Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9Rf49tQuj5lydr_2iH6uAaKayw0.roa
File:                     9Rf49tQuj5lydr_2iH6uAaKayw0.roa (raw, json)
Hash identifier:          +H1xGGu2vdb/IYHM9/G5/Vni9nuaw52onYGVwGo7okU=
Subject key identifier:   F5:17:F8:F6:D4:2E:8F:99:72:76:BF:F6:88:7E:AE:01:A2:9A:CB:0D
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       2026
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9Rf49tQuj5lydr_2iH6uAaKayw0.roa
Signing time:             Fri 25 Nov 2022 04:38:22 +0000
ROA not before:           Fri 25 Nov 2022 04:38:22 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        2407:4d00:ff0b::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8230 (0x2026)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:38:22 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=F517F8F6D42E8F997276BFF6887EAE01A29ACB0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:4d:ff:fd:29:9c:79:4e:d2:d3:51:85:32:3c:
                    fe:14:7b:c5:17:c6:43:ca:7f:f5:4f:66:65:33:2a:
                    67:d4:ad:42:6e:a5:35:76:96:12:32:a5:86:9e:23:
                    55:ea:de:f1:bd:7e:b6:f7:26:76:14:8b:ee:27:35:
                    b7:9e:ac:1f:28:63:56:03:ed:4b:d6:31:8b:fd:5e:
                    c6:fd:39:59:3a:da:8b:e8:26:86:8b:d4:54:45:60:
                    fd:ad:5e:49:55:0b:37:53:9a:bb:b3:f9:08:ee:b6:
                    ee:29:4f:1e:62:79:7a:93:79:9d:ae:75:06:76:2e:
                    d9:10:bc:3c:09:74:1a:86:59:c4:99:79:47:16:2a:
                    15:b6:da:db:bb:6f:d4:15:ea:fc:a9:ad:29:ff:f5:
                    c6:60:af:f4:d5:11:eb:ef:6a:e8:1b:4f:f1:1e:3d:
                    a8:91:76:3d:ea:26:d9:8e:be:24:05:ed:fb:8a:3a:
                    e7:33:0b:4d:c9:4a:9f:c0:b3:53:b5:62:13:c1:ab:
                    e5:23:6c:14:e8:68:fa:50:b1:bb:73:b2:77:9a:1f:
                    9b:d9:5c:5f:b0:45:50:4e:9f:b1:c6:14:ee:42:ca:
                    ad:a7:a8:ab:b6:26:22:6f:8e:82:70:db:e8:ec:c5:
                    fe:1f:f8:45:1b:12:51:e2:8b:7b:46:d4:4c:7a:80:
                    8d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:17:F8:F6:D4:2E:8F:99:72:76:BF:F6:88:7E:AE:01:A2:9A:CB:0D
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9Rf49tQuj5lydr_2iH6uAaKayw0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:4d00:ff0b::/48

    Signature Algorithm: sha256WithRSAEncryption
         87:fb:ec:b9:02:95:4c:66:84:ae:3c:26:be:59:10:e5:ac:58:
         ee:c9:59:d7:32:cc:6c:e5:c4:e9:34:11:99:ca:5a:c2:d3:9d:
         8c:c3:7a:d5:69:7a:b3:31:6b:05:0a:f7:d7:37:d9:b4:03:2c:
         a8:82:a2:18:08:6e:ba:88:0f:1c:2b:0c:61:01:6a:3f:b2:9b:
         05:96:a6:7f:c3:b1:81:6f:72:b1:8a:15:ea:f2:53:51:3d:f1:
         90:a2:a7:6a:81:ad:d5:6a:43:e2:c4:03:80:b2:5d:13:a5:10:
         b5:49:5f:47:53:47:90:25:59:f4:b9:68:4e:4f:ed:f0:bb:3a:
         2e:9e:20:28:e6:bc:c2:53:31:ee:43:81:12:bd:0d:61:68:e7:
         23:57:05:8e:c3:34:4f:55:18:91:1d:ac:51:ae:4b:e0:db:75:
         5b:f3:13:14:cc:98:6a:8a:7b:d7:be:3b:57:0e:a0:a1:85:14:
         38:24:e7:ea:ef:f4:6b:87:00:de:f8:84:c2:39:7c:9d:6e:ad:
         b7:03:0d:bc:76:1c:4b:3b:e7:77:6e:cd:99:a7:80:0f:5b:4a:
         91:78:01:21:1c:e6:0f:89:0d:a3:19:95:8d:52:aa:6d:0c:39:
         86:85:1e:35:6d:50:af:bc:65:e8:aa:f8:e6:fa:33:f2:21:3e:
         93:9f:ff:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----