Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1No3v3x-zBW7eOxdOVvJgZViHMI.roa
File:                     1No3v3x-zBW7eOxdOVvJgZViHMI.roa (raw, json)
Hash identifier:          ZyY6gnQ9svJ1lBdegrPHckBeOM527lYpt19ZOrzY+PQ=
Subject key identifier:   D4:DA:37:BF:7C:7E:CC:15:BB:78:EC:5D:39:5B:C9:81:95:62:1C:C2
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       2287
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1No3v3x-zBW7eOxdOVvJgZViHMI.roa
Signing time:             Fri 25 Nov 2022 04:41:18 +0000
ROA not before:           Fri 25 Nov 2022 04:41:18 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        123.195.128.0/20 maxlen: 20

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8839 (0x2287)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:41:18 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=D4DA37BF7C7ECC15BB78EC5D395BC98195621CC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e0:79:57:f4:13:0e:6f:7d:6f:b3:74:e1:f7:
                    9d:e3:07:ec:ef:cb:f8:ff:16:3f:e5:69:67:52:0a:
                    3e:e6:b9:de:59:dd:49:61:9f:28:2c:65:96:5a:0a:
                    75:c0:50:b9:97:ab:39:46:78:62:52:c5:54:13:d1:
                    7e:fe:13:53:91:b1:df:5e:34:8d:0b:13:da:76:f0:
                    d0:41:89:f6:82:96:43:83:8c:5b:1c:f5:28:64:53:
                    ef:eb:bf:ea:29:a1:eb:90:cd:a8:71:e5:49:10:49:
                    61:88:95:60:9f:b7:1a:ca:44:8f:7d:14:3d:66:1d:
                    4e:04:65:83:b9:64:78:8e:3e:d8:d5:01:a6:42:1c:
                    2e:ec:a9:d0:73:46:0a:19:3f:89:bc:3b:89:ef:5a:
                    76:f8:d3:8a:3a:86:39:c3:7e:c3:73:b9:12:00:da:
                    c9:99:e6:af:58:cc:f9:86:96:75:00:75:08:6b:8b:
                    5e:01:d0:9a:be:df:43:d6:05:5d:bf:f7:f0:24:f4:
                    56:d4:aa:f2:c0:49:93:b4:43:0e:3b:c4:78:3c:fb:
                    66:6c:9d:53:26:a3:84:ca:88:9a:ac:04:1d:19:d5:
                    1d:8b:8c:70:41:ac:56:59:50:9a:f0:c8:d5:da:db:
                    97:df:6e:d3:22:4b:53:d1:6c:02:2c:8c:48:cd:7c:
                    f9:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:DA:37:BF:7C:7E:CC:15:BB:78:EC:5D:39:5B:C9:81:95:62:1C:C2
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1No3v3x-zBW7eOxdOVvJgZViHMI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         22:00:90:89:36:73:00:28:94:00:4f:b3:56:63:ed:f0:eb:a9:
         0a:47:e9:55:2e:f8:b7:99:3f:d5:3c:74:85:c8:4e:94:3f:98:
         a8:c7:d8:5d:81:c4:23:ba:e3:c8:5d:81:04:02:0f:fe:cb:19:
         9f:25:b7:17:f3:40:42:2d:d9:b1:89:d8:0f:1b:85:f5:78:ee:
         28:f6:91:9d:2c:8a:4c:f5:6b:a6:55:94:70:08:8a:63:a5:56:
         13:3e:78:85:c0:2e:a1:3c:2d:c0:56:b8:61:98:4d:6a:69:f1:
         fd:06:6a:4b:64:e0:b4:8b:d8:70:a5:6c:5e:47:94:c0:3c:1f:
         27:86:eb:12:57:00:41:93:28:f7:a1:81:f1:d5:36:c7:a7:a6:
         14:60:3f:a4:3e:aa:26:2d:a5:84:42:ec:34:56:f0:51:86:c8:
         08:29:48:35:29:9e:a3:bc:91:c1:61:04:45:0b:06:0c:34:fd:
         b1:d6:e6:9b:1c:c9:cd:46:1c:1e:75:14:75:7c:c9:a3:9e:2c:
         c7:5d:03:4e:c4:3f:62:0e:e5:2b:11:8f:ca:89:b1:7c:58:41:
         dd:ef:34:72:9c:a0:e9:9d:49:d2:d1:a4:74:36:42:c7:e8:f2:
         bd:c7:b4:30:09:27:f5:30:3b:d8:38:13:e0:9e:73:30:1b:47:
         0e:66:28:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----