Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/uveW4PcTdIKMv0DlhsTwyDpd3so.roa
File:                     uveW4PcTdIKMv0DlhsTwyDpd3so.roa (raw, json)
Hash identifier:          mDJqRH1VYn7hKwr5zaEAypI+ROTJOujVhHGEqlX3ulI=
Subject key identifier:   BA:F7:96:E0:F7:13:74:82:8C:BF:40:E5:86:C4:F0:C8:3A:5D:DE:CA
Certificate issuer:       /CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Certificate serial:       0C6F
Authority key identifier: B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/uveW4PcTdIKMv0DlhsTwyDpd3so.roa
Signing time:             Thu 15 Sep 2022 02:42:49 +0000
ROA not before:           Thu 15 Sep 2022 02:42:49 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     4780
IP address blocks:        192.72.16.0/20 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3183 (0xc6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
        Validity
            Not Before: Sep 15 02:42:49 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=BAF796E0F71374828CBF40E586C4F0C83A5DDECA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:8b:ae:67:25:35:26:32:be:da:8e:51:f5:74:
                    af:5f:52:a1:02:2f:e2:14:f8:3a:f6:a4:52:6a:9d:
                    59:a0:ed:9a:2a:04:19:d0:a5:1b:b5:b9:1f:45:9f:
                    6e:f1:82:7f:84:fa:9e:3f:6d:cd:7a:4d:be:e2:37:
                    f8:ce:d2:81:a2:51:76:54:94:57:b0:98:34:0e:76:
                    79:fd:0f:4c:de:40:44:29:42:48:0f:0b:42:cd:74:
                    83:bd:89:e6:cb:d6:42:70:29:30:95:9f:33:06:f5:
                    63:b1:7b:e0:88:fb:8b:e1:74:8a:aa:24:c0:7b:84:
                    d4:b5:1f:31:45:77:99:cd:18:a0:36:db:a2:5f:df:
                    1b:01:df:06:82:7e:0e:43:a5:a0:18:31:87:04:1a:
                    3f:52:05:88:74:da:ad:88:96:e8:a5:18:cb:35:86:
                    b7:55:0f:3c:06:a0:c0:bb:e2:12:d8:9a:9c:27:b8:
                    44:b2:1c:ac:e8:23:32:37:ce:ba:5a:92:ae:e4:6f:
                    3a:92:39:66:b1:ca:7e:f3:df:96:26:ff:8c:4c:a3:
                    cf:b5:71:88:4f:15:62:27:08:50:c7:07:fb:b7:e5:
                    56:9a:63:66:69:09:b2:27:e2:1d:cd:d5:c6:7a:8c:
                    33:23:4f:8e:44:6d:bc:a3:e9:ad:76:ff:2b:2b:18:
                    03:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:F7:96:E0:F7:13:74:82:8C:BF:40:E5:86:C4:F0:C8:3A:5D:DE:CA
            X509v3 Authority Key Identifier:
                keyid:B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/uveW4PcTdIKMv0DlhsTwyDpd3so.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.72.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2a:ba:82:38:60:00:a2:e4:3d:f3:68:bd:28:27:98:b6:cf:88:
         a1:5c:2b:12:b2:0a:63:f8:d9:35:b4:be:a1:7d:5f:fd:5f:b9:
         c6:fe:f3:07:1a:4c:08:8c:58:ad:d4:b6:30:c8:f7:11:ba:f4:
         04:cd:d0:84:14:0d:55:37:5a:a3:f3:fb:5c:07:98:e4:a9:62:
         d4:93:ce:f9:90:85:df:05:5d:e9:9f:d4:92:e8:12:04:98:36:
         10:f4:03:24:32:d3:ea:f1:fd:aa:94:20:22:52:4f:1e:13:0e:
         13:86:d8:56:9d:1a:7d:91:81:b3:1c:00:38:80:a1:cc:a0:77:
         4e:d2:10:02:a7:fe:05:88:41:29:71:29:6d:d7:66:c3:73:88:
         aa:7f:b6:1d:3e:f7:29:14:10:da:ff:ce:f2:86:d1:43:bf:bd:
         3d:43:4c:ad:e8:d9:f5:79:4c:2c:63:2a:22:59:fb:2f:8d:23:
         4f:27:40:58:7f:20:df:da:c9:52:48:ae:6e:7d:b8:66:1b:1d:
         78:10:9f:07:46:6c:47:40:55:7e:0c:92:fe:8a:77:b5:bd:bd:
         02:a0:89:ac:a3:94:6b:1c:13:c3:73:a0:de:e8:71:02:bc:28:
         5a:46:44:e6:b8:f1:a5:ba:ec:b3:3e:62:02:26:0f:29:d6:ab:
         4f:02:01:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----