Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/bN1PX9quBAc1sNhW1ToKAQYNtOw.roa
File:                     bN1PX9quBAc1sNhW1ToKAQYNtOw.roa (raw, json)
Hash identifier:          HG6fR9pDboxvRagxkBaVAckKGlXosBekQ8d2u94EzRE=
Subject key identifier:   6C:DD:4F:5F:DA:AE:04:07:35:B0:D8:56:D5:3A:0A:01:06:0D:B4:EC
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       0DC9
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/bN1PX9quBAc1sNhW1ToKAQYNtOw.roa
Signing time:             Thu 15 Sep 2022 02:47:35 +0000
ROA not before:           Thu 15 Sep 2022 02:47:35 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     133747
IP address blocks:        60.198.136.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3529 (0xdc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Sep 15 02:47:35 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=6CDD4F5FDAAE040735B0D856D53A0A01060DB4EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:11:6c:8f:bb:22:7e:74:13:cc:71:ad:ad:ae:
                    aa:ab:8e:25:46:df:94:b3:82:03:aa:fe:7d:ce:39:
                    33:cc:c6:00:4c:6d:be:35:66:29:4a:69:10:d9:88:
                    8a:0a:bf:b6:3e:e6:0d:ba:af:25:e0:2a:14:8e:8f:
                    35:1f:0b:90:94:d2:b3:ce:87:eb:8b:4f:1f:35:d4:
                    28:61:08:24:c3:5c:18:25:c1:c2:c5:e8:b2:76:a5:
                    3e:c4:b8:ef:f9:ac:d0:5c:8a:fb:31:fa:f8:ff:65:
                    89:37:0d:66:73:7e:f1:0c:19:ed:a0:dc:67:0d:4c:
                    10:52:c0:bf:d2:0f:27:89:29:84:50:98:21:34:af:
                    c0:0c:32:a8:1e:02:7c:f9:dd:5b:fc:e6:ad:e4:2f:
                    ac:7c:61:54:36:fb:08:3c:f1:76:b9:b6:ff:f8:fe:
                    98:8c:51:84:37:4c:b2:b2:24:7a:62:23:a2:2b:c3:
                    69:c7:26:e2:ef:00:18:a6:99:c7:31:bf:90:f7:06:
                    27:44:e9:8c:5f:20:01:22:71:4f:b7:16:f7:94:39:
                    d2:22:8c:a0:a3:02:63:1b:f9:6e:fe:c7:85:ba:65:
                    79:2a:bc:8a:f6:cc:67:9d:c4:f6:f6:19:66:b7:f8:
                    69:b1:b9:3d:aa:b6:91:76:32:b2:43:e5:59:ae:29:
                    fd:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:DD:4F:5F:DA:AE:04:07:35:B0:D8:56:D5:3A:0A:01:06:0D:B4:EC
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/bN1PX9quBAc1sNhW1ToKAQYNtOw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  60.198.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:3b:9e:4b:03:6d:e8:03:32:77:85:f2:08:56:d2:89:f4:40:
         66:c9:27:d1:e0:18:c0:78:58:66:d7:c3:a0:85:3e:04:89:9f:
         82:bb:6a:b5:fc:2c:65:03:a2:57:5c:f0:e9:bf:29:de:fb:6a:
         47:f8:67:eb:be:6c:13:38:6f:00:e0:4e:5b:51:c3:dc:02:f9:
         63:76:ee:03:38:67:53:2e:6b:c9:da:92:3f:d9:09:ea:a8:3b:
         9f:c2:73:0b:ac:26:58:01:dd:b0:4f:f0:10:f7:3a:44:36:6e:
         1d:ad:c2:cf:2b:29:6c:81:68:93:a5:18:90:39:0c:7a:0b:be:
         29:e3:b3:c2:59:42:8d:08:95:ed:77:00:4c:8a:ac:64:a4:64:
         6c:c6:b9:f4:8e:e2:c5:e0:50:ec:48:f2:07:e4:13:0e:1c:39:
         77:4a:86:4d:4c:f8:b8:9f:60:91:88:e7:6a:70:88:c0:0b:62:
         fd:17:76:da:a4:2e:de:cb:5a:a4:02:65:dc:bf:e1:e5:2b:40:
         20:ef:4d:2b:b1:0e:77:c2:90:d7:fb:bb:3c:59:fe:1d:7d:f7:
         a3:de:b9:8a:87:f5:db:3d:3b:bd:a3:1b:49:fe:13:16:2d:51:
         81:b4:78:11:e2:df:30:98:39:06:c1:8e:e0:e6:bc:57:6d:d2:
         ad:72:61:81
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICDckwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB
NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yMjA5MTUw
MjQ3MzVaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDZDREQ0RjVGREFBRTA0
MDczNUIwRDg1NkQ1M0EwQTAxMDYwREI0RUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDeEWyPuyJ+dBPMca2trqqrjiVG35SzggOq/n3OOTPMxgBMbb41
ZilKaRDZiIoKv7Y+5g26ryXgKhSOjzUfC5CU0rPOh+uLTx811ChhCCTDXBglwcLF
6LJ2pT7EuO/5rNBcivsx+vj/ZYk3DWZzfvEMGe2g3GcNTBBSwL/SDyeJKYRQmCE0
r8AMMqgeAnz53Vv85q3kL6x8YVQ2+wg88Xa5tv/4/piMUYQ3TLKyJHpiI6Irw2nH
JuLvABimmccxv5D3BidE6YxfIAEicU+3FveUOdIijKCjAmMb+W7+x4W6ZXkqvIr2
zGedxPb2GWa3+GmxuT2qtpF2MrJD5VmuKf3RAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUbN1PX9quBAc1sNhW1ToKAQYNtOwwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it
/rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O
RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvYk4xUFg5cXVCQWMxc05o
VzFUb0tBUVlOdE93LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
ADzGiDANBgkqhkiG9w0BAQsFAAOCAQEAYjueSwNt6AMyd4XyCFbSifRAZskn0eAY
wHhYZtfDoIU+BImfgrtqtfwsZQOiV1zw6b8p3vtqR/hn675sEzhvAOBOW1HD3AL5
Y3buAzhnUy5rydqSP9kJ6qg7n8JzC6wmWAHdsE/wEPc6RDZuHa3CzyspbIFok6UY
kDkMegu+KeOzwllCjQiV7XcATIqsZKRkbMa59I7ixeBQ7EjyB+QTDhw5d0qGTUz4
uJ9gkYjnanCIwAti/Rd22qQu3stapAJl3L/h5StAIO9NK7EOd8KQ1/u7PFn+HX33
o965iof12z07vaMbSf4TFi1RgbR4EeLfMJg5BsGO4Oa8V23SrXJhgQ==
-----END CERTIFICATE-----