Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/xop38FOx7SJBvUz4KszRX3DWd7U.roa
File:                     xop38FOx7SJBvUz4KszRX3DWd7U.roa (raw, json)
Hash identifier:          iFdBz/BtM3Glcxa9uwb4x9OlVz/6RxNPzyfMlROFC1o=
Subject key identifier:   C6:8A:77:F0:53:B1:ED:22:41:BD:4C:F8:2A:CC:D1:5F:70:D6:77:B5
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/xop38FOx7SJBvUz4KszRX3DWd7U.roa
Signing time:             Thu 15 Sep 2022 02:42:54 +0000
ROA not before:           Thu 15 Sep 2022 02:42:54 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     9919
IP address blocks:        113.196.152.0/21 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4036 (0xfc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 15 02:42:54 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=C68A77F053B1ED2241BD4CF82ACCD15F70D677B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:bd:6f:48:d5:b7:54:ce:ec:30:cc:de:a7:bd:
                    73:d9:30:0c:e3:9b:b6:f5:1b:eb:7f:c1:82:92:a3:
                    59:cb:53:ef:49:8d:6e:5d:a5:ec:42:69:cc:59:9a:
                    d4:b2:df:42:af:29:a2:69:21:8e:f1:f7:72:2d:3c:
                    72:1e:d2:7e:b7:7b:77:cc:6a:66:d3:ca:7d:2e:25:
                    77:f4:fe:27:77:95:7c:a7:26:28:90:7d:b0:f0:ed:
                    db:d2:6d:28:59:23:61:45:60:9a:4b:48:70:88:89:
                    74:9b:94:f9:e0:01:bf:28:47:0b:08:36:19:68:2f:
                    56:36:81:6c:bc:c7:fa:b8:84:26:03:79:55:b4:b7:
                    e5:80:92:aa:60:a6:6e:f2:5e:15:2d:4b:ba:1c:1d:
                    60:22:c1:ce:ab:17:7a:8e:f2:cf:14:88:9d:d4:7a:
                    5c:27:30:d9:64:73:b3:11:62:63:96:dc:b1:4c:e2:
                    af:23:97:34:c9:00:7c:a9:7c:49:75:39:5d:d8:db:
                    39:41:dd:73:53:3d:17:5e:d3:70:f6:51:72:c6:7c:
                    09:7f:60:ea:1f:b0:da:66:1f:c6:3b:ae:ad:ca:a2:
                    73:68:21:8b:9c:58:1f:39:c3:5b:4b:32:53:45:df:
                    96:d8:a2:8c:ef:32:76:17:4b:72:a7:1a:80:c7:7f:
                    b0:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:8A:77:F0:53:B1:ED:22:41:BD:4C:F8:2A:CC:D1:5F:70:D6:77:B5
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/xop38FOx7SJBvUz4KszRX3DWd7U.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.196.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         39:4e:d7:6c:c3:32:e6:c6:6a:fd:93:63:54:67:9a:b3:1d:fb:
         e6:f5:ba:5e:c5:44:a8:ab:77:09:d0:b6:3a:b4:73:c7:43:e4:
         c9:23:75:2a:a0:ca:d2:94:2d:a6:e0:b3:bc:12:bf:a1:ed:23:
         ee:64:3a:58:b3:60:eb:e0:b4:b2:f9:d6:96:1f:13:57:94:af:
         6f:8f:b0:c2:65:98:fb:72:79:43:fb:4d:c9:47:43:2a:34:69:
         43:d6:4b:2c:6f:11:bb:28:f5:02:a8:fe:7a:98:80:d4:b1:1e:
         59:54:4d:9f:57:18:de:29:25:55:85:4b:64:51:88:87:81:f3:
         1a:d7:4f:99:db:e3:f7:8f:5e:e2:fc:d0:1d:8d:d0:8b:3b:8d:
         54:84:83:dc:39:81:79:2c:a5:c6:98:3d:c1:a1:ab:ca:c9:2a:
         c5:63:78:f5:b7:61:80:5b:2c:30:32:9e:43:a9:7a:02:c9:df:
         14:8f:49:2f:08:3b:69:17:76:ee:90:88:45:56:68:42:3c:90:
         95:4d:12:86:45:02:52:51:95:db:01:1b:0c:58:f7:46:8d:11:
         55:87:6a:94:0c:fd:e9:44:97:97:f0:01:29:3f:eb:50:54:8c:
         f8:96:5f:99:9f:3a:c2:2e:3a:86:45:c2:66:b0:28:2a:b7:19:
         b8:f1:f6:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----