Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/m__4lOzy5ceUklq_HpKeydWTGYg.roa
File:                     m__4lOzy5ceUklq_HpKeydWTGYg.roa (raw, json)
Hash identifier:          Qdl0UuPQi3aHFTGtQn271nq5FMo14YDVZCY/V+8CX1M=
Subject key identifier:   9B:FF:F8:94:EC:F2:E5:C7:94:92:5A:BF:1E:92:9E:C9:D5:93:19:88
Certificate issuer:       /CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Certificate serial:       0C6F
Authority key identifier: B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/m__4lOzy5ceUklq_HpKeydWTGYg.roa
Signing time:             Thu 15 Sep 2022 02:43:20 +0000
ROA not before:           Thu 15 Sep 2022 02:43:20 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     4780
IP address blocks:        139.175.0.0/16 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3183 (0xc6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
        Validity
            Not Before: Sep 15 02:43:20 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=9BFFF894ECF2E5C794925ABF1E929EC9D5931988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2c:64:c9:8e:32:70:55:e3:5f:6c:3f:58:63:
                    30:5a:fc:22:24:0e:0e:c6:bb:d1:39:81:2f:71:4e:
                    d4:36:33:c0:39:4c:65:67:89:b8:bd:7e:99:49:32:
                    92:fc:1e:79:50:3c:56:e0:7b:a9:62:8c:d9:18:32:
                    c3:b6:80:22:04:7f:59:c5:7d:35:78:de:0e:12:33:
                    74:55:b8:f0:b5:56:95:28:11:84:91:41:ab:1f:c3:
                    6e:13:3e:c3:07:e5:fa:3e:31:60:93:75:d0:bd:10:
                    f8:2f:42:25:d4:12:92:21:6f:0a:eb:b8:73:3a:2a:
                    df:ae:13:2e:b5:bc:09:5e:ab:ee:6d:5f:f6:a7:cb:
                    68:20:2c:b8:1f:58:67:14:73:64:66:bb:80:78:e5:
                    a1:b1:78:e6:59:de:4b:e5:3a:1a:93:c6:0c:ab:bd:
                    f6:de:6c:f7:ef:ac:a6:1f:4d:4a:91:cd:d9:49:51:
                    14:9d:85:7b:ee:9c:fb:d5:49:6d:59:de:67:c2:4a:
                    e4:c4:8b:47:e5:d4:9e:37:d3:a8:0a:45:58:bc:d5:
                    1a:36:f1:61:54:52:71:f8:7e:4f:14:fd:59:e7:18:
                    9e:ac:bf:02:a8:44:53:3d:b4:84:71:d9:45:ad:de:
                    a7:b2:db:75:b0:43:a5:65:97:8c:e4:c1:78:8e:62:
                    fe:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:FF:F8:94:EC:F2:E5:C7:94:92:5A:BF:1E:92:9E:C9:D5:93:19:88
            X509v3 Authority Key Identifier:
                keyid:B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/m__4lOzy5ceUklq_HpKeydWTGYg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.175.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         1f:02:5a:43:60:1e:72:b1:55:30:80:4e:4d:eb:2e:fd:18:7e:
         41:a7:a9:3b:5b:b7:e5:dc:70:5e:bb:03:ba:c2:2d:b4:93:a7:
         a5:5a:e4:81:b7:13:16:7b:a4:90:d0:f6:03:e5:cc:fc:d1:8e:
         7a:f3:67:1b:a0:06:5c:33:9a:f1:90:70:b5:72:ab:0d:6d:89:
         7f:3e:47:bb:30:54:ed:9f:80:98:f2:92:9b:8e:c4:4d:2d:30:
         65:7f:00:12:a8:e1:d4:59:70:a6:58:b8:84:2d:1d:a5:33:c6:
         f9:c3:f5:02:a8:89:7a:58:f2:b5:4a:17:46:2f:09:0e:12:c2:
         e2:71:a7:21:3d:f6:14:a8:0f:ca:9b:92:1f:ac:50:e9:af:da:
         a8:df:3c:39:3d:1b:cd:53:76:fc:1d:80:d4:92:c1:a4:bf:8a:
         b9:d1:9a:1d:5f:03:a2:1e:b5:b7:f5:cd:6b:a0:2c:df:9b:bf:
         d3:7b:69:e3:8e:9d:74:15:d7:15:15:5c:fa:eb:06:a2:b5:bf:
         68:9c:23:0c:c8:4d:02:f2:36:8b:57:45:8f:f1:d5:ee:c9:ab:
         32:a5:ef:17:98:f2:7d:c0:4e:29:56:e7:02:62:b7:8c:51:be:
         63:10:6e:6b:90:cc:1c:a2:33:36:3a:80:0b:77:0a:9a:af:d6:
         6c:0c:ae:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----