Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/38vYBCNwWmznHnvWulxl4HZsL1M.roa
File:                     38vYBCNwWmznHnvWulxl4HZsL1M.roa (raw, json)
Hash identifier:          SLPG3aV9J+Q2kydAGPeQ/GUFxAefnALpsRd/vgpU/4E=
Subject key identifier:   DF:CB:D8:04:23:70:5A:6C:E7:1E:7B:D6:BA:5C:65:E0:76:6C:2F:53
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       235B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/38vYBCNwWmznHnvWulxl4HZsL1M.roa
Signing time:             Fri 25 Nov 2022 04:43:29 +0000
ROA not before:           Fri 25 Nov 2022 04:43:29 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        2407:4d00:ff09::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9051 (0x235b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:43:29 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=DFCBD80423705A6CE71E7BD6BA5C65E0766C2F53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:61:fd:58:54:e8:27:1b:e0:1d:27:38:f7:7f:
                    77:55:56:87:2d:ec:97:eb:6e:fc:79:22:70:ad:7d:
                    75:40:45:a3:f2:68:3d:47:04:ad:fb:55:ab:b9:2f:
                    45:85:ac:28:7b:4e:0e:a7:5c:a8:13:fd:f6:30:3e:
                    8c:42:11:b2:fa:89:b2:d7:f9:fb:0f:b1:0c:a2:8e:
                    c6:33:0b:10:77:b1:5e:8c:e8:e0:37:18:ca:29:ab:
                    a5:92:cf:a2:1b:09:5a:cf:ee:21:ad:18:70:1d:87:
                    73:12:66:d4:b3:6b:dc:1d:6d:dc:1d:56:94:a4:87:
                    65:d6:9f:d1:dd:b1:7b:34:36:9e:82:f7:35:5e:74:
                    3b:29:23:7e:35:9e:47:24:39:f5:96:7d:16:2f:30:
                    fb:fb:08:4a:b6:5d:9d:c5:13:6a:89:b3:58:57:02:
                    37:21:47:8c:73:30:51:2a:2c:3b:5b:98:c4:91:99:
                    00:d2:e0:0a:66:4d:7e:7f:d8:0d:d2:e5:99:87:d6:
                    25:51:b9:3c:9c:84:50:d6:c6:b8:a7:78:06:fb:00:
                    4b:e4:1e:4e:b4:04:c2:3a:77:6a:f3:c4:c1:4a:71:
                    85:47:e8:87:86:37:6d:12:b7:37:65:16:42:6f:d8:
                    90:f9:f8:b6:4d:c0:87:e9:15:62:43:26:01:0a:af:
                    24:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:CB:D8:04:23:70:5A:6C:E7:1E:7B:D6:BA:5C:65:E0:76:6C:2F:53
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/38vYBCNwWmznHnvWulxl4HZsL1M.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:4d00:ff09::/48

    Signature Algorithm: sha256WithRSAEncryption
         0f:25:94:86:3e:f5:94:78:8a:3a:50:b1:dc:76:b6:13:49:79:
         e3:a7:3c:b4:82:7f:c6:6d:63:fe:57:4b:de:46:34:36:de:a8:
         df:a5:76:67:fb:06:b5:cf:9d:5e:39:4f:fa:b0:80:93:cf:cf:
         76:95:71:48:71:8b:a4:56:8a:e7:1f:b6:72:53:7e:13:d0:46:
         ae:0f:ae:aa:d3:bd:a2:62:bf:3b:14:07:e7:e9:c6:dc:22:a6:
         7d:c0:c1:89:36:bf:77:22:26:3f:6f:52:db:d8:28:0d:3f:24:
         09:1c:ad:e3:d5:a3:4a:ca:f2:d4:ba:2c:c0:bc:86:37:c2:5b:
         00:fd:f2:cd:1e:4e:83:c0:bc:15:94:01:66:0f:4f:50:0a:b0:
         13:3e:35:c0:78:77:5b:fb:93:c1:c9:92:a1:7e:97:1f:02:a6:
         5a:3d:d3:a6:37:cf:ff:00:d7:e2:c9:96:f5:3c:9c:dd:a7:bd:
         89:32:52:40:19:8a:12:f5:3e:69:f6:59:d5:a8:9e:e7:52:fe:
         1a:f1:99:d0:40:b0:0d:7e:7a:7b:2d:fc:c6:c9:77:0b:5e:ca:
         48:0e:27:aa:52:da:c5:08:0d:10:5c:8f:fb:76:8f:9b:83:5c:
         cb:8c:29:f6:b3:33:18:f4:ee:eb:bd:9a:f6:c8:af:6d:12:c9:
         b5:53:26:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----