Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/ouOL5FHQzXXn48pgZa9Lnl6NJow.roa
File:                     ouOL5FHQzXXn48pgZa9Lnl6NJow.roa (raw, json)
Hash identifier:          OHkPDLCIs/spmTiXPTq46ZiNgP0UqSnzrW1Qrczv6SM=
Subject key identifier:   A2:E3:8B:E4:51:D0:CD:75:E7:E3:CA:60:65:AF:4B:9E:5E:8D:26:8C
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/ouOL5FHQzXXn48pgZa9Lnl6NJow.roa
Signing time:             Thu 15 Sep 2022 02:43:18 +0000
ROA not before:           Thu 15 Sep 2022 02:43:18 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     131584
IP address blocks:        106.105.180.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4036 (0xfc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 15 02:43:18 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=A2E38BE451D0CD75E7E3CA6065AF4B9E5E8D268C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:08:c3:70:94:c5:eb:7d:7f:ba:de:44:31:fe:
                    ad:18:bb:8d:96:95:e2:1d:5c:66:f4:c0:87:56:39:
                    ed:0f:58:bc:b1:fd:16:1e:df:d7:ba:9b:d3:05:c1:
                    23:01:0e:0e:e7:10:29:45:7e:5c:26:d4:97:f0:df:
                    cc:f0:3f:b8:d9:3b:68:9c:a3:47:94:e2:66:ff:46:
                    4b:5b:fd:74:d2:c5:62:7a:b6:54:7b:fa:ec:ea:33:
                    a5:36:81:12:8f:bf:6b:4d:66:32:85:f7:29:22:3f:
                    7e:bb:3e:58:61:02:52:85:6f:b9:20:a8:42:d0:74:
                    1f:66:11:8a:e6:2b:14:3b:b1:f2:cd:23:bc:8a:1f:
                    b0:f8:79:33:af:a2:71:8a:ea:81:ad:d2:b3:92:ba:
                    17:0f:b7:69:b1:ab:6f:7f:4f:2e:79:41:7d:18:0d:
                    43:2d:74:09:24:5a:fb:5e:f1:6d:fa:e7:2e:f9:be:
                    86:af:9e:54:d5:df:7f:b5:45:39:ab:4c:52:86:26:
                    6a:22:40:7d:e7:bd:a9:38:f6:c8:7d:8e:b4:2f:89:
                    a8:ad:08:08:d0:4e:39:aa:40:37:ac:ee:7a:5a:f5:
                    92:0c:1d:e0:e2:a8:79:07:ec:f3:79:a2:0e:21:b1:
                    31:2d:7e:a7:2f:92:67:0d:f7:7b:39:3c:77:f7:6f:
                    da:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:E3:8B:E4:51:D0:CD:75:E7:E3:CA:60:65:AF:4B:9E:5E:8D:26:8C
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/ouOL5FHQzXXn48pgZa9Lnl6NJow.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.105.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:f4:b7:a1:a1:35:5a:55:7e:ff:2c:94:25:55:d0:74:0d:2e:
         88:7b:5c:fd:7d:29:df:20:31:44:64:61:7b:c2:cf:8c:b3:d1:
         7b:4a:43:20:6a:eb:a2:2c:91:7d:f8:62:09:08:b1:b8:b4:ba:
         35:5a:fc:a5:ac:cf:d2:c3:fe:95:e1:29:5b:e4:e4:1d:85:e6:
         1f:04:c4:e1:2b:ec:f3:bc:21:43:28:e5:97:2b:fc:fa:fc:2e:
         18:65:e8:09:2c:44:a9:16:ee:fb:ef:77:64:34:7d:f7:7a:3d:
         49:31:23:5d:1c:e2:17:f3:8e:f0:4e:63:59:08:3a:83:4f:3d:
         24:09:b2:e3:ba:df:8d:bd:1c:b8:22:06:f1:0e:c1:67:4e:4a:
         53:79:b0:74:a4:1f:13:3a:59:1d:ff:93:34:f5:a2:8c:5d:40:
         27:c1:48:78:a7:c5:81:54:1c:9a:43:35:0c:38:b4:14:2b:44:
         bd:b9:73:3c:91:b0:41:ba:0c:5f:81:66:b3:cc:26:83:6c:03:
         48:3d:a0:24:b1:f9:b9:5b:d8:11:f7:34:d2:b4:a6:30:ea:5d:
         85:15:11:c6:34:97:5b:eb:3a:58:3d:84:ba:cf:80:98:0f:e0:
         28:c8:52:a5:7c:c5:17:63:b6:77:46:1c:83:c9:6d:ca:8f:42:
         8a:2f:46:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----