Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/C3MPZO3NwXfGOqi5ZtbrLFbP-GQ.roa
File:                     C3MPZO3NwXfGOqi5ZtbrLFbP-GQ.roa (raw, json)
Hash identifier:          cW54L71j+2Y3vi1j0C69vFQNbO42Aqp6TRBOcNz/8GY=
Subject key identifier:   0B:73:0F:64:ED:CD:C1:77:C6:3A:A8:B9:66:D6:EB:2C:56:CF:F8:64
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/C3MPZO3NwXfGOqi5ZtbrLFbP-GQ.roa
Signing time:             Thu 15 Sep 2022 02:45:41 +0000
ROA not before:           Thu 15 Sep 2022 02:45:41 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        45.64.31.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8096 (0x1fa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:45:41 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=0B730F64EDCDC177C63AA8B966D6EB2C56CFF864
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c1:28:f1:dc:a2:4c:3f:2b:73:1f:01:b6:19:
                    25:24:ff:a0:8c:d6:77:2f:61:8d:77:1a:f4:ec:b1:
                    ce:78:3a:8a:2f:72:2e:a9:c9:4e:93:a0:62:d4:e3:
                    a3:f1:f6:49:28:3c:fa:0f:a6:cf:04:d7:02:eb:30:
                    94:24:cb:ef:f5:dc:ee:1d:36:cb:2a:d7:98:65:0d:
                    8f:6c:e9:9e:32:7e:f9:83:74:e1:29:4b:cd:f9:36:
                    3a:3d:fd:71:f2:4c:6f:76:ad:4a:11:4d:59:f7:2f:
                    33:71:50:ce:67:eb:f1:4d:12:dd:b7:5d:84:66:f6:
                    e5:11:26:55:0f:20:a6:4e:04:57:1b:69:af:e4:77:
                    a0:37:3b:5b:9f:47:d3:f8:83:8c:d6:cf:ce:88:8a:
                    87:bb:79:c2:59:8a:ee:40:d1:0d:45:13:de:40:3b:
                    0d:c3:4f:82:86:64:1d:36:a8:4e:d7:e3:44:b5:5e:
                    2f:b9:98:1b:0e:95:9a:79:fe:12:ea:7d:02:a6:66:
                    38:18:0d:15:18:84:45:e2:9f:fa:35:19:44:ec:9c:
                    e2:0a:ce:ce:d7:7b:61:93:f8:a6:7e:ac:9a:88:60:
                    5c:bb:c0:0c:39:a3:9e:60:2e:f5:44:4d:fc:b4:76:
                    cf:46:5f:9e:97:b7:a9:5b:fb:0b:d7:67:91:d3:8a:
                    59:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:73:0F:64:ED:CD:C1:77:C6:3A:A8:B9:66:D6:EB:2C:56:CF:F8:64
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/C3MPZO3NwXfGOqi5ZtbrLFbP-GQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.64.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:c7:c4:ab:0f:e7:48:ac:41:f8:8c:5e:2f:52:b5:c7:ac:7b:
         d7:20:82:df:d2:bb:8c:67:90:ee:ab:0d:5a:cd:a8:f3:03:e8:
         f5:97:57:7d:a7:0c:15:2b:28:94:58:ae:47:c6:06:57:a2:df:
         5f:1f:83:9c:65:03:db:32:be:31:b0:55:ba:3b:43:2f:79:b7:
         78:eb:20:89:ba:85:06:03:03:79:e8:31:cd:21:59:d2:90:fc:
         f8:b4:34:98:50:33:74:c3:a5:dd:c6:b8:06:58:20:fe:af:c1:
         f6:fc:33:e8:25:52:8f:4a:0b:41:55:a7:96:59:0d:c6:a1:c7:
         fa:5c:65:3b:79:8e:88:2a:2b:be:cd:f7:2f:c1:80:e0:60:75:
         85:ad:df:5a:8b:d1:57:71:f9:f2:36:0c:db:8d:5c:92:ca:0e:
         66:c1:8c:e5:58:26:1c:13:c2:84:9b:2c:e6:30:90:ce:8f:3b:
         81:3c:87:ef:03:ca:4d:64:b7:d6:69:19:9c:6d:0c:a0:37:5c:
         a6:5e:51:69:c9:c1:45:01:55:61:fa:a9:32:f3:6f:26:b4:a7:
         d4:0d:f7:b2:74:f7:79:e6:d4:76:c5:bc:67:30:e3:6a:e8:12:
         4d:9c:67:77:1f:52:a0:5b:92:bc:aa:5c:f9:62:b7:59:76:64:
         e2:e3:e8:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----