Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Fs_714oPiVH4WDuqW5k1ZyrzysE.roa
File:                     Fs_714oPiVH4WDuqW5k1ZyrzysE.roa (raw, json)
Hash identifier:          CsTRtCdnze1el4QlXu3mNaJX28HTQDEIugPLmaZk9cE=
Subject key identifier:   16:CF:FB:D7:8A:0F:89:51:F8:58:3B:AA:5B:99:35:67:2A:F3:CA:C1
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       0DC9
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Fs_714oPiVH4WDuqW5k1ZyrzysE.roa
Signing time:             Thu 15 Sep 2022 02:46:55 +0000
ROA not before:           Thu 15 Sep 2022 02:46:55 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     131634
IP address blocks:        124.108.140.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3529 (0xdc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Sep 15 02:46:55 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=16CFFBD78A0F8951F8583BAA5B9935672AF3CAC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:11:3c:51:b8:00:cd:56:a9:e2:18:56:af:3e:
                    39:9a:35:e6:9b:79:6e:b5:52:09:a2:0f:6a:c1:31:
                    76:b9:50:6a:24:68:68:3f:4a:91:2b:df:6e:66:30:
                    00:85:33:28:fb:88:23:c7:9d:06:a2:7f:71:12:7f:
                    0b:72:98:f7:aa:ab:07:33:ad:73:91:1d:08:4e:63:
                    7b:9a:59:a3:2b:79:f7:c3:ff:bf:63:a4:86:59:a4:
                    15:2d:9c:e6:90:7f:7a:69:01:a9:0b:bc:de:ba:df:
                    0c:fc:76:cf:c5:fe:16:3a:d4:22:97:59:6d:53:e7:
                    04:bf:27:c6:2b:7b:6e:cf:33:f1:d2:3d:cd:80:12:
                    d5:ea:94:83:35:58:b1:79:fd:23:db:10:56:fe:4f:
                    bd:c8:4e:d8:3b:bf:64:30:85:56:bb:b1:7b:7d:46:
                    db:3a:04:34:69:ca:f8:27:bc:9c:e0:6b:d7:02:c7:
                    27:c3:a4:d4:c3:89:5f:1a:f6:fa:76:fc:dd:e2:7e:
                    7e:c8:e4:db:3b:c2:af:9f:19:03:9e:aa:96:10:7f:
                    12:b0:c8:31:51:4b:bd:21:97:46:d4:ba:c1:6f:ea:
                    dc:a1:3e:7a:64:cd:0e:47:d9:f6:28:46:74:a5:f4:
                    38:fc:61:b1:28:dc:6f:10:8b:ad:c2:da:c0:2b:92:
                    a8:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:CF:FB:D7:8A:0F:89:51:F8:58:3B:AA:5B:99:35:67:2A:F3:CA:C1
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Fs_714oPiVH4WDuqW5k1ZyrzysE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.108.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:85:86:01:0b:36:29:9a:bc:c0:c7:d2:ee:33:47:c9:a5:5a:
         ed:a4:08:79:08:f2:20:e3:e2:3f:17:de:c7:ff:c0:d3:09:d7:
         d6:e3:d7:84:06:a6:d8:b2:15:7d:a8:23:0b:b6:5f:92:06:ae:
         14:6f:f5:6a:09:71:95:79:a6:99:aa:94:60:83:e4:6f:42:31:
         8f:9c:70:3f:e7:2d:13:eb:c2:0f:c7:0b:d3:55:2c:37:64:5e:
         db:16:70:40:9e:f5:df:65:7a:ee:7e:f2:73:a6:a1:63:4f:80:
         c4:5f:8e:47:16:15:34:61:90:40:74:7c:8f:2d:75:dd:68:ce:
         71:e0:4e:d5:2e:17:04:d8:4b:71:74:3b:32:de:cd:b9:ed:98:
         f4:c4:05:64:04:15:ec:f6:36:e2:e8:31:14:b5:0a:d9:44:df:
         7b:87:3e:13:f0:55:83:9e:2b:ae:ae:f7:eb:22:98:fe:c9:ff:
         22:bf:1b:5d:79:5d:16:90:54:48:04:40:70:8f:98:46:5e:7f:
         dc:a1:1f:4f:ea:8f:95:81:17:a6:d7:c0:85:46:08:24:d4:2d:
         b2:2e:c6:49:53:10:38:15:a9:69:51:d9:dd:e4:f5:b0:bd:7b:
         15:e1:85:68:e6:37:aa:76:8a:be:79:3a:30:f7:52:a9:24:55:
         fc:c7:fa:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----