Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/dnW6Gm8mwBnkNpejpVMW7NDQHU0.roa
File:                     dnW6Gm8mwBnkNpejpVMW7NDQHU0.roa (raw, json)
Hash identifier:          bXJmskwf+7LgstVT+FqblVWL2rTaOxB75QMwn5v1NNo=
Subject key identifier:   76:75:BA:1A:6F:26:C0:19:E4:36:97:A3:A5:53:16:EC:D0:D0:1D:4D
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/dnW6Gm8mwBnkNpejpVMW7NDQHU0.roa
Signing time:             Thu 15 Sep 2022 02:43:29 +0000
ROA not before:           Thu 15 Sep 2022 02:43:29 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     4780
IP address blocks:        122.147.160.0/19 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4036 (0xfc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 15 02:43:29 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=7675BA1A6F26C019E43697A3A55316ECD0D01D4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e1:b9:02:37:69:49:c5:5a:89:87:a5:96:fd:
                    06:40:e5:bd:b1:ed:a1:b5:0e:4f:10:49:83:39:1d:
                    78:e1:12:b1:cb:2e:14:56:69:93:7f:9d:c4:69:1f:
                    f8:b7:54:e8:10:58:77:c7:ef:54:6d:cc:43:67:f5:
                    06:be:80:96:70:f6:d5:df:eb:eb:37:5b:68:de:e8:
                    17:80:a0:cf:d7:74:ca:4d:50:76:c9:d3:9e:88:59:
                    d8:72:8f:17:ad:86:4a:12:c5:f5:fd:dc:79:50:a4:
                    57:c2:73:f2:db:ff:0d:4d:85:88:bf:e9:08:88:6f:
                    60:16:ce:22:70:e6:bc:66:d8:d3:3d:5c:ad:7c:b0:
                    00:45:65:a8:62:89:37:70:b7:be:3d:3c:94:20:6a:
                    0a:e8:89:94:0f:c5:f0:da:d3:8b:d9:2a:b0:a2:63:
                    33:63:2d:e9:b4:73:cb:c6:03:7c:33:55:1d:ea:fb:
                    3c:b7:db:7a:83:61:0f:1c:35:00:8b:f0:5c:c1:7e:
                    cd:d3:61:a6:f9:ef:2b:c0:c9:a2:3e:9b:e3:6c:11:
                    99:73:cf:ea:55:d4:d0:5e:54:26:b1:05:27:25:60:
                    13:c9:b8:83:63:38:45:6f:a0:75:6b:8a:db:64:bc:
                    2e:ec:d9:bf:01:5b:a2:42:6e:36:3a:65:47:4f:82:
                    30:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:75:BA:1A:6F:26:C0:19:E4:36:97:A3:A5:53:16:EC:D0:D0:1D:4D
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/dnW6Gm8mwBnkNpejpVMW7NDQHU0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.147.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         0c:d0:bd:42:31:df:77:da:ab:42:38:b9:ad:5e:ad:f9:48:de:
         01:86:1b:4c:b7:f3:fc:12:da:40:fa:10:be:0a:d7:1b:f9:27:
         fd:5a:d6:9d:0f:82:40:c0:30:91:5d:d3:ef:26:f5:6c:cd:c2:
         26:be:a3:63:e3:7c:7d:da:40:bd:e4:48:42:91:63:a8:8a:82:
         41:68:31:6e:b7:ed:58:32:3e:0e:ac:70:f3:11:61:ac:b8:97:
         23:dd:f9:e3:e5:df:a8:50:eb:3a:19:e4:c2:55:64:0c:6a:7e:
         68:89:ab:dc:53:40:9a:c5:a1:e9:9c:0a:a1:f3:54:51:01:bb:
         42:06:8a:9f:33:8c:70:d1:81:73:83:56:46:0d:78:76:89:fc:
         8f:f9:1d:81:16:df:0a:ab:65:43:48:da:d5:6b:a0:23:36:76:
         70:35:52:a6:e4:5a:da:1e:c4:b7:6b:35:05:14:f7:c6:57:0f:
         4a:1a:d5:04:bf:6c:e4:2a:f9:41:26:ba:49:8f:8e:59:8c:1d:
         80:fb:f7:2f:b4:7d:9e:b2:04:dc:27:c0:51:b3:8f:43:1c:bd:
         54:2a:d0:7d:57:4a:a2:61:18:0f:59:b3:ba:f5:36:ec:19:64:
         3f:9b:a8:28:9b:91:36:32:87:98:35:93:c4:15:cc:4c:1e:a9:
         0b:95:6b:6e
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICD8QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMjA5MTUw
MjQzMjlaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDc2NzVCQTFBNkYyNkMw
MTlFNDM2OTdBM0E1NTMxNkVDRDBEMDFENEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDG4bkCN2lJxVqJh6WW/QZA5b2x7aG1Dk8QSYM5HXjhErHLLhRW
aZN/ncRpH/i3VOgQWHfH71RtzENn9Qa+gJZw9tXf6+s3W2je6BeAoM/XdMpNUHbJ
056IWdhyjxethkoSxfX93HlQpFfCc/Lb/w1NhYi/6QiIb2AWziJw5rxm2NM9XK18
sABFZahiiTdwt749PJQgagroiZQPxfDa04vZKrCiYzNjLem0c8vGA3wzVR3q+zy3
23qDYQ8cNQCL8FzBfs3TYab57yvAyaI+m+NsEZlzz+pV1NBeVCaxBSclYBPJuINj
OEVvoHVrittkvC7s2b8BW6JCbjY6ZUdPgjC7AgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUdnW6Gm8mwBnkNpejpVMW7NDQHU0wHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvZG5XNkdtOG13Qm5rTnBlanBWTVc3
TkRRSFUwLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBXqToDAN
BgkqhkiG9w0BAQsFAAOCAQEADNC9QjHfd9qrQji5rV6t+UjeAYYbTLfz/BLaQPoQ
vgrXG/kn/VrWnQ+CQMAwkV3T7yb1bM3CJr6jY+N8fdpAveRIQpFjqIqCQWgxbrft
WDI+Dqxw8xFhrLiXI9354+XfqFDrOhnkwlVkDGp+aImr3FNAmsWh6ZwKofNUUQG7
QgaKnzOMcNGBc4NWRg14don8j/kdgRbfCqtlQ0ja1WugIzZ2cDVSpuRa2h7Et2s1
BRT3xlcPShrVBL9s5Cr5QSa6SY+OWYwdgPv3L7R9nrIE3CfAUbOPQxy9VCrQfVdK
omEYD1mzuvU27BlkP5uoKJuRNjKHmDWTxBXMTB6pC5Vrbg==
-----END CERTIFICATE-----