Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CA-cmJX19xhlwkeHgfsnROd2K_Q.roa
File:                     CA-cmJX19xhlwkeHgfsnROd2K_Q.roa (raw, json)
Hash identifier:          QljX3iciw6zlo45xzwywupDrkHf4f4odWXjN4Dd53HA=
Subject key identifier:   08:0F:9C:98:95:F5:F7:18:65:C2:47:87:81:FB:27:44:E7:76:2B:F4
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CA-cmJX19xhlwkeHgfsnROd2K_Q.roa
Signing time:             Thu 15 Sep 2022 02:52:20 +0000
ROA not before:           Thu 15 Sep 2022 02:52:20 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        106.1.132.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8098 (0x1fa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:52:20 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=080F9C9895F5F71865C2478781FB2744E7762BF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:24:47:d0:39:a9:7a:6f:8f:05:e2:1b:26:0d:
                    16:cb:40:d8:fc:27:0d:5a:d8:f0:2c:f2:fc:f5:43:
                    26:7c:a3:81:94:58:d5:db:6d:98:76:d0:76:cf:b7:
                    86:7e:f1:9b:7e:86:e0:0c:30:47:8a:30:60:4e:08:
                    19:d4:12:ec:fe:50:9c:41:83:69:60:a5:22:bb:71:
                    ff:19:4c:1d:42:6f:b1:c9:c6:84:ce:0e:45:f7:99:
                    5b:4f:10:fa:fd:d2:bc:3e:c9:64:08:5c:ba:26:42:
                    cb:f2:e9:9c:6c:e1:52:fb:79:52:ca:89:c1:39:48:
                    c8:15:19:11:cf:16:3f:29:de:53:e9:9e:a7:b4:f9:
                    fd:e9:84:91:10:83:6c:c0:be:c9:ad:c1:6b:95:23:
                    30:cf:19:ba:51:7e:d3:54:24:42:50:b3:77:00:10:
                    99:89:9e:3c:c4:c3:48:89:71:64:ae:ae:10:bc:60:
                    81:0d:34:c5:fa:c0:be:b5:1c:fe:26:54:6b:74:1e:
                    4d:d3:c3:05:0e:a1:c0:41:fd:1e:ac:cc:36:f5:00:
                    65:16:5e:52:06:2c:75:c3:d4:42:ca:84:02:b5:ec:
                    48:97:be:3a:75:38:1a:77:28:a8:db:ca:ad:05:47:
                    27:da:fe:9d:e6:cb:0a:bf:e6:21:f0:6f:ce:32:63:
                    62:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:0F:9C:98:95:F5:F7:18:65:C2:47:87:81:FB:27:44:E7:76:2B:F4
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CA-cmJX19xhlwkeHgfsnROd2K_Q.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:a3:57:f3:01:8f:72:10:df:f8:57:1a:ca:95:39:08:4d:90:
         6b:2c:10:05:15:25:b6:3f:31:04:12:ee:0e:fa:83:15:4f:56:
         3d:04:04:ac:96:a8:2a:2a:30:14:62:65:1b:c4:41:ce:19:05:
         ba:4e:14:dc:c1:72:df:4f:30:e1:06:74:22:a0:7d:a4:b8:55:
         ce:ef:cf:02:58:b4:fa:59:1a:5e:d5:89:0c:e7:f5:bf:e4:aa:
         06:fc:b8:6d:70:5d:fa:2c:b7:b2:79:49:e1:e1:b1:cf:ff:23:
         69:7e:6d:2f:5c:0d:2a:78:04:10:07:56:1e:c1:d4:1a:9e:5b:
         e9:5f:ee:ff:64:98:3f:65:84:e6:71:c6:44:b7:12:de:11:6d:
         8c:f4:2c:17:03:91:8d:4c:a6:4e:81:02:88:ac:af:88:2a:d8:
         82:d6:2e:7e:72:df:8f:53:63:0a:a5:14:2d:11:ce:34:c7:11:
         9c:84:05:2d:85:3c:7f:40:4a:d9:74:18:07:95:1b:4e:c1:3f:
         be:bb:92:86:5d:5f:c3:51:40:d8:8d:fe:8b:d9:ca:35:99:20:
         29:88:c2:76:61:48:21:95:40:4d:db:aa:21:d0:9c:ef:e5:d6:
         4b:69:4e:b0:1d:83:e1:c1:be:bf:e7:d2:68:82:ec:14:9e:b1:
         18:1d:d6:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----