Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/rb1mnPmMz6HF2KMQsXsvwGgO5H0.roa
File:                     rb1mnPmMz6HF2KMQsXsvwGgO5H0.roa (raw, json)
Hash identifier:          9TDELBcbqcvGqnR3Y/PqXuAtRbAys1Mcp9y3EXU0kNE=
Subject key identifier:   AD:BD:66:9C:F9:8C:CF:A1:C5:D8:A3:10:B1:7B:2F:C0:68:0E:E4:7D
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/rb1mnPmMz6HF2KMQsXsvwGgO5H0.roa
Signing time:             Thu 15 Sep 2022 02:44:01 +0000
ROA not before:           Thu 15 Sep 2022 02:44:01 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     4780
IP address blocks:        175.182.0.0/16 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4036 (0xfc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 15 02:44:01 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=ADBD669CF98CCFA1C5D8A310B17B2FC0680EE47D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:25:b6:93:eb:dd:17:8b:96:36:89:d0:56:00:
                    6e:23:59:bc:1b:8b:6f:88:d3:87:9e:c0:28:17:60:
                    66:a3:02:e0:95:02:0b:dd:0f:53:89:ca:4f:f1:e5:
                    d8:7c:e1:5a:fb:e5:5b:78:e9:8a:9c:3a:8d:52:b7:
                    da:09:0f:3b:42:91:60:4f:39:12:69:71:7a:36:9f:
                    01:f8:8b:c0:b6:66:96:81:57:b1:e1:f5:46:90:1b:
                    93:a7:b5:f8:a6:9a:4f:34:e5:92:a7:99:3a:ae:84:
                    b8:ee:48:76:4f:12:62:2e:ea:57:a3:5f:5d:ec:b1:
                    68:d0:e8:14:f7:aa:7b:4d:0c:26:46:d0:a8:29:67:
                    b5:64:fe:f3:25:f5:54:b4:b4:25:84:fc:38:94:6f:
                    2e:dd:8e:72:86:6e:8a:85:3b:a5:52:5b:98:1f:e5:
                    95:fb:f6:8d:ba:bc:60:12:df:c7:85:7f:27:59:1b:
                    19:ec:c3:89:aa:6d:8e:b7:aa:5f:7c:52:19:ca:e3:
                    b3:ec:56:f5:77:b0:23:61:0a:c0:69:13:cf:cc:51:
                    a1:22:45:79:0b:91:68:ad:f3:88:1f:14:07:58:94:
                    07:12:10:9e:d7:82:ea:ff:27:af:b9:11:65:2c:a0:
                    a4:8a:a6:f1:7a:72:8d:93:af:da:83:b3:12:98:e8:
                    97:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:BD:66:9C:F9:8C:CF:A1:C5:D8:A3:10:B1:7B:2F:C0:68:0E:E4:7D
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/rb1mnPmMz6HF2KMQsXsvwGgO5H0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.182.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2e:6f:1b:9a:7d:c5:4e:d7:86:06:5f:c5:f8:20:6a:21:27:8a:
         03:07:46:67:fc:95:45:61:7e:e2:0b:b7:0e:2e:02:64:c5:00:
         c0:e2:16:b7:ca:d3:71:f1:c4:7c:df:7c:9f:d9:14:35:ba:c8:
         8c:22:be:22:8b:67:80:23:d4:f2:7c:8a:29:64:70:9b:7b:b0:
         fb:3e:59:77:5b:a6:a9:ef:d0:05:1b:3a:16:f1:a5:ef:5f:ef:
         56:28:c6:06:b4:a2:27:d9:69:37:3d:05:3f:8a:64:57:7b:ea:
         c5:4d:78:64:2e:f5:40:90:1d:67:f2:8f:e1:a6:64:40:f8:09:
         d6:07:88:3d:3c:ea:83:09:77:e1:88:f9:9f:1e:d9:98:72:6f:
         06:b2:4e:d0:4f:b5:2b:c1:4e:8a:29:0a:9f:90:69:3b:b0:31:
         a0:65:34:db:2d:58:c8:7d:1e:17:dc:6a:5f:dd:99:d9:c9:10:
         f0:39:5d:f4:8b:a4:be:28:df:e8:49:d6:2d:9b:21:16:a7:b4:
         3a:fd:1b:d9:73:77:df:14:45:69:54:01:b8:ef:49:83:40:ae:
         b6:bf:01:ef:58:da:42:b3:f3:e6:ed:78:d7:e2:f9:b5:3c:fa:
         45:3a:da:3f:9e:67:c8:ee:37:24:3f:cb:dc:36:3f:1f:c5:7c:
         8d:d2:82:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----