Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6AcgKBJiAQmw2GUav1DNfsqOITI.roa
File:                     6AcgKBJiAQmw2GUav1DNfsqOITI.roa (raw, json)
Hash identifier:          1Yd1fhNH6Z97GLNCbu2uAfCvxq5maDaY43SMnF+iJmA=
Subject key identifier:   E8:07:20:28:12:62:01:09:B0:D8:65:1A:BF:50:CD:7E:CA:8E:21:32
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6AcgKBJiAQmw2GUav1DNfsqOITI.roa
Signing time:             Thu 15 Sep 2022 02:53:14 +0000
ROA not before:           Thu 15 Sep 2022 02:53:14 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        118.233.216.0/21 maxlen: 21

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8098 (0x1fa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:53:14 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=E807202812620109B0D8651ABF50CD7ECA8E2132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e5:fd:0f:ad:df:65:3f:a9:3f:49:60:b2:e7:
                    7f:48:dc:f0:b0:c0:e8:26:81:d7:b7:1b:24:96:70:
                    94:1c:c6:6b:ba:bc:66:56:fa:9d:39:30:b6:c0:a6:
                    2a:2c:98:b9:74:a3:9a:a3:2c:c4:26:2b:50:9a:10:
                    7d:6a:16:c3:22:4f:06:f7:3f:09:86:cc:e1:e4:84:
                    a1:c4:f9:76:85:13:b9:08:a7:a7:25:5b:da:6b:eb:
                    21:37:02:22:b5:de:e9:e3:89:8e:2d:87:b3:69:06:
                    6d:dd:8b:e0:96:84:7a:6d:67:90:99:b5:72:4f:4c:
                    ef:06:f5:23:bd:6d:c1:9b:a5:49:50:19:ba:a0:9d:
                    1f:35:51:39:5d:80:d6:a2:08:37:23:88:2e:8d:95:
                    4d:3c:d0:24:f7:85:88:d9:6e:b4:d7:cc:f4:43:a3:
                    8d:7a:dd:b2:e2:99:6a:46:dc:50:04:af:6a:16:9b:
                    f1:b5:18:c9:88:b7:e3:19:1a:99:ad:8f:3e:b5:21:
                    62:ad:a0:e7:da:3c:2b:b7:a1:ac:1c:b1:90:f5:63:
                    3b:5b:14:b5:7b:77:d0:a7:e9:40:e7:fe:25:a1:b7:
                    09:b0:9d:d0:fc:b2:97:3b:21:4f:bb:04:63:d9:3d:
                    de:b6:bb:b9:f0:b5:eb:34:e3:c3:ef:35:4e:29:59:
                    a0:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:07:20:28:12:62:01:09:B0:D8:65:1A:BF:50:CD:7E:CA:8E:21:32
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6AcgKBJiAQmw2GUav1DNfsqOITI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.233.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3d:75:53:86:f6:18:3e:6c:6b:8d:52:9a:10:0a:58:2d:e7:94:
         9c:04:4a:3f:b8:86:ef:bb:33:0f:60:4d:1f:34:61:3e:64:c4:
         88:74:7a:a5:32:c4:f5:bb:df:c7:65:82:0a:a3:9c:7a:f2:23:
         78:11:3f:80:5e:f7:68:f3:f5:3e:e6:96:f6:84:5a:29:62:50:
         c8:f1:21:1c:05:c2:75:77:f1:80:ac:1e:f3:9e:64:e5:02:a5:
         90:89:a4:31:59:4a:1c:25:05:e8:b6:b8:cd:e6:6b:fb:e7:b1:
         ce:d0:6f:b6:9d:b9:f7:a7:f8:6b:fa:16:be:87:0a:23:13:b1:
         1c:6c:36:c7:9b:df:c0:04:69:91:07:50:e3:3d:30:c6:e9:fc:
         76:cd:99:bb:d3:4a:09:3b:53:d2:30:81:ec:f7:a6:cb:5e:7d:
         64:ee:4d:93:d3:c2:af:62:6f:f6:e4:85:c6:21:54:d0:e3:2a:
         0b:32:be:79:14:f3:83:2a:e6:c3:ac:96:65:96:06:c2:5b:e8:
         65:4a:c3:a6:b2:30:f3:ac:ce:73:07:b7:09:92:40:24:48:3a:
         fd:2e:2c:bc:c4:4a:4f:3e:6d:f7:ab:46:38:38:17:5f:d6:86:
         20:19:ff:50:44:4e:51:e6:79:81:f9:0c:e5:73:13:27:53:5d:
         96:a1:80:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----