Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/xutiF3uXPH_ettUbKRDkKnB394M.roa
File:                     xutiF3uXPH_ettUbKRDkKnB394M.roa (raw, json)
Hash identifier:          vrAym63s3C7JLzkA9G4f7vHW+F+UmwTfT7PDOsIcatU=
Subject key identifier:   C6:EB:62:17:7B:97:3C:7F:DE:B6:D5:1B:29:10:E4:2A:70:77:F7:83
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/xutiF3uXPH_ettUbKRDkKnB394M.roa
Signing time:             Thu 15 Sep 2022 02:43:54 +0000
ROA not before:           Thu 15 Sep 2022 02:43:54 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     4780
IP address blocks:        218.32.0.0/16 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4036 (0xfc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 15 02:43:54 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=C6EB62177B973C7FDEB6D51B2910E42A7077F783
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:bb:f8:f5:dc:ba:99:9a:42:a0:e8:18:58:79:
                    10:e3:04:30:7c:95:09:bb:77:de:cd:40:cb:c2:44:
                    e9:15:e3:8f:78:49:1c:6f:2b:5a:c9:62:0a:60:f0:
                    e4:f2:b2:96:a2:97:eb:8f:a0:41:ab:e5:d1:41:d1:
                    23:44:3a:f6:fe:08:d0:ae:66:62:ca:47:f4:67:92:
                    c4:9d:32:44:7b:26:0f:48:25:13:90:d2:b4:29:fc:
                    45:1e:cb:14:42:53:97:a3:da:06:e6:eb:a2:eb:8c:
                    36:1e:f6:c7:41:98:ee:ef:f0:1a:fd:cf:65:82:6c:
                    c1:f7:25:f4:b8:a6:eb:d1:9b:16:82:97:7a:82:b1:
                    94:76:e1:f6:13:85:14:ea:3f:0f:c9:e1:a4:ac:a1:
                    bb:fd:78:04:b7:17:05:20:b0:a3:f3:14:4c:58:1a:
                    4b:1f:3f:97:35:1d:ca:87:38:13:d0:0f:1a:6b:1c:
                    a6:48:6f:89:01:e3:70:d8:25:9b:be:a6:e0:e7:c7:
                    ad:d6:66:76:9f:16:c5:91:88:6a:f9:3d:b8:b3:d5:
                    97:03:91:06:d7:d0:e7:dc:36:c5:18:ac:d5:e6:1b:
                    de:07:5c:7e:c0:cb:dd:b7:27:b4:01:c3:3d:82:33:
                    6e:d2:25:2b:c9:99:3f:31:e7:f6:5c:82:d2:09:e5:
                    3c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:EB:62:17:7B:97:3C:7F:DE:B6:D5:1B:29:10:E4:2A:70:77:F7:83
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/xutiF3uXPH_ettUbKRDkKnB394M.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.32.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         48:1b:b5:dd:48:87:60:88:f4:b8:0b:31:7c:26:f4:7c:68:8f:
         19:1b:bb:ec:91:da:3b:02:b1:f0:9c:7c:ee:78:60:db:b9:fa:
         b6:10:7d:70:68:37:f1:e9:dd:34:34:79:75:bb:29:d7:99:ff:
         25:94:c3:ee:ba:fa:75:95:03:9a:4c:44:bf:49:74:15:34:44:
         57:77:ca:d2:ce:3f:74:45:10:6a:89:46:56:c4:03:71:96:9e:
         07:17:90:c9:c2:45:bb:f9:30:21:b0:fe:d9:05:90:78:13:52:
         6c:3c:36:dd:b8:9a:72:9d:d9:91:6a:ea:41:af:98:1a:04:70:
         8b:6e:92:bd:39:61:b6:f3:7e:d7:22:f2:ff:95:23:26:e2:cf:
         6e:46:6a:a9:a9:59:00:87:ed:71:af:8e:03:5c:6b:8b:ba:ef:
         28:c8:8c:0b:d9:32:62:b9:9c:dc:85:81:a3:be:fa:02:15:ee:
         1d:ef:76:37:08:9b:cc:b4:8b:e9:00:d0:8a:0c:bf:07:32:a6:
         99:77:c9:98:7c:6d:39:7d:e0:a6:a0:17:5d:02:b4:15:47:87:
         0d:77:48:d7:bb:b7:a7:7b:fc:11:3a:19:81:37:71:5b:ee:fd:
         d5:ec:47:fd:13:22:0a:7b:58:49:8a:27:a3:33:74:f0:4d:fd:
         ec:7d:6f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----