Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2Ens1TzQpQ1xVzHDeEFoVz6Mo6U.roa
File:                     2Ens1TzQpQ1xVzHDeEFoVz6Mo6U.roa (raw, json)
Hash identifier:          SWpH+pfbuB5MZa1DJynB7lXkJbMKR6c5vuUSKXkfvf8=
Subject key identifier:   D8:49:EC:D5:3C:D0:A5:0D:71:57:31:C3:78:41:68:57:3E:8C:A3:A5
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2Ens1TzQpQ1xVzHDeEFoVz6Mo6U.roa
Signing time:             Thu 15 Sep 2022 02:45:28 +0000
ROA not before:           Thu 15 Sep 2022 02:45:28 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        106.1.181.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8096 (0x1fa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:45:28 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=D849ECD53CD0A50D715731C3784168573E8CA3A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:29:9e:56:55:37:5b:df:70:bf:86:f9:e3:23:
                    ca:a6:1a:ef:26:eb:bd:18:61:23:65:d8:a7:75:02:
                    ec:5e:0a:fa:17:76:7b:4e:51:a6:24:b9:0a:db:9d:
                    86:eb:4b:48:c7:fd:8b:8c:fb:26:ab:27:00:00:af:
                    ef:ec:e2:e9:f1:2f:89:53:12:82:72:91:2d:b6:57:
                    ec:1b:4b:76:62:fb:c1:32:0d:19:43:4e:9c:be:52:
                    df:ad:07:a3:b6:c1:ad:c8:63:b5:41:16:8c:a5:71:
                    e4:a3:63:a5:4d:e5:38:fc:a5:7a:de:8a:b6:38:e7:
                    b2:29:1b:9d:95:76:23:0b:8b:2c:0e:80:cc:20:8e:
                    2a:8a:47:3c:a1:87:70:87:c8:e2:46:71:f6:25:5c:
                    c5:02:2f:b0:a5:8d:7b:99:38:9b:0d:32:e1:67:d3:
                    23:70:61:f7:bf:7a:f2:26:e9:85:66:4f:ea:9e:55:
                    37:23:9b:7f:b4:91:fd:55:3e:ee:13:2a:82:81:8a:
                    03:e4:d3:38:f2:98:be:f5:8f:54:3e:d3:a5:ca:c5:
                    1f:87:23:bb:12:12:f8:07:67:ce:82:69:e7:69:df:
                    b9:92:cd:e0:12:d9:0b:3f:71:71:d9:5b:6e:94:3e:
                    70:0d:47:da:c2:1d:6a:94:d9:1a:d7:78:95:6e:f2:
                    ae:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:49:EC:D5:3C:D0:A5:0D:71:57:31:C3:78:41:68:57:3E:8C:A3:A5
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2Ens1TzQpQ1xVzHDeEFoVz6Mo6U.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:6e:2e:2a:ed:04:3e:46:69:1c:28:28:a2:d9:2d:bd:88:92:
         8a:71:51:e7:79:0e:e1:3f:90:aa:e2:7b:e2:6f:58:d3:56:ae:
         cb:f4:99:4e:49:81:ae:46:35:ca:db:55:30:52:bb:10:d2:91:
         0b:54:73:0a:37:5c:c2:74:71:38:f9:46:e4:b3:17:f3:01:23:
         a4:f6:ea:a9:e1:65:1d:3c:b8:e3:de:44:95:94:85:36:96:04:
         4a:9f:e2:45:91:e6:49:13:4c:4d:04:9b:d5:63:0b:11:9b:95:
         1c:8f:ec:99:c4:72:a9:29:11:6f:da:1d:b0:74:88:82:59:ea:
         06:fc:43:90:99:d9:48:18:16:09:a2:1a:64:5a:cc:66:3f:74:
         85:3d:0e:e9:27:9e:b4:33:c6:e8:f4:4f:65:7c:6a:f9:be:c5:
         0e:18:55:9c:0e:12:92:5d:80:08:c4:fa:72:51:33:e7:59:c4:
         3e:d9:35:cf:76:df:d3:82:6e:53:da:99:c3:93:6e:ef:9b:dc:
         ef:c5:38:37:e9:3f:37:c0:37:0f:8a:c4:50:58:68:33:8f:94:
         bc:25:94:21:a1:bd:25:fb:e7:97:ec:05:36:ad:b3:72:89:ba:
         e9:4d:3c:27:91:be:30:05:13:84:5c:94:5e:75:e6:99:02:69:
         f3:62:17:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----