Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6fJTfrEUmffVxvhsVb_TodrXwlI.roa
File:                     6fJTfrEUmffVxvhsVb_TodrXwlI.roa (raw, json)
Hash identifier:          NUeCoG1g0Nn8bPkvbZcdYiesEw9n62WeLYkwXY68KRQ=
Subject key identifier:   E9:F2:53:7E:B1:14:99:F7:D5:C6:F8:6C:55:BF:D3:A1:DA:D7:C2:52
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6fJTfrEUmffVxvhsVb_TodrXwlI.roa
Signing time:             Thu 15 Sep 2022 02:53:29 +0000
ROA not before:           Thu 15 Sep 2022 02:53:29 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        123.192.64.0/20 maxlen: 20

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8098 (0x1fa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:53:29 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=E9F2537EB11499F7D5C6F86C55BFD3A1DAD7C252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a1:e9:c6:aa:ef:43:04:a0:2b:12:00:ad:e0:
                    81:da:0b:03:9b:3a:7a:70:ad:c4:e1:68:87:1c:4e:
                    ae:e5:43:95:4c:6e:b7:7c:75:9a:14:68:a8:b2:99:
                    90:8e:62:61:dd:a6:2e:fd:e3:6a:cb:25:8b:f7:72:
                    77:9e:16:fd:3e:0f:d0:f3:b5:b0:ca:92:0c:c3:b9:
                    4b:9a:c1:7e:85:b9:f5:3f:70:ce:ea:22:4a:50:4f:
                    c4:6b:06:b9:df:e6:da:b4:e1:c8:e6:9a:fe:23:5a:
                    3c:01:31:69:27:99:f0:58:56:88:ec:92:1a:39:87:
                    ac:71:3f:ab:24:1a:27:04:ce:67:c5:1d:bc:a6:95:
                    d9:f8:d1:45:41:0e:32:77:9a:7a:47:0b:ff:34:83:
                    8a:f7:2c:f1:95:ec:69:9d:5e:d4:c7:1d:7c:22:ca:
                    6e:ab:3b:d4:b2:fb:78:39:3b:52:63:44:8a:40:94:
                    e9:86:2a:03:bf:3b:fe:56:38:57:29:2e:d7:7a:d3:
                    c0:95:68:3f:27:0d:85:e0:87:b2:a8:3a:5f:69:93:
                    89:08:c7:bd:2a:dc:4e:86:99:61:a6:53:7a:c9:f8:
                    d8:ca:e4:a0:14:8a:4e:aa:90:58:cd:8e:a5:0a:7e:
                    90:4a:e1:95:43:47:c0:20:a9:b0:77:2b:50:48:37:
                    ac:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:F2:53:7E:B1:14:99:F7:D5:C6:F8:6C:55:BF:D3:A1:DA:D7:C2:52
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6fJTfrEUmffVxvhsVb_TodrXwlI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.192.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         38:76:cf:84:21:df:6d:9e:38:37:4b:57:66:b7:27:61:9a:51:
         e6:1b:01:ba:6c:ee:2b:09:f5:94:00:91:78:63:e4:28:db:c2:
         91:0e:c5:bd:f3:d7:f4:06:4b:be:68:fa:87:1b:d2:d8:41:00:
         db:90:cc:27:db:ca:d2:8d:73:06:48:63:d5:f4:a1:93:17:ae:
         40:cc:03:12:cb:06:7b:24:9e:4e:81:4b:6e:0f:32:a3:e9:5b:
         dc:25:ef:0b:a0:16:9b:d7:ed:9b:d3:ed:bc:15:28:c6:fe:09:
         35:f0:1f:84:88:e0:d2:50:f0:69:6f:c5:89:67:18:e3:ce:7f:
         63:7b:18:c9:00:31:7f:f8:56:ce:81:c3:52:da:ce:2a:d5:3c:
         71:78:73:ad:a0:c3:70:c9:4d:6c:5d:a7:9f:9b:23:01:03:0c:
         6e:36:ef:45:a6:c0:90:74:26:4d:0a:8c:25:6f:48:60:7e:d0:
         75:f6:66:e4:b8:e6:78:25:4e:38:1b:b9:00:d1:34:23:2d:2a:
         eb:e8:07:d8:9f:a6:83:b9:3e:ac:7b:c7:5b:0f:7a:99:fd:ef:
         dd:e5:32:48:32:a0:07:d6:7a:0c:cd:0a:e9:16:5f:b3:74:b7:
         64:a0:de:e2:f5:c8:c2:e8:6e:76:5c:1e:30:2e:d6:79:b2:b5:
         2f:fa:3d:bd
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH6IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MTUw
MjUzMjlaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEU5RjI1MzdFQjExNDk5
RjdENUM2Rjg2QzU1QkZEM0ExREFEN0MyNTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDHoenGqu9DBKArEgCt4IHaCwObOnpwrcThaIccTq7lQ5VMbrd8
dZoUaKiymZCOYmHdpi7942rLJYv3cneeFv0+D9DztbDKkgzDuUuawX6FufU/cM7q
IkpQT8RrBrnf5tq04cjmmv4jWjwBMWknmfBYVojskho5h6xxP6skGicEzmfFHbym
ldn40UVBDjJ3mnpHC/80g4r3LPGV7GmdXtTHHXwiym6rO9Sy+3g5O1JjRIpAlOmG
KgO/O/5WOFcpLtd608CVaD8nDYXgh7KoOl9pk4kIx70q3E6GmWGmU3rJ+NjK5KAU
ik6qkFjNjqUKfpBK4ZVDR8AgqbB3K1BIN6w9AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU6fJTfrEUmffVxvhsVb/TodrXwlIwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzZmSlRmckVVbWZmVnh2aHNW
Yl9Ub2RyWHdsSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAR7
wEAwDQYJKoZIhvcNAQELBQADggEBADh2z4Qh322eODdLV2a3J2GaUeYbAbps7isJ
9ZQAkXhj5CjbwpEOxb3z1/QGS75o+ocb0thBANuQzCfbytKNcwZIY9X0oZMXrkDM
AxLLBnsknk6BS24PMqPpW9wl7wugFpvX7ZvT7bwVKMb+CTXwH4SI4NJQ8GlvxYln
GOPOf2N7GMkAMX/4Vs6Bw1LazirVPHF4c62gw3DJTWxdp5+bIwEDDG4270WmwJB0
Jk0KjCVvSGB+0HX2ZuS45nglTjgbuQDRNCMtKuvoB9ifpoO5Pqx7x1sPepn9793l
MkgyoAfWegzNCukWX7N0t2Sg3uL1yMLobnZcHjAu1nmytS/6Pb0=
-----END CERTIFICATE-----