Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6XSLpJH99izn5bvvPP6R8nOj2Og.roa
File:                     6XSLpJH99izn5bvvPP6R8nOj2Og.roa (raw, json)
Hash identifier:          YZM1rFWUpyD9SriwPTO+MJ74qgh1/1c4JKQJSeuybH0=
Subject key identifier:   E9:74:8B:A4:91:FD:F6:2C:E7:E5:BB:EF:3C:FE:91:F2:73:A3:D8:E8
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6XSLpJH99izn5bvvPP6R8nOj2Og.roa
Signing time:             Thu 15 Sep 2022 02:46:04 +0000
ROA not before:           Thu 15 Sep 2022 02:46:04 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        123.194.205.0/28 maxlen: 28

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8096 (0x1fa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:46:04 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=E9748BA491FDF62CE7E5BBEF3CFE91F273A3D8E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d4:7d:c4:78:a9:1b:32:6b:93:b2:bb:2b:61:
                    42:07:08:85:73:6a:4e:57:a9:0b:ec:8c:60:2e:ac:
                    41:5c:b3:7a:f6:e9:5c:a6:78:0e:84:e8:1e:19:b5:
                    d9:69:fe:d3:e1:6a:7e:18:21:e9:6b:c4:2c:c6:a3:
                    74:09:aa:27:15:50:fb:2b:3b:66:8b:df:d8:88:63:
                    1c:71:60:b3:4e:d9:2b:94:cc:3b:44:6f:1c:92:d8:
                    d9:cd:67:c7:6b:fc:42:e6:bd:fa:71:a8:b7:e9:e9:
                    9c:cc:3b:92:18:62:a3:5e:f2:5c:70:e1:3f:80:ff:
                    a3:36:88:ea:f0:1b:f2:53:f1:fc:b4:9e:d6:8e:bf:
                    26:6a:c5:d3:61:9f:c1:d0:6c:5d:56:74:65:6a:10:
                    ab:a3:a0:f8:88:cb:18:9b:43:57:85:aa:c4:08:c6:
                    64:7f:33:b1:4a:94:8c:ce:9e:bd:04:6d:88:68:32:
                    cc:c9:b4:27:fb:45:fe:f6:24:f6:d0:50:e4:fd:79:
                    cd:23:56:ca:12:b6:b7:f7:14:91:5d:8d:a0:f1:46:
                    16:39:ab:a6:87:73:a7:c4:31:8a:54:09:86:84:b0:
                    9c:53:88:ae:87:86:a1:05:a7:df:c1:61:2c:ee:a0:
                    81:67:5b:d5:7d:d1:07:43:d0:4e:63:1a:92:c9:10:
                    8c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:74:8B:A4:91:FD:F6:2C:E7:E5:BB:EF:3C:FE:91:F2:73:A3:D8:E8
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6XSLpJH99izn5bvvPP6R8nOj2Og.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.205.0/28

    Signature Algorithm: sha256WithRSAEncryption
         6a:c9:41:e2:ac:cc:3b:7a:fb:46:d2:76:b7:f2:50:61:30:44:
         30:e2:d8:53:42:5a:10:67:5d:7a:5d:b3:e8:7c:28:67:8b:54:
         1c:f6:f7:28:b7:56:01:5e:73:e5:31:ee:08:98:ae:b1:87:d2:
         4f:4b:dd:52:9e:a5:68:83:bc:60:ae:ce:7e:e0:5a:d5:5e:6f:
         9a:4e:ec:b7:72:60:73:b0:5c:b7:cf:9b:7a:4f:18:45:41:d1:
         28:cc:76:d1:6f:3c:a1:c0:c6:35:08:e6:6e:9a:48:df:d5:10:
         91:1d:5a:f1:5b:6d:1e:33:d8:4d:b6:a3:1b:14:b3:a1:19:6e:
         8f:b0:e4:34:7e:71:13:9a:e6:21:b4:4d:78:59:85:48:cb:35:
         46:26:41:14:23:ad:d8:f9:ed:47:5b:56:87:44:a7:d9:68:45:
         06:b9:ef:f5:02:c7:dd:96:a1:bd:cd:c7:a8:9b:21:a5:16:44:
         48:0a:be:79:85:8a:93:8d:50:ad:0b:cc:84:00:5d:04:34:a5:
         78:d8:f9:6a:f5:35:48:6f:51:a7:24:c5:c4:a9:16:34:7e:66:
         9f:17:e8:fa:0c:8f:58:7f:af:88:1a:2e:3e:21:78:6d:04:66:
         03:fc:c7:cc:a6:6c:44:78:29:d5:e2:c5:0b:47:7f:7c:2e:a8:
         ab:f2:6f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----