Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/yi8R0FaR15WeGPphHd21o9VbHrg.roa
File:                     yi8R0FaR15WeGPphHd21o9VbHrg.roa (raw, json)
Hash identifier:          mZs99xBi/hAGe87Zpj57lnOmmMDp57sAICfDSLwpPmM=
Subject key identifier:   CA:2F:11:D0:56:91:D7:95:9E:18:FA:61:1D:DD:B5:A3:D5:5B:1E:B8
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/yi8R0FaR15WeGPphHd21o9VbHrg.roa
Signing time:             Thu 15 Sep 2022 02:42:42 +0000
ROA not before:           Thu 15 Sep 2022 02:42:42 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     131586
IP address blocks:        175.183.137.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4036 (0xfc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 15 02:42:42 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=CA2F11D05691D7959E18FA611DDDB5A3D55B1EB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:81:05:35:66:a5:8c:dc:77:4a:80:48:dc:2e:
                    6f:d2:49:bc:df:6a:51:bc:3e:f0:c3:94:2b:8a:0c:
                    1f:8f:d0:17:78:86:e6:7d:db:7c:09:e1:6c:45:f5:
                    9c:6c:68:19:48:d1:2a:a9:b8:97:cc:f3:32:2d:7b:
                    65:e4:b4:a3:1b:15:51:b7:39:8d:e2:ce:d6:fd:5e:
                    a3:e3:69:95:45:1d:f8:c2:ea:0c:e0:8e:a1:38:db:
                    83:e2:34:40:5f:6d:e4:d1:f6:dc:8c:cd:48:7f:9c:
                    e8:12:3e:7e:7b:0b:68:d9:e7:e9:1e:8d:72:a4:96:
                    c1:33:41:cc:8f:2f:27:ac:4d:b9:af:79:77:14:c1:
                    e7:15:6e:bc:6b:53:75:c2:3c:46:55:85:1e:ac:ef:
                    50:96:61:3b:3a:3e:3a:ef:a6:d5:99:87:7b:c9:65:
                    dc:dc:14:82:d4:19:44:86:8c:77:72:44:62:33:09:
                    b0:10:0c:69:60:3d:7c:b2:a4:fe:53:4a:26:07:32:
                    ee:46:c8:8b:48:9e:cd:e7:c4:af:5e:83:6a:1d:9f:
                    17:85:32:11:38:f7:32:55:c0:63:67:3a:42:1c:ed:
                    dc:c8:28:09:ff:a4:54:05:4b:76:57:53:aa:9e:1c:
                    ea:c6:c0:c0:0e:28:e1:98:c4:66:9a:49:12:e2:8d:
                    c7:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:2F:11:D0:56:91:D7:95:9E:18:FA:61:1D:DD:B5:A3:D5:5B:1E:B8
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/yi8R0FaR15WeGPphHd21o9VbHrg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.183.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:fe:15:1f:f5:0b:94:da:28:1c:ed:44:76:1b:16:45:07:79:
         7b:8d:44:c1:1b:a3:3c:65:8c:60:11:4c:fb:69:fb:52:f4:77:
         3c:de:5d:fc:59:e2:69:2f:53:9c:27:4f:bb:d1:8c:1f:79:fc:
         79:c6:26:da:5a:3b:8f:8c:7d:c4:bf:75:9f:c4:5c:8f:49:2d:
         b8:d3:5f:96:d9:8a:2c:19:c9:72:b3:05:37:ff:26:5d:11:14:
         c0:ad:01:e6:b2:9b:41:07:b9:87:54:34:e8:fb:72:a6:ef:93:
         ee:5b:fc:19:ac:20:8a:14:57:ab:3c:14:fd:60:54:72:1d:0a:
         bb:de:2b:d2:7c:42:aa:f2:0a:3e:c9:e0:c5:25:c6:15:91:50:
         4a:ae:0c:12:a2:c9:37:7b:e5:f2:db:62:26:bf:2d:12:4f:90:
         2c:53:73:0d:85:7e:37:82:ff:d6:6b:1d:f4:c3:33:b9:ca:bc:
         d7:f4:f8:5f:6e:82:b2:9c:f5:8d:45:44:d7:d1:bd:92:fb:af:
         99:34:2e:b8:b5:40:48:59:a2:d7:77:59:37:92:32:4a:62:09:
         6e:31:60:a6:a0:85:b5:62:c0:65:e4:66:57:22:e3:3b:ce:fb:
         c7:20:3f:88:73:98:15:4c:d1:80:ce:d4:ee:cf:70:18:b6:9b:
         0e:f5:74:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----