Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TDC/zvleWJ8n5ZXr5ygTWgVWBiQ1Imw.roa
File:                     zvleWJ8n5ZXr5ygTWgVWBiQ1Imw.roa (raw, json)
Hash identifier:          w/18RTxAiJHe97bv9f4eJ6mqQDRSCEwO+LrIf6/KO6w=
Subject key identifier:   CE:F9:5E:58:9F:27:E5:95:EB:E7:28:13:5A:05:56:06:24:35:22:6C
Certificate issuer:       /CN=063F818DACB171B835415ABD278993922F3CDC5D
Certificate serial:       05
Authority key identifier: 06:3F:81:8D:AC:B1:71:B8:35:41:5A:BD:27:89:93:92:2F:3C:DC:5D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Bj-Bjayxcbg1QVq9J4mTki883F0.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TDC/zvleWJ8n5ZXr5ygTWgVWBiQ1Imw.roa
Signing time:             Thu 15 Jun 2023 01:24:34 +0000
ROA not before:           Thu 15 Jun 2023 01:24:34 +0000
ROA not after:            Thu 13 Jun 2024 09:33:31 +0000
asID:                     18041
IP address blocks:        2401:a60::/32 maxlen: 32

Validation:               Failed, certificate revoked on Thu 30 May 2024 09:34:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=063F818DACB171B835415ABD278993922F3CDC5D
        Validity
            Not Before: Jun 15 01:24:34 2023 GMT
            Not After : Jun 13 09:33:31 2024 GMT
        Subject: CN=CEF95E589F27E595EBE728135A0556062435226C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5d:fe:50:53:cc:f8:94:0b:67:56:c1:ac:b7:
                    5f:e6:61:2d:ee:c2:96:b6:fa:83:7b:a5:bf:fa:14:
                    3a:92:ab:e9:6f:d2:18:3f:e0:5e:bf:37:5e:13:66:
                    2c:88:eb:63:28:d9:24:df:8e:80:e3:65:a0:9a:8c:
                    eb:ac:e1:de:71:74:4a:ac:0b:72:11:03:6e:ac:c9:
                    17:c8:10:19:13:a7:24:ec:06:34:a1:a9:ff:b2:c5:
                    3c:0e:a7:d0:25:40:67:2c:e4:27:eb:95:a3:2b:1d:
                    9d:4e:7c:ab:bb:28:92:89:04:bf:51:2c:f5:58:2c:
                    7a:8a:5d:5c:07:85:b5:11:bd:13:f9:d3:a4:27:e3:
                    33:a0:13:4c:a3:7b:1c:3b:54:22:31:89:04:46:36:
                    11:37:5f:28:67:8f:3e:a3:1a:cb:d0:1a:8b:08:9f:
                    a1:6b:d6:93:1a:50:b8:65:46:2e:fc:4e:a7:ce:79:
                    5b:62:0e:7f:5c:4a:b7:f8:35:90:11:86:cb:95:71:
                    8a:0f:8d:58:df:a8:9f:39:25:12:e7:16:0b:4a:d8:
                    30:8b:3b:5e:d0:ae:bf:34:92:cf:63:20:18:3e:a6:
                    3c:79:d3:e8:03:a3:7e:31:0b:0a:12:3a:c6:77:3e:
                    ed:a1:a6:ec:2a:a0:b4:9e:ad:23:b2:76:bd:2b:c5:
                    05:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:F9:5E:58:9F:27:E5:95:EB:E7:28:13:5A:05:56:06:24:35:22:6C
            X509v3 Authority Key Identifier:
                keyid:06:3F:81:8D:AC:B1:71:B8:35:41:5A:BD:27:89:93:92:2F:3C:DC:5D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TDC/Bj-Bjayxcbg1QVq9J4mTki883F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Bj-Bjayxcbg1QVq9J4mTki883F0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TDC/zvleWJ8n5ZXr5ygTWgVWBiQ1Imw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:a60::/32

    Signature Algorithm: sha256WithRSAEncryption
         4c:26:6a:ae:fe:d5:64:d4:0b:ec:39:42:ac:64:e7:aa:d4:6e:
         a5:1f:9f:5a:c8:ce:a0:34:6f:d4:93:cf:0a:35:f4:1b:b9:a4:
         ed:91:77:0e:c9:d7:80:40:4c:99:f2:00:bc:da:d5:f4:2d:50:
         4c:40:3d:13:52:4a:70:47:c3:21:17:6b:5e:05:c6:4c:53:13:
         ea:85:0e:17:92:66:69:c8:4f:ea:5a:b2:29:2e:a9:57:d1:c2:
         14:a6:b8:ab:d3:b0:64:a3:3b:59:c5:1b:90:62:8f:55:36:1d:
         5b:b2:d3:ec:e1:47:16:71:f5:84:7c:4d:dd:3e:0e:e0:76:43:
         6d:25:3f:89:c1:93:bb:ef:58:a3:a8:7d:dd:e0:69:1a:a7:df:
         a1:6c:a9:21:d0:9c:f4:78:bd:46:dc:a0:4b:9c:a2:2f:d4:c0:
         57:77:8f:2b:94:a8:98:bf:ef:4c:d7:ea:59:7a:5c:bf:33:39:
         34:1d:1e:76:cd:87:7d:e3:07:af:02:cb:9f:30:c6:43:45:c4:
         28:19:f8:42:e7:12:29:aa:bc:f8:0f:7a:6a:8a:70:c6:ab:3e:
         4c:5d:00:3a:5e:1e:bb:2b:8f:9d:40:07:c4:e3:2d:a1:28:15:
         b4:19:d9:1e:73:ad:89:ca:b6:9e:d4:c5:af:b9:b1:37:6c:6c:
         47:cd:d8:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----