Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/w3C_mABxiMEp20Om6J8lurUaV20.roa
File:                     w3C_mABxiMEp20Om6J8lurUaV20.roa (raw, json)
Hash identifier:          ruwqXTW/XeWr6H+oOLG/G4ruUr3nW93ELN8+wSguXfs=
Subject key identifier:   C3:70:BF:98:00:71:88:C1:29:DB:43:A6:E8:9F:25:BA:B5:1A:57:6D
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/w3C_mABxiMEp20Om6J8lurUaV20.roa
Signing time:             Thu 15 Sep 2022 02:43:16 +0000
ROA not before:           Thu 15 Sep 2022 02:43:16 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     9919
IP address blocks:        211.78.128.0/19 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4036 (0xfc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 15 02:43:16 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=C370BF98007188C129DB43A6E89F25BAB51A576D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:85:bc:ec:1f:c7:b1:02:20:66:9a:a5:e1:48:
                    b0:04:c6:d0:0f:65:2f:d0:27:6e:67:53:0d:2b:22:
                    0a:71:ce:40:3e:10:fe:3f:2e:68:38:d8:31:be:f0:
                    79:65:5d:58:39:66:25:ef:e6:76:a1:87:ac:82:c0:
                    bf:2c:42:95:3c:53:f9:39:22:5a:f9:94:14:e2:14:
                    eb:bf:c0:36:e5:0c:b0:a9:88:29:f4:27:48:c1:86:
                    97:a1:1a:2b:54:a3:b0:30:b3:1f:f2:60:04:f9:7d:
                    3e:0e:2a:2d:76:fd:91:95:3d:36:d6:a5:5e:49:bd:
                    63:53:32:c9:56:f7:66:c3:3d:96:23:f1:ea:b7:9f:
                    d2:1f:07:7c:8a:07:a9:b3:74:7f:20:3e:fd:0d:06:
                    21:c9:01:0e:49:3c:fe:a8:c6:95:41:1a:d6:5b:2d:
                    34:a3:90:ef:53:2d:36:37:d1:5f:c8:b7:5f:36:58:
                    80:a0:d2:92:c5:38:e0:8f:3b:41:c6:48:a8:22:34:
                    1e:c2:70:1c:ab:55:3c:cd:09:e5:3a:a7:49:15:a3:
                    df:61:51:3f:38:77:00:db:58:fb:1c:11:25:fd:55:
                    b1:eb:e6:c1:23:8f:51:ad:2c:19:d2:30:33:1d:6f:
                    35:75:9e:45:8b:a9:b9:aa:3f:1c:3e:d6:2e:3d:68:
                    b4:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:70:BF:98:00:71:88:C1:29:DB:43:A6:E8:9F:25:BA:B5:1A:57:6D
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/w3C_mABxiMEp20Om6J8lurUaV20.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.78.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         17:33:6d:4c:c6:f3:5d:69:12:50:a4:6c:42:c5:91:3c:8c:6d:
         4d:77:09:d3:07:f1:d1:c4:42:d0:d3:f2:af:e5:e6:4a:d7:fc:
         20:64:50:5e:d8:d6:00:8a:63:15:a9:31:b9:a2:be:3b:bc:f8:
         01:fc:9f:40:ec:10:de:d2:e3:cd:69:44:7d:b4:57:f3:2b:bf:
         f5:cf:5b:ec:d1:b7:d4:f4:5f:3c:cc:01:05:29:b5:67:1d:29:
         23:ff:34:1c:da:cc:c4:47:0d:7f:6a:bb:91:e2:73:32:12:af:
         d2:f3:45:93:ea:35:45:6b:67:98:15:b6:ff:f2:a1:69:e1:29:
         d1:7c:63:0e:34:5b:42:eb:6c:04:fc:4b:7c:b4:e0:1a:c4:d1:
         a9:46:61:52:a3:6e:2a:61:bc:f5:bc:98:63:82:c3:92:b4:a6:
         eb:4d:a7:9a:23:e9:6b:66:a4:c9:a9:5d:b6:f1:a4:24:85:2a:
         53:3e:c8:6b:4b:16:a1:3b:06:0d:b3:64:34:12:c5:ec:a6:85:
         41:e6:a8:b1:46:ad:ec:da:5b:c0:fe:9d:c8:0a:b2:77:c7:82:
         d2:0a:4e:35:27:49:10:8a:9b:99:01:c8:ba:a5:b3:40:85:98:
         87:96:15:79:d2:73:2b:11:24:a8:39:6b:38:ce:b7:5d:cb:ed:
         80:53:16:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----