Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWDS/cczRPOaEJvsvwVKYLbM9FwhyItE.roa
File:                     cczRPOaEJvsvwVKYLbM9FwhyItE.roa (raw, json)
Hash identifier:          LFeeYx2Ao2yNu2Lz78DOuk1GBw8i9KB4O/G9xcmT4A4=
Subject key identifier:   71:CC:D1:3C:E6:84:26:FB:2F:C1:52:98:2D:B3:3D:17:08:72:22:D1
Certificate issuer:       /CN=291BAF6A0C176CE0A32423666BCE78F9D91824CB
Certificate serial:       080B
Authority key identifier: 29:1B:AF:6A:0C:17:6C:E0:A3:24:23:66:6B:CE:78:F9:D9:18:24:CB
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/KRuvagwXbOCjJCNma854-dkYJMs.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TWDS/cczRPOaEJvsvwVKYLbM9FwhyItE.roa
Signing time:             Wed 09 Nov 2022 23:48:49 +0000
ROA not before:           Wed 09 Nov 2022 23:48:49 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     209557
IP address blocks:        2405:a640:1173::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2059 (0x80b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=291BAF6A0C176CE0A32423666BCE78F9D91824CB
        Validity
            Not Before: Nov  9 23:48:49 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=71CCD13CE68426FB2FC152982DB33D17087222D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6e:5f:22:bd:28:2f:6a:fa:74:ce:4c:15:a2:
                    36:5f:e5:f0:a4:10:e9:c0:a6:7b:27:5d:e2:79:93:
                    ae:a6:95:04:be:1d:7a:29:80:cf:d8:5b:5e:2c:eb:
                    2a:42:ce:55:7a:2f:24:95:aa:3c:a8:6f:e8:c2:27:
                    7e:8a:e4:66:16:0d:ce:bf:f4:1d:76:fc:37:79:fc:
                    79:7e:0c:1d:6f:f8:8c:ca:ed:c4:48:24:08:27:8d:
                    3f:90:84:ed:e9:5f:4a:51:92:37:3e:46:50:a2:7f:
                    32:bd:8a:d8:75:b3:ac:74:6c:17:0d:f0:8b:48:3d:
                    64:19:8a:5a:73:94:6a:42:61:3c:82:47:38:87:e8:
                    73:86:d9:c5:a9:38:57:c4:00:d7:72:0a:43:b1:23:
                    30:f6:50:a4:cd:b0:f6:1a:56:32:49:45:37:47:e4:
                    94:b5:68:3c:3c:73:6e:8a:d4:5e:1e:0c:49:76:d1:
                    7d:62:a6:38:ae:a1:5a:fa:c5:43:97:5c:4a:4d:08:
                    75:0c:47:c8:b2:e3:7f:e0:1c:28:56:7b:54:07:18:
                    c4:7b:c7:5a:f2:8b:15:01:d5:bb:e9:df:f1:1e:33:
                    34:df:99:47:66:ea:28:8b:11:c6:14:82:b0:6f:d9:
                    a9:d9:b5:f2:bd:9f:07:7c:87:b0:82:b8:09:3e:07:
                    dd:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:CC:D1:3C:E6:84:26:FB:2F:C1:52:98:2D:B3:3D:17:08:72:22:D1
            X509v3 Authority Key Identifier:
                keyid:29:1B:AF:6A:0C:17:6C:E0:A3:24:23:66:6B:CE:78:F9:D9:18:24:CB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWDS/KRuvagwXbOCjJCNma854-dkYJMs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KRuvagwXbOCjJCNma854-dkYJMs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWDS/cczRPOaEJvsvwVKYLbM9FwhyItE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:a640:1173::/48

    Signature Algorithm: sha256WithRSAEncryption
         76:21:fb:bb:72:9d:5e:d2:8d:b3:f7:0d:43:6d:a0:99:3c:a1:
         f8:27:4b:85:77:cf:e0:13:0e:2f:3e:09:3f:72:4b:87:d1:74:
         0a:3f:fe:97:52:42:95:70:b0:5d:aa:23:bc:2e:1a:bc:40:69:
         0d:84:73:ef:e1:02:38:26:a8:d8:10:69:51:f5:c2:30:21:35:
         64:99:e6:b4:cf:47:35:37:d6:10:c1:0b:0b:fd:3e:79:cd:49:
         ac:f4:08:3e:51:88:bb:d2:01:ee:a5:32:9b:a5:b8:b9:0b:cc:
         e6:9b:ec:07:48:3b:11:b8:1d:30:fe:6a:24:03:8d:fb:9b:5f:
         e8:99:57:b6:b7:fc:7a:e9:d2:26:89:f3:25:11:c4:46:8d:4a:
         53:2c:2b:39:56:50:00:34:a0:7b:1c:82:97:d1:e3:c1:4b:12:
         8f:8c:85:84:16:0e:54:34:4d:50:77:84:70:44:5e:35:28:3e:
         2b:14:87:56:4c:7f:d5:2b:6a:5b:6a:de:be:61:eb:37:86:24:
         be:93:db:e6:63:36:27:1a:51:1a:bb:b8:2f:47:f5:05:b1:25:
         64:ff:29:10:1e:d3:20:fe:5c:4b:eb:10:4b:ac:87:9f:4c:1a:
         58:20:6b:3e:8a:79:d2:19:7d:93:d6:c7:34:39:15:63:ef:47:
         f8:d2:ba:c9
-----BEGIN CERTIFICATE-----
MIIE0TCCA7mgAwIBAgICCAswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjkx
QkFGNkEwQzE3NkNFMEEzMjQyMzY2NkJDRTc4RjlEOTE4MjRDQjAeFw0yMjExMDky
MzQ4NDlaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDcxQ0NEMTNDRTY4NDI2
RkIyRkMxNTI5ODJEQjMzRDE3MDg3MjIyRDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCubl8ivSgvavp0zkwVojZf5fCkEOnApnsnXeJ5k66mlQS+HXop
gM/YW14s6ypCzlV6LySVqjyob+jCJ36K5GYWDc6/9B12/Dd5/Hl+DB1v+IzK7cRI
JAgnjT+QhO3pX0pRkjc+RlCifzK9ith1s6x0bBcN8ItIPWQZilpzlGpCYTyCRziH
6HOG2cWpOFfEANdyCkOxIzD2UKTNsPYaVjJJRTdH5JS1aDw8c26K1F4eDEl20X1i
pjiuoVr6xUOXXEpNCHUMR8iy43/gHChWe1QHGMR7x1ryixUB1bvp3/EeMzTfmUdm
6iiLEcYUgrBv2anZtfK9nwd8h7CCuAk+B937AgMBAAGjggHtMIIB6TAdBgNVHQ4E
FgQUcczRPOaEJvsvwVKYLbM9FwhyItEwHwYDVR0jBBgwFoAUKRuvagwXbOCjJCNm
a854+dkYJMswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFdEUy9L
UnV2YWd3WGJPQ2pKQ05tYTg1NC1ka1lKTXMuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L0tSdXZhZ3dYYk9DakpDTm1hODU0LWRrWUpNcy5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL1RXRFMvY2N6UlBPYUVKdnN2d1ZLWUxiTTlG
d2h5SXRFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQFpkAR
czANBgkqhkiG9w0BAQsFAAOCAQEAdiH7u3KdXtKNs/cNQ22gmTyh+CdLhXfP4BMO
Lz4JP3JLh9F0Cj/+l1JClXCwXaojvC4avEBpDYRz7+ECOCao2BBpUfXCMCE1ZJnm
tM9HNTfWEMELC/0+ec1JrPQIPlGIu9IB7qUym6W4uQvM5pvsB0g7EbgdMP5qJAON
+5tf6JlXtrf8eunSJonzJRHERo1KUywrOVZQADSgexyCl9HjwUsSj4yFhBYOVDRN
UHeEcEReNSg+KxSHVkx/1StqW2revmHrN4YkvpPb5mM2JxpRGru4L0f1BbElZP8p
EB7TIP5cS+sQS6yHn0waWCBrPop50hl9k9bHNDkVY+9H+NK6yQ==
-----END CERTIFICATE-----