Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5cUKyy1yPu-waPGM77GT7fKqFow.roa
File:                     5cUKyy1yPu-waPGM77GT7fKqFow.roa (raw, json)
Hash identifier:          UWlrXmaVfk1RSjnpEHRWtPJBUjqyPQTCUt1Fd+FXa9I=
Subject key identifier:   E5:C5:0A:CB:2D:72:3E:EF:B0:68:F1:8C:EF:B1:93:ED:F2:AA:16:8C
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5cUKyy1yPu-waPGM77GT7fKqFow.roa
Signing time:             Thu 15 Sep 2022 02:45:41 +0000
ROA not before:           Thu 15 Sep 2022 02:45:41 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        118.232.128.0/21 maxlen: 21

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8096 (0x1fa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:45:41 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=E5C50ACB2D723EEFB068F18CEFB193EDF2AA168C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:b6:1a:0d:e9:4f:57:ab:22:fb:ca:54:84:3c:
                    17:f3:d8:a1:70:2c:5a:c7:3f:47:be:a4:a4:f0:f8:
                    e3:56:fe:6a:55:1e:6a:04:2c:eb:79:14:2e:26:61:
                    88:ee:78:45:2b:af:ee:c4:2a:64:7b:4a:68:d4:88:
                    5b:64:53:ca:31:2a:bc:c1:c6:a5:22:64:af:bf:f7:
                    14:8d:48:8d:81:0d:a9:b6:51:fb:de:e6:d9:73:09:
                    69:d5:d6:12:6e:67:29:7a:c4:e6:a8:21:59:e7:f3:
                    50:50:88:cf:76:84:d9:62:f7:cd:35:ea:7d:0c:17:
                    eb:2e:2b:f1:bd:16:e4:62:1b:cc:67:10:64:fd:58:
                    f5:18:01:8a:e2:98:1c:c1:50:49:79:0a:5e:04:04:
                    0d:23:7f:b3:94:58:79:c1:81:43:61:2c:26:d2:46:
                    13:ed:6f:4d:6c:34:c9:d8:87:71:a4:33:c0:81:a8:
                    71:9b:64:4f:cb:22:71:69:bb:56:f8:7b:48:79:25:
                    7e:0b:6d:8d:d2:aa:26:17:aa:03:f1:f9:88:6e:1f:
                    2d:84:3c:5b:e1:b2:5d:3a:2f:e7:0f:d4:d7:19:fb:
                    bc:f5:20:57:d9:d7:7f:a5:6b:7e:24:05:dd:e5:65:
                    5b:77:f7:f5:1c:de:37:32:7d:a9:0d:05:ec:1b:3d:
                    c5:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:C5:0A:CB:2D:72:3E:EF:B0:68:F1:8C:EF:B1:93:ED:F2:AA:16:8C
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5cUKyy1yPu-waPGM77GT7fKqFow.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         68:d5:1b:f6:06:9c:d7:7c:c1:b1:90:5d:b6:19:c2:c0:3b:6f:
         89:c1:fa:11:5a:14:10:c6:f2:86:25:7e:f4:64:2e:fb:a6:da:
         4b:96:fc:c0:b7:e2:01:72:00:d1:d2:bf:93:0e:1f:60:2a:0b:
         5c:d6:ac:cd:f8:42:ad:cd:2d:34:bf:71:41:84:39:25:dd:3c:
         ee:e6:22:42:9a:f4:0e:56:3d:25:ce:48:47:8a:ae:7f:77:42:
         11:18:98:e7:5d:ba:b3:59:e3:40:6b:95:a7:44:a9:dd:23:f2:
         7c:14:3e:50:9e:b1:4b:2b:81:2e:af:27:32:f6:74:91:63:37:
         e0:f6:e8:be:28:a8:84:ef:c8:28:3b:0f:3c:7d:c3:85:f4:32:
         45:d8:79:8e:cd:44:26:b4:65:85:98:37:36:14:e9:f0:de:16:
         5a:3d:26:c8:d2:f5:23:c7:a3:9b:3e:2e:e6:39:6d:d3:87:53:
         40:3c:c6:af:90:2d:69:1a:42:ed:73:f1:45:52:84:f9:20:4c:
         6a:42:71:f9:ef:12:de:25:25:5e:69:c7:10:ee:38:f0:ca:9a:
         99:00:a4:b3:6b:c3:f7:e1:2b:37:09:59:9f:c6:23:a2:c3:fb:
         e3:37:4f:8e:50:f3:69:db:55:ec:ee:09:03:d7:d5:2d:fe:e5:
         63:3f:6d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----