Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/tCav_lWKAgwXiVdWXw1ZuR4joQo.roa
File:                     tCav_lWKAgwXiVdWXw1ZuR4joQo.roa (raw, json)
Hash identifier:          x7zJ3bnsx0gC6gBw4NfXJRPgs4i8IyzopDLFDoXKKT4=
Subject key identifier:   B4:26:AF:FE:55:8A:02:0C:17:89:57:56:5F:0D:59:B9:1E:23:A1:0A
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tCav_lWKAgwXiVdWXw1ZuR4joQo.roa
Signing time:             Thu 15 Sep 2022 02:43:27 +0000
ROA not before:           Thu 15 Sep 2022 02:43:27 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     9919
IP address blocks:        203.190.16.0/21 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4036 (0xfc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 15 02:43:27 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=B426AFFE558A020C178957565F0D59B91E23A10A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:46:4d:39:00:6b:79:1e:01:39:52:c4:be:f5:
                    bf:87:88:a7:00:f9:6b:8c:ef:6b:ff:8f:d5:b8:64:
                    3a:de:2b:cd:ee:7a:b9:7c:f9:8b:fd:3e:ea:23:50:
                    2f:c0:41:98:e8:f9:c3:6f:d9:4d:80:4a:53:14:09:
                    8c:4e:62:45:2d:87:97:e0:05:50:11:f1:ec:86:01:
                    4c:17:04:47:f3:e3:37:6f:2c:41:bf:6b:26:38:9e:
                    d9:41:28:12:be:55:96:de:9b:2e:6f:51:bd:74:c5:
                    c6:d3:a3:ce:32:7d:bd:34:f8:1b:0d:c9:b6:67:97:
                    02:06:c4:55:0c:7b:aa:67:42:ae:5d:38:4c:b2:a7:
                    e0:9a:1e:fd:d4:84:98:85:d3:07:ec:21:d1:cd:00:
                    f6:45:fc:92:ac:50:d7:23:51:33:c3:2c:cb:0c:29:
                    ba:bf:31:15:cf:78:33:b2:2b:6d:a8:e7:31:af:53:
                    20:c1:ec:3a:c0:48:96:ff:c9:47:6b:dd:69:f1:ca:
                    a0:33:07:cf:a0:21:ad:2c:40:13:9b:b5:4a:4e:00:
                    3a:93:2f:bd:12:75:b1:15:6e:ce:17:2d:f4:ae:00:
                    82:36:b8:a1:ea:0d:a4:37:74:8b:bc:f6:ab:2f:44:
                    eb:77:04:d5:5a:ca:2a:f4:ee:8f:85:d7:a7:7e:15:
                    7b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:26:AF:FE:55:8A:02:0C:17:89:57:56:5F:0D:59:B9:1E:23:A1:0A
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tCav_lWKAgwXiVdWXw1ZuR4joQo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.190.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9c:2c:0a:fa:62:a9:8d:99:1d:f1:16:7b:de:4e:12:9f:bb:80:
         00:c0:05:94:43:1a:35:4e:b9:5d:a5:1f:85:2d:f7:a9:ed:03:
         5f:78:09:8e:87:5c:9b:e0:13:2a:d9:62:3d:b6:44:88:ed:ff:
         2f:e6:e2:e9:ca:9e:01:77:46:d3:60:e5:7f:f5:79:cc:5a:43:
         18:b9:ac:2d:9f:d4:fe:fe:7e:82:57:8a:66:6d:81:ff:66:30:
         aa:7f:5f:87:b5:12:8a:00:c2:8f:8f:6c:1d:af:47:b3:38:f3:
         d2:d8:92:42:64:8a:2a:51:d6:78:9f:94:88:c2:78:0e:ee:b6:
         5c:6b:4b:20:ad:1d:b6:54:e1:67:7c:7c:72:41:fb:32:f6:26:
         5f:24:6e:83:c4:22:c4:6a:c7:5c:c5:c0:7f:c7:56:ce:a5:a4:
         66:e5:6f:99:11:36:ca:40:4c:37:7a:7f:14:df:8f:43:95:83:
         3f:a2:fc:be:69:0b:a2:f9:8a:94:42:6b:ce:d2:ca:7e:18:16:
         bd:5f:28:cb:d6:ec:8c:94:e9:33:2e:8e:33:29:ca:ab:65:05:
         60:6f:0b:4f:76:b6:96:c5:07:61:3c:0b:6f:f8:ed:fc:71:63:
         33:5b:4a:5b:b7:08:06:9d:c6:86:0c:77:fc:23:1c:68:65:8b:
         ed:9e:e3:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----