Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BclkMS9HJUC7eJIuEKQyPdU7aP0.roa
File:                     BclkMS9HJUC7eJIuEKQyPdU7aP0.roa (raw, json)
Hash identifier:          /DzdixyiPWI8xX7RsyxWIAew3m6zuqb/6vqL0+FEZOM=
Subject key identifier:   05:C9:64:31:2F:47:25:40:BB:78:92:2E:10:A4:32:3D:D5:3B:68:FD
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       235A
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BclkMS9HJUC7eJIuEKQyPdU7aP0.roa
Signing time:             Fri 25 Nov 2022 04:43:29 +0000
ROA not before:           Fri 25 Nov 2022 04:43:29 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        180.176.144.0/21 maxlen: 21

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9050 (0x235a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:43:29 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=05C964312F472540BB78922E10A4323DD53B68FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:37:7f:39:de:12:c2:32:e2:23:64:6b:19:77:
                    6a:25:74:fe:82:64:4f:cd:b9:35:07:8b:cd:3e:1f:
                    5e:47:60:d1:0a:a3:a4:1d:7c:5f:4a:d9:45:9f:6c:
                    89:ec:ad:0c:46:91:73:4d:bc:08:24:9d:5a:4c:73:
                    b1:a2:8f:01:53:b0:b8:74:6c:01:b5:7b:43:4a:fd:
                    f1:fa:a3:e0:01:bb:3b:c0:87:90:13:96:62:c1:09:
                    64:71:a2:95:08:f3:d6:2b:87:9f:d2:47:80:dd:39:
                    f5:40:76:dd:82:df:f2:47:6d:26:c2:91:09:ac:2d:
                    2d:e4:dc:fa:67:1d:32:48:0c:06:22:20:72:d1:38:
                    5f:27:a2:b7:17:c0:ec:f6:09:97:b5:fb:9b:c4:3a:
                    40:d9:9f:dd:72:1d:72:44:a9:49:0e:1a:b2:de:7d:
                    a0:7d:cf:55:a9:c6:f1:f9:f0:6f:8c:44:d8:ff:1e:
                    0c:29:6b:c7:3a:d8:da:3f:ad:af:44:0c:fe:6e:41:
                    c8:9c:25:1b:14:46:e6:f5:47:7e:75:cc:5b:5c:27:
                    a2:a9:f5:a1:3b:65:77:4e:3b:2e:5a:75:27:5c:c7:
                    d6:09:eb:1a:0a:3e:14:ac:61:cd:76:78:d6:91:48:
                    46:3d:06:e2:46:6b:79:56:3b:1c:19:30:6b:4e:41:
                    31:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:C9:64:31:2F:47:25:40:BB:78:92:2E:10:A4:32:3D:D5:3B:68:FD
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BclkMS9HJUC7eJIuEKQyPdU7aP0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3b:b9:d5:86:bd:eb:25:12:40:35:67:a1:27:99:61:1d:88:58:
         03:6d:c1:b4:95:52:88:2c:ba:80:43:d7:4c:c9:40:f9:4e:2b:
         27:d4:3c:b2:9a:f1:1e:1a:46:3f:99:e1:a7:05:99:7f:88:66:
         e2:10:ca:55:f5:0a:e3:d6:fb:02:42:5a:53:99:ab:ab:88:dc:
         48:dd:b6:42:45:81:db:f9:88:64:ed:0e:4b:2d:14:b3:7d:a7:
         85:a1:cd:a9:c3:4d:54:3c:ff:f1:66:53:2e:98:90:63:0d:02:
         ea:1b:0e:77:cb:41:fb:8c:47:12:ef:86:65:3b:93:6e:e6:f6:
         25:35:44:82:87:42:1f:04:f3:9b:7c:b6:ee:44:53:f0:cd:64:
         10:b3:f1:ab:6b:cc:bb:a3:a0:89:eb:1a:6a:1b:d4:d2:82:2a:
         9b:00:1f:d3:bc:e3:3e:ca:fb:17:82:3b:46:f4:75:ac:32:7f:
         82:00:db:35:e9:0e:f3:2f:7e:d0:30:56:aa:82:76:48:2a:73:
         77:4b:53:db:a6:3f:8f:50:5c:04:b8:ec:84:0f:b4:bb:bd:1d:
         51:e9:5a:2e:af:d6:6f:14:60:5c:ef:99:7a:01:81:42:27:03:
         a1:8d:1b:7d:78:d7:db:07:dd:b6:87:7a:3b:28:70:39:5f:d5:
         fa:26:ce:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----