Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/g4NFwRYKQEG2lEepIXaE87jPpcs.roa
File:                     g4NFwRYKQEG2lEepIXaE87jPpcs.roa (raw, json)
Hash identifier:          rwihytWEkhIgNK567npJ8uylNvnkUPn5OcxAJu0W4AQ=
Subject key identifier:   83:83:45:C1:16:0A:40:41:B6:94:47:A9:21:76:84:F3:B8:CF:A5:CB
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/g4NFwRYKQEG2lEepIXaE87jPpcs.roa
Signing time:             Thu 15 Sep 2022 02:42:56 +0000
ROA not before:           Thu 15 Sep 2022 02:42:56 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     9919
IP address blocks:        122.147.166.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4036 (0xfc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 15 02:42:56 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=838345C1160A4041B69447A9217684F3B8CFA5CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:73:da:d0:15:91:d7:e9:91:53:51:50:40:7d:
                    b2:26:c1:98:66:cb:35:96:d6:46:d0:da:eb:55:10:
                    99:9b:6c:57:e5:65:fe:da:9d:71:85:65:bf:6e:77:
                    94:f6:a8:07:5b:5d:74:10:67:88:04:aa:f2:8b:8b:
                    31:c1:a9:a4:4b:4e:a2:54:6f:03:6e:ae:b2:fe:80:
                    e6:55:fe:37:e0:e2:6a:59:9a:d2:4b:22:2f:ae:8e:
                    8a:74:dc:1d:e8:8f:13:88:89:69:27:68:e3:d6:ee:
                    aa:e9:da:7c:3b:c3:ca:f3:01:b1:90:8d:bf:21:da:
                    57:d9:7a:06:e2:ad:6c:65:07:51:12:88:26:18:a5:
                    56:1d:36:60:5f:0d:45:d5:2a:11:b5:18:68:0f:5c:
                    92:dc:c9:93:41:0b:18:a6:3f:c7:fb:9e:b2:d3:22:
                    cc:11:da:94:a7:01:43:f4:dc:88:65:0e:36:40:77:
                    27:88:0c:dc:7a:b3:de:54:aa:e4:09:31:6c:8f:df:
                    26:e3:05:fd:2b:33:cc:34:fe:3e:5b:bf:c0:2a:b1:
                    4e:ab:00:cb:04:0d:74:26:0b:9b:8e:b5:3d:c5:e2:
                    cf:ca:50:48:70:be:4f:c4:3b:2b:d1:60:a5:af:48:
                    4f:9f:62:cb:a7:b3:b3:3a:b7:0d:6d:47:54:12:0d:
                    7b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:83:45:C1:16:0A:40:41:B6:94:47:A9:21:76:84:F3:B8:CF:A5:CB
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/g4NFwRYKQEG2lEepIXaE87jPpcs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.147.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5d:26:16:fe:74:81:b7:28:5f:7e:1a:7a:dc:aa:e2:4d:92:45:
         a9:f2:dd:28:9c:08:7f:b3:3e:88:a9:2e:23:75:86:48:8a:eb:
         b7:07:3f:f1:fb:18:cb:29:81:90:38:56:ed:2f:47:dd:d6:af:
         9c:be:1c:a9:30:37:20:4b:94:db:de:f8:e7:83:d2:1e:ac:d6:
         fc:f6:ae:67:63:06:ae:0e:97:3b:1f:c2:d7:28:fb:58:a3:b2:
         fa:4c:fd:b0:2a:c3:b2:6d:38:33:23:4d:f5:80:81:0d:dd:62:
         d3:7d:bd:33:59:4d:e4:07:26:4f:69:15:bb:9d:ff:47:73:84:
         a1:f5:ca:a4:56:6f:70:6e:43:fc:0b:0a:66:2d:22:18:e7:49:
         4d:29:7c:d6:cc:be:42:88:cf:13:cc:9a:c5:53:ea:7d:e6:51:
         db:09:e8:32:d4:45:7e:43:91:36:ce:9e:7c:c6:54:f0:e6:53:
         18:a6:ce:f3:1a:19:f7:f5:a6:69:eb:6c:be:7f:f5:08:9a:81:
         92:5f:0b:32:bf:03:79:71:19:5d:08:69:3f:2b:34:5b:f3:c6:
         e0:29:1b:7f:46:1e:e5:e5:88:44:be:18:19:d7:81:56:86:89:
         56:9c:19:1a:59:ee:d3:3f:45:2a:2b:89:0f:3e:e4:b1:04:22:
         40:1b:7d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----