Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/C40hsRYU5zJf3DzOJeeIFE-BN44.roa
File:                     C40hsRYU5zJf3DzOJeeIFE-BN44.roa (raw, json)
Hash identifier:          IBhR7hzZleR5ZSpvUrBh/GKQ5Dr0NzzOOwJTbjRuUXA=
Subject key identifier:   0B:8D:21:B1:16:14:E7:32:5F:DC:3C:CE:25:E7:88:14:4F:81:37:8E
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/C40hsRYU5zJf3DzOJeeIFE-BN44.roa
Signing time:             Thu 15 Sep 2022 02:44:52 +0000
ROA not before:           Thu 15 Sep 2022 02:44:52 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        180.177.64.0/21 maxlen: 21

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8096 (0x1fa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:44:52 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=0B8D21B11614E7325FDC3CCE25E788144F81378E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:02:18:f0:d9:6e:9d:49:8c:6a:d3:da:f6:f1:
                    36:6a:3b:58:a7:c7:ee:2f:69:e8:be:de:f5:fc:49:
                    3e:86:4e:04:dc:1c:2e:b1:7b:a7:11:b9:54:bf:f3:
                    c5:ed:21:e3:82:97:0c:40:0c:32:71:76:2f:9e:79:
                    ad:04:34:02:e7:71:d0:3b:c8:ff:bd:b3:17:dc:ea:
                    c0:99:09:8f:89:2e:1f:66:74:23:82:0f:9a:ba:c4:
                    03:82:ac:dc:07:65:ee:1c:87:e1:26:c9:f5:88:29:
                    ee:a8:ae:88:ca:01:cb:dc:b7:ca:8e:74:18:dc:af:
                    ac:e4:c0:2f:c7:50:46:4a:f6:11:e5:3a:c2:44:78:
                    57:2d:db:77:31:1d:b1:6d:43:c5:18:19:03:10:cb:
                    d9:62:41:5c:80:4d:b2:ef:5e:38:55:d2:f3:aa:35:
                    75:49:4f:f4:f0:47:b6:c7:87:39:7a:ee:e2:ad:9e:
                    04:36:41:f4:cb:5b:aa:47:06:cb:48:6c:a0:9a:0e:
                    aa:1b:fc:06:c4:95:78:dd:49:23:68:c9:0e:07:99:
                    4e:7c:f0:e4:81:16:77:84:d6:03:1a:83:bc:fd:31:
                    3a:02:6f:d6:2b:d9:2c:1f:b9:23:4c:7a:71:de:50:
                    8e:04:97:c9:66:ce:bf:6c:0e:84:bc:8e:55:d9:5b:
                    08:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:8D:21:B1:16:14:E7:32:5F:DC:3C:CE:25:E7:88:14:4F:81:37:8E
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/C40hsRYU5zJf3DzOJeeIFE-BN44.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b4:42:ff:59:b8:1c:ec:fb:93:39:23:35:df:e9:ba:e5:60:bf:
         cc:c1:42:b3:f2:e4:3b:df:05:bf:87:04:6a:50:dd:1d:cd:7c:
         61:5d:eb:74:71:80:54:94:5f:73:2d:de:fc:17:69:c6:ef:54:
         d5:e5:f6:eb:dd:de:c1:27:1e:cc:31:bb:13:12:ea:bf:8f:be:
         f7:e4:90:87:5d:b3:0f:19:57:c4:5e:84:ae:52:4b:63:ad:46:
         13:9b:c0:16:48:cf:a6:8b:fa:e0:48:77:0c:a9:49:b4:af:7e:
         52:04:4e:d8:b0:ff:d1:8c:31:dd:0d:7d:08:0c:a6:b4:5b:df:
         8b:43:69:8b:68:73:03:42:1a:a0:67:a4:fb:b9:00:75:6e:df:
         01:85:9f:b5:2d:d2:ef:5f:c3:d2:0f:19:70:8c:82:24:7f:10:
         ca:43:19:94:47:07:df:0f:b4:74:3b:6e:50:26:aa:fd:4f:58:
         aa:57:d2:4e:ae:ea:0f:79:f9:be:78:a4:df:a9:8e:d1:40:e9:
         06:f9:62:c1:35:b1:e6:02:75:dc:b7:56:16:cf:37:d0:de:47:
         2d:b8:28:0a:58:e6:3c:f5:e7:d0:e4:05:20:7b:75:16:cc:31:
         74:d7:a8:cf:de:b9:8e:61:bb:1a:a2:58:23:8e:06:c3:86:7d:
         78:2d:a2:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----