Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3c-ENSRSlXR4-LSTdXeK70OXcR0.roa
File:                     3c-ENSRSlXR4-LSTdXeK70OXcR0.roa (raw, json)
Hash identifier:          QQorq9ToSmp7PqPUs+jsbyl9Uw3eRaXDB7IkxPX2+wg=
Subject key identifier:   DD:CF:84:35:24:52:95:74:78:F8:B4:93:75:77:8A:EF:43:97:71:1D
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       20F0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3c-ENSRSlXR4-LSTdXeK70OXcR0.roa
Signing time:             Fri 25 Nov 2022 04:39:18 +0000
ROA not before:           Fri 25 Nov 2022 04:39:18 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        123.193.232.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8432 (0x20f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:39:18 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=DDCF84352452957478F8B49375778AEF4397711D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9d:ef:7c:db:6e:25:64:ca:ca:1e:7f:28:65:
                    9b:53:7e:db:a8:43:eb:71:2c:a1:3b:31:47:be:3b:
                    94:ca:b9:84:cd:58:3b:43:e8:60:a6:b1:f6:e0:f3:
                    63:1c:7e:bc:5d:df:05:32:dc:e9:d9:e0:46:56:9b:
                    bf:fb:25:e2:48:82:f1:72:ec:cf:27:34:c3:98:2d:
                    d2:cb:b7:a8:a1:87:ec:1c:a2:65:80:07:86:8b:d4:
                    45:2b:04:ae:00:77:e0:f5:5a:74:46:2e:00:fc:13:
                    80:b7:8f:72:bc:a5:a1:a4:3b:66:80:22:8c:ee:6d:
                    f3:0c:b8:fa:0f:83:37:44:88:0a:8e:c2:32:88:a2:
                    1d:c5:e6:fb:94:f4:ed:cf:6f:ce:00:1b:86:e0:a6:
                    dd:c2:90:af:ac:96:96:df:11:af:77:e4:ce:9b:86:
                    65:13:92:bd:48:fd:12:e0:46:8f:6f:f0:e2:7c:67:
                    ed:a2:84:83:dd:7e:f8:bf:8b:90:bb:2a:cb:ae:82:
                    81:f6:44:34:11:df:6e:0b:f7:09:52:e7:d5:a6:63:
                    8e:c9:4f:20:79:95:0c:77:c2:ce:6a:93:e5:5c:16:
                    72:85:82:54:26:6e:0b:f9:1d:af:80:f3:72:a0:b9:
                    79:59:86:14:87:fc:2b:78:82:d2:0a:cf:27:ab:bc:
                    ee:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:CF:84:35:24:52:95:74:78:F8:B4:93:75:77:8A:EF:43:97:71:1D
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3c-ENSRSlXR4-LSTdXeK70OXcR0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:62:7b:36:1b:ee:27:c5:e9:68:69:14:3c:04:f2:ad:a3:2d:
         b9:39:46:d1:8a:af:cd:e2:5c:09:f9:fa:1a:63:2f:b2:56:61:
         89:75:78:bb:77:86:37:11:e4:5f:2d:3d:2b:3f:52:d8:bd:36:
         9e:51:81:ef:5c:1e:12:9b:56:cc:20:87:33:4a:b6:eb:57:4a:
         0c:9d:0a:55:f3:33:91:7a:cc:d6:57:16:2a:13:cc:8a:32:29:
         1c:3c:09:b7:1b:04:6e:78:95:d4:48:b0:fc:7b:f8:01:48:ef:
         43:77:df:b2:a9:07:46:c3:a4:7b:d7:97:fe:39:73:84:2b:20:
         17:45:b8:52:25:81:8f:a1:84:9f:0d:c5:9f:bb:f3:31:1b:c9:
         68:07:08:6e:c0:76:d3:6a:82:ce:17:de:fe:05:a5:75:d6:74:
         ce:b2:8e:59:3c:11:5e:1c:ee:85:3f:b3:63:58:8b:b5:0e:e2:
         38:aa:35:50:f2:71:fc:d6:64:8a:f7:fe:32:03:e1:36:de:2f:
         ea:39:b8:d5:25:41:eb:22:b4:a5:2c:84:65:2e:39:b8:9b:aa:
         b9:af:a3:05:c4:5e:70:50:e5:20:95:4c:da:96:c9:59:ae:22:
         2d:cd:f9:59:86:59:2c:48:22:b6:f2:f6:b7:b5:7e:b1:fb:c9:
         a1:28:00:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----