Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/scYH5zF1fmiJYQwdHa22EwDKqEI.roa
File:                     scYH5zF1fmiJYQwdHa22EwDKqEI.roa (raw, json)
Hash identifier:          RhQmVoMFA1RRZ7/syqmJ18RPMFdoDwdvkrjmqJ2JpTM=
Subject key identifier:   B1:C6:07:E7:31:75:7E:68:89:61:0C:1D:1D:AD:B6:13:00:CA:A8:42
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/scYH5zF1fmiJYQwdHa22EwDKqEI.roa
Signing time:             Thu 15 Sep 2022 02:42:53 +0000
ROA not before:           Thu 15 Sep 2022 02:42:53 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     9919
IP address blocks:        210.243.128.0/17 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4036 (0xfc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 15 02:42:53 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=B1C607E731757E6889610C1D1DADB61300CAA842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:60:2d:58:c4:45:f2:39:25:14:e6:b5:73:5a:
                    bf:e2:69:1e:ae:54:fa:d4:f0:36:c2:c9:9e:08:ed:
                    87:de:f5:db:f3:4a:0b:8f:58:3b:39:fd:c3:16:0f:
                    eb:d7:8d:8c:e7:1e:1f:67:9e:d6:51:9f:1c:90:48:
                    bf:c1:28:43:b3:ae:79:3c:c4:72:98:19:20:8f:ca:
                    03:0f:c9:ab:b1:a5:53:9d:06:c9:69:8d:a9:e7:c0:
                    96:c0:e5:27:94:dd:71:26:66:5f:bb:a0:e5:c8:51:
                    7b:39:62:5e:91:51:11:c9:f1:43:55:14:29:1a:65:
                    c1:e4:2e:3e:f5:90:f6:90:9d:93:f0:54:13:10:e3:
                    80:3f:33:54:90:a6:61:c2:3c:92:15:33:e2:6e:32:
                    5d:62:5f:b7:46:d9:91:79:c5:6a:dc:cf:41:60:1d:
                    ca:ff:f2:62:28:0f:03:08:49:24:80:7d:14:f8:b2:
                    7c:42:56:d1:f5:c4:22:cb:03:fa:bb:ea:77:7b:8a:
                    7d:b9:c9:cc:14:d1:5e:15:d2:14:32:4b:de:0d:78:
                    6b:9d:2c:94:07:11:80:91:4f:17:d0:c0:25:dc:31:
                    6f:d8:a3:18:fd:ce:ca:f3:40:22:8e:83:06:68:2d:
                    84:48:59:70:83:aa:44:53:14:80:48:af:02:d8:94:
                    cd:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:C6:07:E7:31:75:7E:68:89:61:0C:1D:1D:AD:B6:13:00:CA:A8:42
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/scYH5zF1fmiJYQwdHa22EwDKqEI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.243.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         04:26:24:5d:f2:4c:59:9c:b5:32:a0:13:44:13:73:fd:30:7b:
         0a:51:b6:9a:5d:ea:d9:ca:bc:76:7e:fb:34:d9:e7:eb:8a:a0:
         ae:a4:ed:5d:d1:b4:ba:95:3f:62:ac:81:db:33:a5:ac:11:85:
         62:73:bd:6f:12:09:44:49:13:44:4e:c3:c3:2a:b9:c3:d0:06:
         9d:14:fa:4e:03:31:c5:ba:f8:c1:df:54:be:5f:b2:c3:3c:d1:
         92:3d:2b:b8:34:77:f8:6d:3d:92:ee:f4:5e:22:ab:7a:bb:1b:
         56:8c:c0:a6:44:52:22:7c:b1:82:61:3b:3a:d1:c9:09:d1:9a:
         7f:ce:e7:ae:f3:13:7f:a3:e2:9f:44:70:b0:46:cd:3f:87:1f:
         36:0b:7a:5e:fb:96:be:a3:8f:54:c9:12:49:63:75:c8:ab:8c:
         1b:42:b8:20:29:8f:b1:72:f0:7e:7f:82:ea:c0:b0:10:27:d1:
         9a:c5:d9:70:a8:fd:38:84:0e:5f:bf:b6:b1:54:44:fc:d5:d1:
         b1:0e:ec:60:38:b4:37:61:ca:ed:f7:92:fe:56:9d:c9:99:64:
         54:cf:41:23:b8:51:12:5e:0f:fe:bf:f5:89:3d:39:d7:8e:d0:
         95:66:51:bf:ed:dc:f4:30:27:67:de:2a:a1:8d:d9:17:92:f4:
         1b:24:97:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----