Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/l-4JKENpWEKY8c0ytDXJPslyA2Y.roa
File:                     l-4JKENpWEKY8c0ytDXJPslyA2Y.roa (raw, json)
Hash identifier:          JfHf/utjvfzdlVGZxiwoYu8CRjyl6Y2i7Ykv55djAL4=
Subject key identifier:   97:EE:09:28:43:69:58:42:98:F1:CD:32:B4:35:C9:3E:C9:72:03:66
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/l-4JKENpWEKY8c0ytDXJPslyA2Y.roa
Signing time:             Thu 15 Sep 2022 02:43:55 +0000
ROA not before:           Thu 15 Sep 2022 02:43:55 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     9919
IP address blocks:        106.105.48.0/20 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4036 (0xfc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 15 02:43:55 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=97EE09284369584298F1CD32B435C93EC9720366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f0:96:61:0f:76:fe:1b:50:3c:6f:6c:5b:b5:
                    39:97:ad:f5:6a:e5:6c:d4:90:32:b6:7c:d4:55:fc:
                    2b:9c:a3:4e:bb:ed:2c:ba:ce:bd:ac:77:4a:8a:ab:
                    3d:94:27:6e:2b:5e:de:c2:61:64:2a:f5:94:a4:a2:
                    b3:a0:11:08:3f:5a:9b:32:65:67:4b:8d:59:96:db:
                    ec:98:d4:90:29:10:89:0c:5e:f3:6a:f8:bc:7f:d1:
                    61:8e:77:ee:fd:2b:26:93:5e:4e:68:a5:a1:db:4f:
                    7e:09:0b:69:4e:6a:0e:9c:cd:ac:5a:46:59:e0:96:
                    d3:49:f6:58:ae:7f:d9:98:dd:ef:d9:26:d2:f6:e7:
                    7e:b0:15:17:85:b5:40:f2:df:11:68:05:bd:b0:65:
                    13:40:b1:e8:26:14:22:e5:a0:d0:c6:36:44:e7:71:
                    a7:75:46:48:ac:fd:c7:9a:49:bd:18:e4:3c:bb:25:
                    7b:58:08:cc:0f:97:06:be:d5:a1:fc:98:5d:2d:e1:
                    94:0e:7f:3f:81:f1:17:44:bd:a8:6d:f8:a6:4a:f6:
                    3b:f4:f2:c9:91:6a:28:85:1e:6d:91:bf:ea:56:0c:
                    92:e6:2f:a8:0b:55:fe:d8:5c:1f:0d:ab:a7:81:5a:
                    3d:f6:41:91:24:a6:e0:eb:60:6b:b3:70:ef:e3:32:
                    78:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:EE:09:28:43:69:58:42:98:F1:CD:32:B4:35:C9:3E:C9:72:03:66
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/l-4JKENpWEKY8c0ytDXJPslyA2Y.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.105.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         58:42:5c:02:8a:2e:69:97:a9:bf:ab:f7:b5:29:6e:e4:bc:b5:
         45:de:61:4f:fd:99:95:5f:dc:bc:45:ce:dd:e3:76:66:39:73:
         6f:ea:01:78:01:90:23:cd:48:57:34:4e:bb:ac:40:21:91:e8:
         88:85:ae:d0:ff:6b:55:85:14:5a:20:4a:c8:70:41:86:93:92:
         51:65:aa:52:88:f4:87:36:99:f1:c7:2e:9f:c5:c4:46:e1:b2:
         0f:8c:f1:a5:31:4a:a3:75:d9:2a:9f:b6:1e:c2:20:30:05:13:
         f2:de:23:55:99:26:62:b7:95:e4:21:81:6d:ad:d4:2d:9f:79:
         03:6f:2e:66:67:ae:f8:15:5b:60:c7:11:f5:f2:cd:19:98:26:
         bb:99:88:09:9b:88:f3:c9:3d:7b:16:6d:b8:ce:ad:4d:a1:e7:
         24:2b:d2:3b:85:e2:bf:48:20:7f:10:3a:86:1c:57:1a:c3:74:
         5e:c5:7c:b7:0b:09:39:b7:d7:e5:1d:23:43:89:f3:f2:0b:7d:
         cf:c7:b4:f4:b7:75:52:c2:7b:6e:09:5f:54:a0:6b:c4:71:92:
         b0:a8:eb:a9:07:50:2d:29:76:0f:87:ed:2a:47:6c:47:30:83:
         6a:bf:41:bd:3b:9a:1d:34:a8:8e:34:47:03:aa:b9:a1:41:2d:
         d9:0e:dd:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----