Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/A9X4C3m5GsTUzSt9lxfC-N5-fDM.roa
File:                     A9X4C3m5GsTUzSt9lxfC-N5-fDM.roa (raw, json)
Hash identifier:          JdBaygPXNOpLvHz3Xa/pkO0CvXpbJsfkDruH6VGlFDE=
Subject key identifier:   03:D5:F8:0B:79:B9:1A:C4:D4:CD:2B:7D:97:17:C2:F8:DE:7E:7C:33
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/A9X4C3m5GsTUzSt9lxfC-N5-fDM.roa
Signing time:             Thu 15 Sep 2022 02:45:08 +0000
ROA not before:           Thu 15 Sep 2022 02:45:08 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        123.194.128.0/21 maxlen: 21

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8096 (0x1fa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:45:08 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=03D5F80B79B91AC4D4CD2B7D9717C2F8DE7E7C33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1a:08:38:37:84:08:b6:7d:6f:e1:f6:7a:da:
                    9c:9f:d0:f5:c3:c0:33:20:c6:86:ec:c9:f6:0b:e6:
                    14:29:e3:09:64:4d:c7:d7:2a:bd:a5:fa:b2:b9:8a:
                    b9:07:3a:a0:79:73:b3:2b:2e:99:e8:65:f0:8f:6c:
                    a1:cb:83:88:f8:0b:07:e8:05:5f:20:95:f5:4d:9e:
                    11:a7:03:20:d1:73:6a:71:3a:7b:a7:ed:bc:a8:3d:
                    15:2b:4c:5c:ef:8e:2e:f3:91:c9:2b:3a:1f:7b:69:
                    18:6e:68:3e:f4:99:83:73:5b:55:79:0a:af:1f:0c:
                    78:a3:8c:a2:c7:6e:e7:17:5b:bf:0f:74:a2:2a:7a:
                    6c:10:71:62:15:31:4a:de:50:8c:fd:d3:5a:e8:87:
                    8a:26:ed:b1:90:76:85:8b:52:15:53:10:bf:23:30:
                    c4:28:e6:63:ea:a0:20:83:22:08:38:d8:d9:e5:7c:
                    f5:39:66:e6:a5:dc:46:54:41:d7:53:01:70:9d:51:
                    85:05:fa:85:ac:11:2a:57:c4:37:29:bd:59:2e:80:
                    57:74:6c:1f:45:04:49:11:e2:a1:6d:03:12:08:7f:
                    e3:3a:ac:6d:52:10:ed:8d:49:0f:3b:e9:d3:ae:6e:
                    b9:12:0b:f9:02:7e:10:5e:64:59:99:21:54:63:a7:
                    17:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:D5:F8:0B:79:B9:1A:C4:D4:CD:2B:7D:97:17:C2:F8:DE:7E:7C:33
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/A9X4C3m5GsTUzSt9lxfC-N5-fDM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a3:55:44:2c:ac:a8:06:47:fa:fe:f1:01:8f:b3:9b:c7:5b:31:
         28:3c:19:8c:e1:d9:d7:0e:86:b9:81:3b:18:e4:47:54:ae:bf:
         80:9a:98:74:4a:9a:b3:8c:b9:b4:36:39:d4:73:e1:43:4a:7c:
         d4:3e:14:ce:38:22:5f:45:db:01:46:7d:4f:e4:44:93:a6:ab:
         27:28:f3:e8:e3:fc:6a:e2:62:7b:0b:0e:3e:ae:57:09:98:4d:
         21:27:51:85:2b:68:9d:0a:97:e8:ba:76:5a:a4:ee:47:0b:59:
         ad:4b:5d:89:50:db:a1:99:d0:a2:be:e1:40:b4:14:5c:cd:22:
         93:50:34:d4:98:b9:cc:84:64:88:af:5b:bd:fe:0e:4e:2b:b6:
         e2:12:14:81:f7:8f:f2:37:70:67:0a:a0:53:79:ca:4a:2b:4d:
         e5:fc:51:81:19:1c:82:c4:26:1e:20:63:94:ea:e2:3d:e3:e8:
         b8:9b:37:24:fc:16:44:28:e4:f1:b7:7a:3a:2c:75:72:70:43:
         76:bb:b4:68:ee:e0:b0:50:8f:6c:ae:00:ea:a6:ad:d0:b1:aa:
         8b:e2:e9:2d:07:07:ba:0f:31:87:7b:3a:ff:23:5e:9c:f1:f7:
         88:14:28:0f:e1:fd:c0:fc:4e:d2:1f:12:0e:a8:c4:02:89:cc:
         dd:6d:ec:a3
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH6AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MTUw
MjQ1MDhaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDAzRDVGODBCNzlCOTFB
QzRENENEMkI3RDk3MTdDMkY4REU3RTdDMzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC2Ggg4N4QItn1v4fZ62pyf0PXDwDMgxobsyfYL5hQp4wlkTcfX
Kr2l+rK5irkHOqB5c7MrLpnoZfCPbKHLg4j4CwfoBV8glfVNnhGnAyDRc2pxOnun
7byoPRUrTFzvji7zkckrOh97aRhuaD70mYNzW1V5Cq8fDHijjKLHbucXW78PdKIq
emwQcWIVMUreUIz901roh4om7bGQdoWLUhVTEL8jMMQo5mPqoCCDIgg42NnlfPU5
Zual3EZUQddTAXCdUYUF+oWsESpXxDcpvVkugFd0bB9FBEkR4qFtAxIIf+M6rG1S
EO2NSQ876dOubrkSC/kCfhBeZFmZIVRjpxflAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUA9X4C3m5GsTUzSt9lxfC+N5+fDMwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0E5WDRDM201R3NUVXpTdDls
eGZDLU41LWZETS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7
woAwDQYJKoZIhvcNAQELBQADggEBAKNVRCysqAZH+v7xAY+zm8dbMSg8GYzh2dcO
hrmBOxjkR1Suv4CamHRKmrOMubQ2OdRz4UNKfNQ+FM44Il9F2wFGfU/kRJOmqyco
8+jj/GriYnsLDj6uVwmYTSEnUYUraJ0Kl+i6dlqk7kcLWa1LXYlQ26GZ0KK+4UC0
FFzNIpNQNNSYucyEZIivW73+Dk4rtuISFIH3j/I3cGcKoFN5ykorTeX8UYEZHILE
Jh4gY5Tq4j3j6LibNyT8FkQo5PG3ejosdXJwQ3a7tGju4LBQj2yuAOqmrdCxqovi
6S0HB7oPMYd7Ov8jXpzx94gUKA/h/cD8TtIfEg6oxAKJzN1t7KM=
-----END CERTIFICATE-----