1b:99:74:49:99:
                    b1:05:71:0b:31:e2:3f:12:90:1c:d7:42:3b:d2:ad:
                    1b:e8:aa:5f:10:ff:f0:9e:89:17:01:fb:a7:a6:7e:
                    67:58:f1:de:23:74:95:a4:9f:a3:55:bf:47:50:12:
                    8a:94:e3:98:0d:9e:a4:20:51:e4:60:53:68:94:0d:
                    92:3d:44:d1:00:7c:55:3b:74:93:82:26:f5:c7:7e:
                    f1:b6:21:f3:bb:28:c3:17:1f:d1:b5:ef:d2:72:b2:
                    0f:c2:0c:7e:13:67:52:7b:4d:98:02:f8:ca:fb:d9:
                    4d:17:b5:fa:09:f2:be:a5:40:d4:0f:94:fd:c6:d2:
                    ed:e4:5d:2e:20:7f:fa:21:8b:14:f2:f0:dd:71:08:
                    82:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:84:66:5D:EB:B0:F7:F5:9E:10:79:8E:80:CE:B1:2F:88:A8:F3:30
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/dYRmXeuw9_WeEHmOgM6xL4io8zA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.78.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         80:08:6b:28:28:09:6b:38:5d:41:c8:71:43:53:f7:13:07:ec:
         fb:3a:7c:4b:91:8a:6a:f9:07:11:66:2b:08:67:5a:17:16:ba:
         ff:41:4e:f0:3a:a9:f4:c9:b4:08:30:77:f1:cf:94:15:e3:1d:
         f4:94:4a:08:78:c7:e9:eb:30:e1:98:ba:f5:b5:09:40:cf:f8:
         31:1a:9a:0f:a1:cb:67:2e:ae:28:a3:31:84:1f:29:7d:0d:1a:
         dc:75:83:73:4d:82:8a:99:9a:e7:21:65:00:5a:ba:4c:f9:d3:
         f3:0f:70:de:d5:59:a0:96:2c:7d:4d:74:34:86:72:e1:62:5c:
         c6:1f:bc:6d:73:de:30:13:c5:a3:d2:4f:d0:fa:20:e9:10:27:
         32:92:29:f5:b1:8c:89:7f:50:c4:54:78:bb:b5:fb:4b:b1:80:
         6d:cc:e3:7b:72:44:64:26:63:8c:fe:16:8d:cf:79:8d:13:26:
         d3:f3:11:a3:1a:b4:20:ab:85:8e:c4:1b:e1:f5:87:52:8a:aa:
         2a:db:88:82:48:7c:95:58:1d:d7:19:f6:94:49:f6:46:e5:39:
         8a:c2:0d:0a:0d:de:c0:57:0e:46:d4:0d:18:d4:9d:79:48:fc:
         9f:ef:d5:5a:2c:cc:6f:f9:ac:07:3c:f0:a5:c8:88:c8:7a:8f:
         65:90:fb:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----