Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/kuXDSF2Pa0XcUb0sykf2Gcqbitw.roa
File:                     kuXDSF2Pa0XcUb0sykf2Gcqbitw.roa (raw, json)
Hash identifier:          /GAzENyKHZ8NSBVv4r/18CqigcyJZNOlr252vgxvFkA=
Subject key identifier:   92:E5:C3:48:5D:8F:6B:45:DC:51:BD:2C:CA:47:F6:19:CA:9B:8A:DC
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/kuXDSF2Pa0XcUb0sykf2Gcqbitw.roa
Signing time:             Thu 15 Sep 2022 02:43:09 +0000
ROA not before:           Thu 15 Sep 2022 02:43:09 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     4780
IP address blocks:        210.64.0.0/16 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4036 (0xfc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 15 02:43:09 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=92E5C3485D8F6B45DC51BD2CCA47F619CA9B8ADC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:2e:96:3f:ab:02:30:a1:91:a9:3f:fd:38:60:
                    3c:cd:04:21:e6:8d:ab:44:a5:96:47:cc:c3:fa:8e:
                    e5:db:95:78:6b:df:e0:53:cc:8f:b8:ff:23:c0:2c:
                    b5:a0:b7:ae:9b:87:aa:1f:7c:22:21:d0:21:fc:46:
                    f6:75:15:b9:ff:52:c6:39:08:ac:55:bf:35:73:a4:
                    d7:b5:0e:d6:e0:2b:f7:b3:74:ec:05:e5:35:5d:56:
                    19:bd:8d:97:30:38:60:5e:5d:eb:2a:71:fb:3d:70:
                    a3:2f:4c:85:eb:ea:91:99:c0:0a:ba:86:56:2f:dd:
                    0c:a5:8b:ae:bd:7c:06:7b:c8:0c:6d:9f:9e:76:49:
                    78:03:bc:af:ba:eb:29:c1:d8:42:8f:0c:27:c9:fa:
                    06:3b:71:f6:2f:80:09:40:be:61:60:92:47:a9:6c:
                    96:a3:f9:97:29:6f:e4:02:31:3c:26:b1:d0:ab:f8:
                    99:fd:84:64:0e:69:aa:ba:10:7a:e2:11:39:a2:cc:
                    67:60:6a:f7:4e:d5:cb:ff:04:6d:df:37:4f:5b:6c:
                    87:03:2e:3a:be:1b:ce:0e:9f:a4:21:4b:92:99:63:
                    53:4c:e1:b2:c9:67:f1:39:33:2b:01:37:b7:f3:5c:
                    02:02:f2:88:cf:b9:cd:a9:8a:8b:18:3d:59:59:1e:
                    53:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:E5:C3:48:5D:8F:6B:45:DC:51:BD:2C:CA:47:F6:19:CA:9B:8A:DC
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/kuXDSF2Pa0XcUb0sykf2Gcqbitw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.64.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2a:36:e8:aa:61:c8:e7:f7:d0:23:d3:af:43:fc:ae:1b:d5:10:
         58:bb:f7:57:23:3b:d6:d3:5e:13:28:bc:d6:29:6e:3a:b2:41:
         b9:e8:5b:3b:f2:0e:f5:03:f6:fd:9b:ab:92:d7:7f:8f:bc:ba:
         8f:ee:54:a1:52:f1:b9:02:80:ad:32:a2:1e:4a:43:0c:d1:ee:
         68:17:e8:28:0a:bb:29:63:03:e8:8f:fd:07:ae:7d:8c:c8:50:
         7e:bd:a9:4c:24:fa:ae:06:e2:a2:30:60:f6:12:3c:b3:f5:3a:
         b5:68:e6:6a:d5:37:bb:a2:86:4d:f5:01:74:41:6c:89:8d:e1:
         fe:d2:4d:2a:6b:af:a2:84:88:93:c2:dd:c9:f6:02:f0:83:ed:
         f2:15:57:6c:89:eb:d9:be:cc:55:21:63:b7:59:b6:4e:f2:d5:
         f1:66:60:49:7b:a9:69:45:89:85:07:75:1b:00:20:ab:3d:4e:
         0f:b2:cb:93:dd:32:c4:67:22:7c:d3:27:64:75:42:59:5c:92:
         39:d0:11:e0:d3:b9:a0:5c:66:c5:aa:65:e4:57:cf:ea:ad:64:
         99:68:bb:f0:02:70:4e:29:dc:09:15:0b:b8:4d:0e:c5:64:a5:
         96:2d:0b:d4:f2:4c:aa:c3:54:67:f3:3b:c0:f1:57:a0:65:64:
         5a:91:a0:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----