Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7Kdo03xDiZ1DWOHL5-gXIPQ1LOE.roa
File:                     7Kdo03xDiZ1DWOHL5-gXIPQ1LOE.roa (raw, json)
Hash identifier:          hA/e8HmqjuzN8PB3XRx1A5M7YB6mCm1jb/xqG5iREgQ=
Subject key identifier:   EC:A7:68:D3:7C:43:89:9D:43:58:E1:CB:E7:E8:17:20:F4:35:2C:E1
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       235C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7Kdo03xDiZ1DWOHL5-gXIPQ1LOE.roa
Signing time:             Fri 25 Nov 2022 04:43:29 +0000
ROA not before:           Fri 25 Nov 2022 04:43:29 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        106.1.222.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9052 (0x235c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:43:29 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=ECA768D37C43899D4358E1CBE7E81720F4352CE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:13:0a:dc:c9:01:4d:4e:c3:9d:45:44:21:90:
                    08:0d:9b:08:53:ff:5c:1a:58:40:88:34:ea:8c:58:
                    76:2b:13:1e:c9:ab:14:d9:7f:77:13:e1:14:d4:23:
                    de:5e:f2:6a:d5:f6:fa:2d:b1:76:7d:1e:27:62:82:
                    ec:24:22:38:38:4e:26:6e:49:db:ff:69:7f:19:2a:
                    87:ad:bb:70:1d:39:f8:c3:f1:32:93:b7:b9:0a:3a:
                    9f:03:84:5f:69:88:a5:95:ba:e0:a3:bd:18:9e:38:
                    73:2c:26:c4:d2:23:0c:22:a8:07:f3:64:68:18:19:
                    91:f3:a9:74:45:90:08:f8:54:1f:7c:68:ff:da:c1:
                    dc:98:35:bf:70:dd:29:af:cd:24:fc:5e:49:e5:a8:
                    60:b2:b2:f9:ef:c5:e7:45:f7:49:61:30:c9:3b:6e:
                    24:b9:21:01:cf:5f:3b:f0:3c:df:af:b4:38:a5:26:
                    57:6e:10:6b:75:6e:e3:43:03:0e:13:6d:1b:51:5f:
                    3b:2b:4a:17:e7:5b:0d:78:69:53:b3:02:65:1a:19:
                    fe:1a:16:be:56:37:8f:21:77:ab:21:9f:6d:3f:6c:
                    26:7c:a4:cf:07:c1:82:60:b5:77:2c:60:a8:f6:a6:
                    fe:14:2e:0a:76:d4:d6:d1:c9:73:2e:f4:d1:6f:f8:
                    93:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:A7:68:D3:7C:43:89:9D:43:58:E1:CB:E7:E8:17:20:F4:35:2C:E1
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7Kdo03xDiZ1DWOHL5-gXIPQ1LOE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:a8:92:ca:29:10:db:be:9a:82:eb:0d:f7:05:86:40:e5:f7:
         64:08:ad:df:b8:ce:ed:45:da:bb:78:ad:ad:38:32:67:e3:77:
         5e:1e:54:71:06:0d:64:ce:07:cd:16:8d:d0:80:d4:db:d3:18:
         23:7b:c9:06:ef:ef:7f:4c:ae:11:df:65:2f:aa:e5:f3:bc:e8:
         93:20:9c:db:30:ca:e3:90:55:c9:9f:47:03:40:ef:52:08:5e:
         54:f3:83:99:cc:f9:05:df:ea:2a:68:c8:29:bd:03:c7:be:88:
         b0:fa:3c:a4:76:07:9b:ea:59:1d:58:a6:b4:ab:0b:9f:b9:01:
         2e:53:80:81:87:91:73:2b:db:02:bb:97:e0:30:b1:06:49:4a:
         23:cc:c3:62:71:d8:50:9c:0e:2a:68:8d:c7:3a:d5:84:3e:7f:
         00:a1:b1:8b:b7:7e:ad:4c:15:91:af:a3:28:92:75:db:6e:01:
         5a:f6:fc:62:d0:61:53:1f:ed:fb:b2:ab:88:79:97:ff:ea:d2:
         5f:84:79:13:4f:4e:7c:58:b1:a6:61:93:b2:2f:c2:1e:4e:60:
         81:8a:c9:bf:be:cd:76:5e:13:55:61:c5:38:e1:db:8f:89:fd:
         54:16:df:84:52:b7:a7:f8:c0:7e:85:31:4d:ca:17:46:73:02:
         c3:12:df:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----