Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/cR6kokdmDH93V0F08_3S048IShU.roa
File:                     cR6kokdmDH93V0F08_3S048IShU.roa (raw, json)
Hash identifier:          K6FsRsnX0v/UJmYzyfn6uavVPYC2A31N/t1NjWM5icE=
Subject key identifier:   71:1E:A4:A2:47:66:0C:7F:77:57:41:74:F3:FD:D2:D3:8F:08:4A:15
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       0DC9
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/cR6kokdmDH93V0F08_3S048IShU.roa
Signing time:             Thu 15 Sep 2022 02:46:56 +0000
ROA not before:           Thu 15 Sep 2022 02:46:56 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24164
IP address blocks:        203.65.172.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3529 (0xdc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Sep 15 02:46:56 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=711EA4A247660C7F77574174F3FDD2D38F084A15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:18:d9:e2:a2:6a:b0:3a:18:01:7f:6b:24:0a:
                    78:5e:fb:cf:86:4a:3a:b8:28:99:24:d0:e3:9a:38:
                    97:b0:11:8a:ea:90:e6:4d:46:ae:ac:d0:e2:93:d2:
                    ee:71:19:4b:eb:f0:f5:62:f4:26:bb:43:73:9f:24:
                    b6:d8:8e:5f:c8:5d:fc:c4:d1:12:bf:74:ea:72:8a:
                    f1:4e:0d:d7:88:5d:b2:a3:b0:a6:bd:54:66:cd:ba:
                    c3:78:86:7b:8d:b8:b5:cb:30:9f:61:9b:a6:91:76:
                    93:ed:35:b2:11:82:4c:3a:b8:6b:98:a6:0b:fe:82:
                    5d:d6:9a:9e:6c:5c:08:d5:a1:d7:4b:4a:98:01:4c:
                    a8:80:83:82:a0:8a:fb:6f:40:b1:46:93:80:3e:a3:
                    59:7e:03:61:b6:ce:7a:a9:aa:91:b9:a0:14:af:e0:
                    84:8c:28:c5:8c:15:6a:7a:b6:f0:0a:8d:76:77:af:
                    fa:4b:c3:13:1b:d2:3d:37:6b:88:6a:42:cf:38:34:
                    18:94:ad:3b:70:61:87:47:bc:30:9a:dc:df:23:a9:
                    6c:64:17:57:66:ec:9f:ef:b2:23:c0:18:76:c1:b3:
                    40:18:38:2e:51:53:da:a9:7b:21:93:d7:30:9b:c1:
                    dd:f7:52:9c:63:c9:ec:9b:3a:9a:d1:0c:9b:8c:95:
                    39:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:1E:A4:A2:47:66:0C:7F:77:57:41:74:F3:FD:D2:D3:8F:08:4A:15
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/cR6kokdmDH93V0F08_3S048IShU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.65.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:9d:a7:e2:78:d9:3d:21:c5:f9:70:36:4b:0d:38:0d:01:55:
         51:d3:2a:e4:07:a2:d2:35:4b:ec:6b:4d:fc:5c:f3:4e:47:fb:
         c5:fc:9d:bf:79:26:6c:13:85:59:a5:8f:23:86:45:c6:24:72:
         27:b7:de:9c:91:34:c7:fa:d9:ef:ac:99:6b:66:fe:d7:f5:96:
         b0:85:1a:88:c1:7e:6b:3c:6a:90:07:f5:48:3e:c4:d3:50:d4:
         e0:6b:39:6e:75:52:cb:d7:68:98:e3:1e:5c:8d:e9:8a:4e:31:
         95:a8:f1:7b:a9:d0:90:ba:24:ac:62:e9:55:07:5b:b8:54:bb:
         7c:b2:3a:ab:e8:ca:0d:ac:8e:d7:7c:57:02:9e:87:3a:f0:c6:
         c1:ac:66:16:cb:95:70:3d:dc:27:e4:e0:21:44:98:2b:d0:f4:
         20:ec:05:f0:fe:9c:3b:f9:20:13:70:ce:3b:61:78:e2:80:a3:
         97:2e:8e:73:58:48:19:ac:a5:35:e1:f8:14:ee:0f:f7:d9:3f:
         0c:33:1d:13:df:12:0a:a7:59:78:60:30:3f:d8:46:14:11:0a:
         2a:dc:54:85:68:25:f6:f7:8a:a2:dc:c3:cf:82:ad:0c:cb:89:
         49:72:26:11:65:33:b7:8a:ed:2e:2f:70:04:3a:bb:f0:d1:cf:
         86:65:6a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----