Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/h-oLlMHFR_udS8goPf0gqQvMY1w.roa
File:                     h-oLlMHFR_udS8goPf0gqQvMY1w.roa (raw, json)
Hash identifier:          VIadtyE22AqHD0RvYNsUSll5IctdPJcsiUHz1MWB0ts=
Subject key identifier:   87:EA:0B:94:C1:C5:47:FB:9D:4B:C8:28:3D:FD:20:A9:0B:CC:63:5C
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/h-oLlMHFR_udS8goPf0gqQvMY1w.roa
Signing time:             Thu 15 Sep 2022 02:43:37 +0000
ROA not before:           Thu 15 Sep 2022 02:43:37 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     18049
IP address blocks:        123.205.0.0/17 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4036 (0xfc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 15 02:43:37 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=87EA0B94C1C547FB9D4BC8283DFD20A90BCC635C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:19:c7:d9:9e:0c:37:a8:ef:b3:85:b2:78:31:
                    1c:e3:61:ba:0c:79:03:f0:67:98:ac:c9:c7:71:eb:
                    20:4a:2e:61:98:7f:fe:25:6c:68:dd:09:02:88:75:
                    82:5f:bc:b9:c8:b8:45:1e:19:8d:1c:d2:03:0d:21:
                    9b:5f:c5:ef:33:fb:00:66:a9:aa:9f:ec:9b:45:ca:
                    2e:6e:57:40:55:59:56:fa:de:72:76:40:a8:10:f1:
                    a9:b8:2b:f0:e9:4c:a2:21:5a:ac:65:29:c1:2f:29:
                    c1:78:32:30:e3:a3:05:52:9b:3e:1a:ec:ed:df:37:
                    a8:7a:0f:f3:78:39:a3:f3:d8:dc:f5:97:17:0b:b5:
                    13:2b:d7:1b:b0:70:5b:0a:5d:7f:c8:79:94:44:11:
                    a9:02:9c:f8:47:cd:d4:1b:28:bc:2a:54:00:12:2c:
                    4e:78:35:87:02:1f:4d:7c:3e:8e:d5:36:be:18:c7:
                    86:30:33:ed:96:20:c8:12:e8:91:c9:6f:e8:c7:fe:
                    33:82:94:c2:2f:05:22:6a:e0:bb:e0:fc:f3:ba:9f:
                    a4:68:7d:70:2d:d4:ef:63:6d:f4:12:4a:51:17:1b:
                    a4:58:b8:35:a9:be:d9:c3:01:3f:48:69:f8:b1:01:
                    1b:fd:45:9a:96:e1:bd:d1:18:27:58:59:6c:bc:a3:
                    a8:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:EA:0B:94:C1:C5:47:FB:9D:4B:C8:28:3D:FD:20:A9:0B:CC:63:5C
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/h-oLlMHFR_udS8goPf0gqQvMY1w.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.205.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         94:b6:9a:b8:41:f2:06:8c:bd:36:5a:d3:79:2f:64:f1:e6:8c:
         30:f0:47:69:b7:b6:88:80:df:4b:4d:4a:0e:29:f1:7c:a8:6f:
         a1:a5:d7:d7:0f:18:d6:a8:5b:49:27:cc:07:6f:a8:53:da:08:
         77:8e:6b:68:a6:65:1a:96:93:a8:6f:4d:46:01:b6:ef:d8:90:
         6e:1c:6d:f8:9e:f7:44:2f:5b:67:39:a3:c9:17:4b:d7:42:15:
         d4:f2:55:7e:6b:bb:b9:7b:b9:28:0c:d0:de:d1:88:97:50:2b:
         20:a3:c0:31:31:9a:20:f9:31:67:0d:d9:42:fa:c9:0f:80:0e:
         5a:13:a2:ae:c1:69:70:79:8b:52:f8:8e:d2:75:12:0e:08:33:
         6c:b3:f6:b1:90:5e:03:c8:da:76:94:27:89:08:dd:ff:d9:32:
         a5:d6:53:cd:15:82:2c:c0:cc:b8:9f:26:69:78:20:36:1e:b5:
         28:cf:ea:89:68:c8:fe:04:07:45:22:5b:58:ea:cd:82:08:9b:
         92:51:26:8a:10:63:62:61:b9:cb:54:4c:d8:3d:2f:28:16:3b:
         77:68:18:3a:10:36:d9:26:8f:3f:46:43:91:9d:9f:63:72:c9:
         51:a3:b9:4e:cb:a1:be:da:61:e4:ee:b0:34:ab:c2:6f:38:16:
         e2:a8:30:7f
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICD8QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMjA5MTUw
MjQzMzdaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDg3RUEwQjk0QzFDNTQ3
RkI5RDRCQzgyODNERkQyMEE5MEJDQzYzNUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCxGcfZngw3qO+zhbJ4MRzjYboMeQPwZ5isycdx6yBKLmGYf/4l
bGjdCQKIdYJfvLnIuEUeGY0c0gMNIZtfxe8z+wBmqaqf7JtFyi5uV0BVWVb63nJ2
QKgQ8am4K/DpTKIhWqxlKcEvKcF4MjDjowVSmz4a7O3fN6h6D/N4OaPz2Nz1lxcL
tRMr1xuwcFsKXX/IeZREEakCnPhHzdQbKLwqVAASLE54NYcCH018Po7VNr4Yx4Yw
M+2WIMgS6JHJb+jH/jOClMIvBSJq4Lvg/PO6n6RofXAt1O9jbfQSSlEXG6RYuDWp
vtnDAT9IafixARv9RZqW4b3RGCdYWWy8o6ifAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUh+oLlMHFR/udS8goPf0gqQvMY1wwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvaC1vTGxNSEZSX3VkUzhnb1BmMGdx
UXZNWTF3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEB3vNADAN
BgkqhkiG9w0BAQsFAAOCAQEAlLaauEHyBoy9NlrTeS9k8eaMMPBHabe2iIDfS01K
DinxfKhvoaXX1w8Y1qhbSSfMB2+oU9oId45raKZlGpaTqG9NRgG279iQbhxt+J73
RC9bZzmjyRdL10IV1PJVfmu7uXu5KAzQ3tGIl1ArIKPAMTGaIPkxZw3ZQvrJD4AO
WhOirsFpcHmLUviO0nUSDggzbLP2sZBeA8jadpQniQjd/9kypdZTzRWCLMDMuJ8m
aXggNh61KM/qiWjI/gQHRSJbWOrNggibklEmihBjYmG5y1RM2D0vKBY7d2gYOhA2
2SaPP0ZDkZ2fY3LJUaO5Tsuhvtph5O6wNKvCbzgW4qgwfw==
-----END CERTIFICATE-----