Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/ztBYFE8lsQxLzX0vWZd3pKt922Q.roa
File:                     ztBYFE8lsQxLzX0vWZd3pKt922Q.roa (raw, json)
Hash identifier:          npWj7dS3kdyy/J3KOoYf1tiAVdXQVCzxSoc3qP5l8xU=
Subject key identifier:   CE:D0:58:14:4F:25:B1:0C:4B:CD:7D:2F:59:97:77:A4:AB:7D:DB:64
Certificate issuer:       /CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Certificate serial:       0C6F
Authority key identifier: B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/ztBYFE8lsQxLzX0vWZd3pKt922Q.roa
Signing time:             Thu 15 Sep 2022 02:42:59 +0000
ROA not before:           Thu 15 Sep 2022 02:42:59 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     9919
IP address blocks:        139.175.0.0/16 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3183 (0xc6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
        Validity
            Not Before: Sep 15 02:42:59 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=CED058144F25B10C4BCD7D2F599777A4AB7DDB64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f6:78:80:a5:e3:ff:9e:f3:19:42:4f:6f:ed:
                    8a:f9:c6:2a:d1:07:01:9c:59:d2:76:8a:4d:f7:22:
                    0e:da:fc:1d:7f:d1:32:e0:a4:6d:fa:b4:87:58:26:
                    06:b1:2e:d4:cf:01:7c:99:1f:ce:e3:5c:d0:08:00:
                    47:d8:f6:b1:05:72:84:a8:d8:80:f8:20:44:f1:21:
                    4c:68:64:16:6f:ba:7f:9f:57:0c:c0:f9:a6:52:8e:
                    46:58:1b:7c:e3:77:48:5c:23:19:3c:b9:9b:c3:ac:
                    38:86:5f:c2:83:4d:09:8a:53:a6:2b:90:04:56:dc:
                    46:e9:11:5c:7c:da:c1:ba:e0:49:5f:b3:ea:c2:c5:
                    1d:48:d8:9d:ab:2e:7e:08:4a:9f:fa:36:88:25:41:
                    23:b5:b2:85:58:a9:1d:1c:e0:0d:07:03:1b:7f:c8:
                    b8:01:80:d3:89:25:c1:0d:4f:ee:06:be:14:1a:00:
                    70:25:97:67:90:65:21:fc:c7:d8:39:c2:c7:a7:18:
                    e3:40:81:27:a0:66:15:57:0d:fa:f3:36:14:f0:ea:
                    d6:49:66:b0:d8:0c:6c:66:8a:eb:11:d7:35:c9:ae:
                    aa:96:be:33:be:85:de:4e:35:f1:9b:36:3e:5a:0f:
                    7d:4d:28:b8:de:90:5e:73:25:39:59:8d:47:cb:c8:
                    d6:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:D0:58:14:4F:25:B1:0C:4B:CD:7D:2F:59:97:77:A4:AB:7D:DB:64
            X509v3 Authority Key Identifier:
                keyid:B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/ztBYFE8lsQxLzX0vWZd3pKt922Q.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.175.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         0c:63:7e:99:c6:e0:2f:6f:b2:ea:9a:48:73:07:f1:1c:28:8e:
         72:95:8c:ed:d2:7c:19:cb:62:c6:21:25:39:8e:ca:94:0e:a6:
         e6:12:86:6e:48:3a:a4:43:55:09:ad:2f:d0:a3:38:26:17:a7:
         fd:ea:e5:6d:7e:73:1b:e9:6b:07:74:89:8a:87:d2:5c:d6:a0:
         4c:2c:3a:b4:22:b2:9f:44:16:4d:ad:79:a9:86:59:ba:a5:56:
         12:c6:6c:38:13:6e:76:bd:88:fc:5a:7f:1a:0a:e6:d5:ed:de:
         be:e7:3e:27:44:19:ec:5d:6c:c9:3e:d1:d3:f7:73:fb:d8:5d:
         d5:5f:50:4a:c4:3d:01:91:2b:15:95:8a:17:f4:4c:43:16:87:
         c2:db:c4:dc:80:e1:9a:80:6f:2e:be:31:29:ee:73:0c:69:b1:
         96:a7:5d:5e:d6:dd:90:67:0d:d9:62:14:54:ed:f3:14:1a:eb:
         44:3c:17:02:dc:07:2a:ac:64:a4:b6:ee:08:d9:06:a2:d6:5b:
         18:e0:f7:59:07:e0:7b:92:f3:9e:67:f9:27:c8:bd:57:f3:5b:
         58:c2:38:87:f8:5a:af:9d:c7:91:46:f6:c9:a0:f7:0f:c6:f0:
         54:45:93:b4:a8:54:81:2f:31:59:70:72:aa:18:d1:70:a8:9f:
         0c:11:cc:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----