Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8Djcxb0DThikZjTeF0LBnwyMS5w.roa
File:                     8Djcxb0DThikZjTeF0LBnwyMS5w.roa (raw, json)
Hash identifier:          1MqpzTPyYqbl0zOSj1ZxS05gZ7BBXWPwuBNpZZsEh8g=
Subject key identifier:   F0:38:DC:C5:BD:03:4E:18:A4:66:34:DE:17:42:C1:9F:0C:8C:4B:9C
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       20AD
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8Djcxb0DThikZjTeF0LBnwyMS5w.roa
Signing time:             Fri 25 Nov 2022 04:38:59 +0000
ROA not before:           Fri 25 Nov 2022 04:38:59 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        180.177.24.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8365 (0x20ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:38:59 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=F038DCC5BD034E18A46634DE1742C19F0C8C4B9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f7:53:52:96:03:ff:7d:31:d0:9b:ea:87:d6:
                    3f:ad:64:cf:30:ad:70:8f:87:c0:1a:d8:8c:54:8c:
                    83:60:d8:a2:78:7e:de:fc:95:42:56:a0:9d:dc:11:
                    bd:e1:a6:80:b4:95:06:a2:24:b3:aa:fc:3e:49:23:
                    e4:71:5f:df:4d:a3:6c:fa:08:c1:d7:0d:86:12:ac:
                    b4:81:c7:e4:3a:dd:da:3e:c3:06:a8:72:e7:10:6d:
                    f1:ef:2b:3c:1a:3c:97:51:21:d9:b8:f0:6e:80:be:
                    ec:1b:d3:19:e0:6d:73:5f:f7:da:b4:87:94:90:2d:
                    c0:65:34:5a:b3:e7:e3:02:5e:7d:ff:fd:94:01:79:
                    cf:e0:c4:70:05:57:53:67:10:0b:22:d6:1c:d9:ca:
                    d0:5c:54:4f:8d:e4:87:ab:a7:ff:f6:d3:e1:47:38:
                    a3:5b:e0:e4:11:49:ac:df:95:9b:f0:bf:1d:66:8d:
                    9b:05:f0:16:a8:9a:45:ff:91:c3:d3:84:d3:a5:6c:
                    ac:26:c9:a9:d1:ab:f9:b5:c9:36:a8:99:eb:59:7b:
                    16:04:f5:5a:02:d3:32:0a:02:54:17:a0:33:24:8d:
                    f3:7f:22:77:c5:60:76:3b:a6:7a:9b:bd:85:9a:27:
                    7a:19:1d:48:ee:e9:ac:52:e9:a5:6e:8e:92:bb:10:
                    45:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:38:DC:C5:BD:03:4E:18:A4:66:34:DE:17:42:C1:9F:0C:8C:4B:9C
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8Djcxb0DThikZjTeF0LBnwyMS5w.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         aa:b2:42:c1:2e:9f:1e:ab:71:ef:57:bb:a9:f6:4a:54:99:b3:
         03:49:b8:9e:8d:fa:28:04:4d:6d:a3:9b:12:8e:32:3c:b2:18:
         f9:44:dc:f0:35:c6:52:fd:48:68:10:61:10:c1:d2:b1:8f:89:
         33:47:b0:07:90:b3:de:08:aa:47:8d:a1:3f:a9:20:63:e1:54:
         b5:dc:5a:ee:56:89:d7:45:aa:d5:06:88:b5:d9:63:36:3b:9b:
         fa:5d:d4:b3:e9:80:46:ae:84:6e:e6:aa:60:e0:e3:bb:81:53:
         7d:43:4f:ce:2a:10:07:5a:1b:2a:48:3e:76:2c:2c:d8:1d:8c:
         bf:8b:cb:ac:6a:df:73:35:ad:8c:15:a9:31:dd:7e:0a:9c:73:
         b5:e6:3f:cf:76:36:c1:4d:6d:19:55:3f:41:dc:56:78:b8:a6:
         31:35:38:3c:0c:01:3a:99:77:66:f0:b5:c3:63:ee:1e:4f:c8:
         d7:7d:bf:71:ae:43:7c:90:43:c9:1d:b3:71:8a:36:3c:4d:58:
         c6:8c:a3:a7:fa:1f:7f:43:c9:6b:7d:84:f2:81:25:b7:35:de:
         2d:b8:a0:db:19:6d:5c:ea:2d:5b:f1:09:7a:e0:af:2b:e0:7a:
         f6:85:af:cf:e5:dd:ab:16:18:1c:e3:4d:7f:b9:df:bf:3c:89:
         bd:b4:ba:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----