Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/oxl4SWTP8yf1O5Ph2neolkXqB9w.roa
File:                     oxl4SWTP8yf1O5Ph2neolkXqB9w.roa (raw, json)
Hash identifier:          T6NFws2hPyuIPC4m06tOiUaPMizgYoGLeN7/zV50oxU=
Subject key identifier:   A3:19:78:49:64:CF:F3:27:F5:3B:93:E1:DA:77:A8:96:45:EA:07:DC
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/oxl4SWTP8yf1O5Ph2neolkXqB9w.roa
Signing time:             Thu 15 Sep 2022 02:43:21 +0000
ROA not before:           Thu 15 Sep 2022 02:43:21 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     9919
IP address blocks:        122.147.64.0/18 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4036 (0xfc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 15 02:43:21 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=A319784964CFF327F53B93E1DA77A89645EA07DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3c:d3:56:3d:1b:08:a9:40:1a:bc:a6:4e:2c:
                    36:7b:5b:ac:e9:47:57:c4:82:bd:0c:3a:7a:dc:d2:
                    7e:b5:0f:7d:43:96:83:9d:cf:51:0f:64:0d:6a:07:
                    85:91:dd:9c:68:1c:42:4e:4e:2a:df:f3:d2:c8:94:
                    cf:f0:47:1f:5d:7d:b6:34:f6:e7:6d:af:95:57:31:
                    87:7f:f7:85:71:16:11:bf:ea:7e:a0:23:86:d1:8c:
                    6e:16:5b:99:0c:ab:0a:32:bc:9b:78:7a:9a:f0:c8:
                    b3:0a:59:b6:3b:97:3e:f8:db:8e:da:23:20:65:5d:
                    50:82:af:e0:d0:d6:07:0b:60:37:92:98:ff:11:1d:
                    d0:ce:47:da:74:2d:ab:7f:97:af:c8:f8:6d:4b:5b:
                    1c:6e:f7:7d:06:a4:c3:8b:54:c0:26:b9:ab:a7:07:
                    8a:f3:97:0c:a4:59:12:09:3c:f6:d3:9c:6d:68:76:
                    64:27:5f:3c:d0:b2:31:2e:f1:51:b1:a0:ed:d6:e7:
                    11:85:ef:e3:16:66:9c:16:a0:00:19:b8:4e:44:75:
                    18:9f:8c:e3:c4:ad:9e:b7:3f:79:cc:24:f3:d3:f3:
                    f9:d5:f3:ec:9c:e5:39:9e:9b:84:74:d6:0c:77:97:
                    00:9b:e3:7a:4b:99:58:02:60:f2:36:b5:9f:0b:c3:
                    58:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:19:78:49:64:CF:F3:27:F5:3B:93:E1:DA:77:A8:96:45:EA:07:DC
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/oxl4SWTP8yf1O5Ph2neolkXqB9w.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.147.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         98:68:8e:41:5c:3d:58:91:64:28:8c:67:51:85:16:9b:d2:b0:
         fb:a1:02:91:fd:d3:7b:c5:d7:6f:79:e0:bf:4f:67:42:e9:7b:
         8f:99:5a:14:52:be:82:bb:7a:a5:87:a4:e2:30:ad:eb:97:ce:
         92:f5:b7:3d:a2:fb:69:6b:55:3e:e1:d9:b8:b7:9f:38:e8:7b:
         a8:56:3e:18:dd:b3:3e:e0:83:62:c1:cb:3e:95:0b:52:28:f0:
         ce:97:7e:0c:d6:04:3c:65:9d:db:7f:d1:98:56:05:60:6c:0b:
         17:e5:91:ca:b9:09:f9:79:91:91:13:13:9b:8d:9c:1f:f5:58:
         b4:d0:8d:cc:4c:4f:3c:47:a3:4f:a2:45:67:de:6b:9c:7a:93:
         4d:02:a9:a7:b3:53:1b:84:af:fd:f7:a6:2d:76:c0:bf:a4:b7:
         62:94:73:9a:2e:bb:08:3a:4c:45:1f:a1:7e:03:87:c9:87:5c:
         cf:eb:36:f5:59:db:e4:75:2b:5f:48:b1:25:18:09:66:a0:cb:
         3d:4d:0a:50:6a:fe:0e:b1:aa:ea:ed:c5:5d:f7:ae:29:3c:19:
         ba:cd:96:d2:31:99:fa:6b:b9:18:8f:c3:d8:d9:72:2c:89:3f:
         36:0c:8c:19:ef:85:a2:36:3f:7d:82:e3:c2:72:82:0f:d5:63:
         66:ca:53:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----