Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/oqNQpCjEpggzz8RcNwpufUuWOT4.roa
File:                     oqNQpCjEpggzz8RcNwpufUuWOT4.roa (raw, json)
Hash identifier:          wLcLZloOnI+ip3L3oLarveFRo4SvDorOTOngDZYhJ1I=
Subject key identifier:   A2:A3:50:A4:28:C4:A6:08:33:CF:C4:5C:37:0A:6E:7D:4B:96:39:3E
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       0DC9
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/oqNQpCjEpggzz8RcNwpufUuWOT4.roa
Signing time:             Thu 15 Sep 2022 02:47:25 +0000
ROA not before:           Thu 15 Sep 2022 02:47:25 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     9924
IP address blocks:        60.199.193.0/24 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3529 (0xdc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Sep 15 02:47:25 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=A2A350A428C4A60833CFC45C370A6E7D4B96393E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:46:d8:18:9f:33:86:61:f9:9f:39:20:8c:38:
                    50:99:2c:b0:44:47:83:54:e8:0d:4d:74:db:22:d6:
                    1b:b7:2d:7d:2d:19:c2:76:e8:dc:c3:9d:ad:79:1d:
                    1f:a2:8c:15:21:9e:be:d6:29:df:14:dc:79:bb:e6:
                    2a:1b:1f:9e:ff:c8:bb:2e:f4:6f:74:ab:3f:b6:99:
                    c4:fa:5d:5d:63:38:57:f7:e3:5b:07:41:3b:6b:07:
                    bd:9f:f5:2b:66:1a:a8:03:95:ad:9b:ef:ac:73:e6:
                    41:bf:c4:57:ae:32:76:fc:ab:81:96:2c:76:e3:90:
                    4e:4b:41:1e:ec:e4:20:7f:f1:ed:d3:b1:05:b9:ad:
                    73:27:4c:04:93:99:82:a4:9f:95:6c:72:a4:ae:2e:
                    b0:9c:8d:e4:21:ae:f6:43:64:4e:57:92:59:23:dd:
                    ad:d2:f6:6d:de:f5:a2:82:80:4f:47:78:80:0d:bf:
                    83:3d:cf:4f:87:af:e1:25:3e:cc:17:93:eb:95:c2:
                    24:91:09:5a:0e:b1:9c:ef:7b:45:58:f3:1d:29:a8:
                    f9:d0:b7:4b:c6:da:2c:eb:50:2e:76:35:b1:38:57:
                    4f:ff:b3:32:8d:19:fa:69:36:ef:b6:a1:22:dd:5b:
                    28:c8:ee:d0:0a:e3:4f:90:95:2f:93:a3:71:d8:12:
                    80:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:A3:50:A4:28:C4:A6:08:33:CF:C4:5C:37:0A:6E:7D:4B:96:39:3E
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/oqNQpCjEpggzz8RcNwpufUuWOT4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  60.199.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:08:28:ba:3e:04:d3:d7:b6:03:bf:41:91:d2:84:2c:8c:b4:
         9d:0a:2b:1e:5b:47:50:c0:d7:54:af:b4:35:6e:ef:b0:d0:02:
         c3:df:53:83:2c:21:22:f3:f2:38:eb:dc:73:7a:07:a5:10:75:
         a3:40:8f:83:d0:2f:2f:85:22:01:41:36:c0:ba:97:b5:ed:ef:
         96:a2:c3:3e:be:b0:4f:2f:28:e0:04:8d:4b:91:cb:f6:58:7c:
         f8:f2:c7:aa:5b:ad:d7:1a:c5:48:d6:f4:2c:ef:89:8c:eb:7c:
         9e:9b:71:8c:e7:af:95:a5:37:63:d9:f4:31:f8:71:77:f1:95:
         20:5b:4b:39:a8:08:3d:db:10:8a:49:eb:73:96:6a:8e:44:1c:
         07:a0:a4:54:67:08:70:86:b8:06:d9:ad:7a:fc:79:b6:6a:71:
         1e:10:19:fb:cf:54:c0:fd:35:ed:d5:d2:ba:98:5f:76:ad:13:
         9e:19:88:b6:ff:0f:67:36:ef:8c:67:03:81:8a:32:a4:ec:a5:
         51:99:eb:dc:0a:79:3d:de:17:92:af:2e:63:a2:0c:0a:b0:50:
         ba:aa:03:2f:9e:51:f2:b0:ee:eb:80:2d:bf:a9:57:1b:b9:3c:
         33:3b:44:96:ee:1b:29:c2:3e:6e:81:75:54:25:55:88:96:ce:
         12:a5:ff:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----