Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Hoff-Maf5OPeisT3ZvDgwp_u69M.roa
File:                     Hoff-Maf5OPeisT3ZvDgwp_u69M.roa (raw, json)
Hash identifier:          rd3C5bJM+fXkJS/yFQXIv0CxThXxDeLgCcV6qalpnHc=
Subject key identifier:   1E:87:DF:F8:C6:9F:E4:E3:DE:8A:C4:F7:66:F0:E0:C2:9F:EE:EB:D3
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       0DC9
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Hoff-Maf5OPeisT3ZvDgwp_u69M.roa
Signing time:             Thu 15 Sep 2022 02:47:27 +0000
ROA not before:           Thu 15 Sep 2022 02:47:27 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     9924
IP address blocks:        61.30.239.0/24 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3529 (0xdc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Sep 15 02:47:27 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=1E87DFF8C69FE4E3DE8AC4F766F0E0C29FEEEBD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:0a:be:17:c2:11:ab:8d:5d:aa:82:73:26:ba:
                    d1:33:a5:2b:de:80:a2:09:95:5b:d5:37:61:1b:2c:
                    ca:f2:79:fe:7e:37:d7:79:c0:52:9f:b6:de:6f:e6:
                    9b:1e:d8:5b:f0:1c:f7:ab:f1:68:ad:d9:91:6c:a2:
                    8b:32:02:d1:4c:09:87:0c:32:0a:76:07:48:ea:f0:
                    17:43:d4:e9:af:34:ee:27:dd:d2:b8:9e:2f:6c:35:
                    d5:c7:8a:e2:7f:18:d1:2a:34:bc:1e:40:82:91:dd:
                    45:3f:1f:f3:b8:98:8e:8e:42:17:64:ee:0f:c5:72:
                    95:df:bb:b8:c0:f0:a5:91:9d:e8:c5:7a:ce:fb:10:
                    3c:e9:dc:ff:57:6f:7f:87:49:51:a3:c2:1c:d9:d2:
                    60:b1:8a:8a:39:db:d1:8d:d8:fc:11:8b:05:12:4f:
                    77:cd:33:bb:70:cf:fc:69:06:89:42:35:81:6a:7e:
                    af:b8:44:87:33:66:04:47:28:ab:70:0a:c5:a4:58:
                    23:dd:64:e8:26:32:8c:31:29:3e:c3:0f:61:27:de:
                    29:10:0a:e1:49:a5:d5:c0:63:fa:85:22:72:51:d0:
                    99:87:59:f7:94:4b:0c:0d:10:70:7e:aa:47:d1:b3:
                    f5:c8:0a:a2:da:c4:41:70:2e:b9:a4:2c:84:c8:56:
                    29:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:87:DF:F8:C6:9F:E4:E3:DE:8A:C4:F7:66:F0:E0:C2:9F:EE:EB:D3
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Hoff-Maf5OPeisT3ZvDgwp_u69M.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.30.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:e1:10:b4:3c:fe:77:6b:98:ef:50:6a:47:c1:0b:52:d8:fc:
         a8:dd:2d:0b:12:39:eb:b8:39:75:7d:02:f1:ae:e5:64:38:78:
         05:7b:17:5d:57:fe:32:fb:bb:99:56:01:6e:41:52:49:d9:2f:
         e3:ac:f2:93:37:d2:67:c6:6c:af:85:18:cd:ba:26:d6:1d:69:
         98:cd:fd:78:93:70:b7:cc:bf:35:76:20:49:7d:23:92:61:3e:
         4b:82:ab:42:61:ab:54:7d:b9:9b:6e:cf:df:43:fd:4e:c6:e0:
         39:2e:b4:58:ac:25:bb:16:48:b2:7f:2d:7b:39:ba:eb:81:e9:
         55:f2:cd:7f:1f:14:84:04:7d:da:6a:b1:6a:8f:8d:ce:d3:e2:
         8d:d2:fa:d5:54:7c:50:b7:39:0f:28:37:11:dd:92:8d:2a:cb:
         d1:89:7c:d4:70:80:da:ce:63:87:84:2b:9a:f9:7f:22:5e:33:
         06:b8:52:11:1b:3d:d9:e5:65:09:e5:71:da:e3:da:3d:2f:79:
         da:07:65:e6:ef:cb:cb:0e:9f:11:f5:fa:ca:63:be:a7:7c:89:
         29:38:ac:50:4c:e5:59:4d:2a:bf:db:da:d6:6d:06:b2:2f:7e:
         c4:0e:65:84:64:b4:b7:30:db:46:b6:54:26:ac:04:f6:ff:2f:
         17:4b:7e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----