Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/kltmTRk6QdEPxQPErkgpdxGPNfk.roa
File:                     kltmTRk6QdEPxQPErkgpdxGPNfk.roa (raw, json)
Hash identifier:          OwFtmafHtLxwZc9TvxOzBpYLcO9U2PKH8T3SRq645JU=
Subject key identifier:   92:5B:66:4D:19:3A:41:D1:0F:C5:03:C4:AE:48:29:77:11:8F:35:F9
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/kltmTRk6QdEPxQPErkgpdxGPNfk.roa
Signing time:             Thu 15 Sep 2022 02:43:00 +0000
ROA not before:           Thu 15 Sep 2022 02:43:00 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     4780
IP address blocks:        2001:cd8::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4036 (0xfc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 15 02:43:00 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=925B664D193A41D10FC503C4AE482977118F35F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:34:b3:d9:a2:b7:25:51:12:f4:ca:7b:4f:21:
                    2a:ed:17:9b:26:f1:9e:e1:ce:60:9d:37:00:7e:bc:
                    b4:fa:4a:7b:37:26:bd:63:e5:4b:e8:b4:ff:64:6b:
                    54:1f:92:ce:fc:e8:63:87:7e:6a:ec:1e:6f:e8:92:
                    4f:19:b5:73:b2:16:94:96:1b:f2:24:eb:ff:8f:1a:
                    15:a9:00:5f:15:a3:d3:da:52:42:d2:89:d1:8b:c8:
                    79:54:57:0c:4f:29:55:3a:e1:46:26:c8:2b:b8:3b:
                    9a:d1:b7:01:c2:1b:73:73:13:00:67:dd:fd:e1:d7:
                    f4:e3:3b:fd:74:51:93:08:b1:23:20:eb:bf:75:42:
                    be:56:81:fc:9f:1f:67:73:45:47:b4:e8:b9:83:bb:
                    c7:2e:5b:54:b2:6d:7d:44:94:23:e6:ce:0e:b3:16:
                    6a:83:a0:da:3c:6b:3d:45:78:f7:dc:1c:f1:38:5e:
                    85:41:c9:10:ea:f1:11:ec:43:c1:da:1b:f9:0d:19:
                    37:3d:a0:11:47:86:db:bb:79:db:c1:5f:58:b0:95:
                    a8:f7:63:6c:2a:2a:69:70:69:6f:d9:20:6d:2d:aa:
                    5e:6e:0c:8c:28:2d:80:90:bd:6f:d6:b3:53:b3:9e:
                    8a:cd:02:e6:5c:b4:46:a7:de:ed:76:c0:9a:36:d0:
                    01:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:5B:66:4D:19:3A:41:D1:0F:C5:03:C4:AE:48:29:77:11:8F:35:F9
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/kltmTRk6QdEPxQPErkgpdxGPNfk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:cd8::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:5f:a9:1e:1c:0a:14:21:1c:5a:f5:58:99:a1:34:7e:df:1f:
         0d:80:b4:b2:99:81:f8:84:aa:ef:b5:ba:35:a4:cd:9b:e9:de:
         2b:7e:03:0e:19:47:26:2a:23:89:6f:5a:21:eb:dd:e8:fd:5f:
         0d:8f:4e:78:c5:5d:e7:4b:51:07:e5:7f:38:e8:86:b1:be:52:
         ea:cc:38:58:24:af:2f:a2:82:fb:6e:2c:e1:38:92:a3:b9:4f:
         23:be:9d:e7:73:48:38:ae:1b:85:0a:c9:e5:70:7c:54:fd:eb:
         43:a3:47:0a:96:69:db:9a:09:81:e3:fd:90:e7:d6:05:f7:8c:
         0c:ac:cf:90:27:7b:83:ba:00:78:55:52:a8:4a:4d:32:8b:9c:
         0e:3d:ed:1a:8e:cf:0b:99:88:f2:15:9e:4e:9c:21:c3:68:d9:
         f4:ac:40:b1:26:c6:24:06:1b:9b:cb:48:7f:25:52:7f:17:1c:
         fb:78:58:a0:0a:89:1a:d2:64:ed:e3:c4:e1:91:a8:c7:8e:cb:
         05:ca:1f:f3:f8:19:02:56:d3:0f:80:f2:d7:e2:10:57:50:bf:
         01:0b:5b:83:62:9b:66:26:d2:60:d0:94:e1:41:c2:79:c2:f4:
         82:aa:6c:e1:c7:a8:65:6e:a6:14:bc:d6:8a:4e:b6:c3:5c:de:
         77:6c:ec:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----