Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CNaoIgebL4rP-EMGiTWsbonlqNo.roa
File:                     CNaoIgebL4rP-EMGiTWsbonlqNo.roa (raw, json)
Hash identifier:          JWx+5i+KjqWHybLnS0HRz8ndvBhvItCqUJEpAsIRy9g=
Subject key identifier:   08:D6:A8:22:07:9B:2F:8A:CF:F8:43:06:89:35:AC:6E:89:E5:A8:DA
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CNaoIgebL4rP-EMGiTWsbonlqNo.roa
Signing time:             Thu 15 Sep 2022 02:46:21 +0000
ROA not before:           Thu 15 Sep 2022 02:46:21 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        123.195.40.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8096 (0x1fa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:46:21 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=08D6A822079B2F8ACFF843068935AC6E89E5A8DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:24:b5:c7:2a:99:8e:c4:4a:fe:73:5f:fe:49:
                    0a:b7:f9:12:d5:f8:83:1a:5c:c4:ee:97:03:a2:f4:
                    06:db:f2:2d:ee:09:c2:0f:98:70:f7:31:7f:11:b1:
                    7c:50:eb:9d:a9:c6:bd:71:24:aa:d7:5d:5b:ae:d2:
                    cf:9f:c5:a7:b6:58:cd:71:48:3f:b6:14:60:67:b5:
                    d3:1b:b9:ff:da:f0:b3:90:96:67:c6:1f:c9:df:22:
                    4b:28:12:d1:80:6f:90:81:d7:ac:c4:b5:4d:8c:d1:
                    9e:97:0c:7b:35:0c:1e:09:df:97:bd:4d:67:b0:70:
                    32:7e:ad:c1:4e:b7:f5:1a:32:8e:79:2a:5b:1b:2a:
                    29:2c:a9:40:4b:4e:6d:63:48:5f:2f:1b:85:5b:58:
                    66:4d:53:95:2a:ba:96:38:5b:30:cf:ea:3c:61:52:
                    32:39:b2:75:22:ba:5e:7a:c0:48:58:1a:f5:41:0f:
                    7f:7d:10:48:34:75:24:41:09:eb:3b:84:c7:cf:8a:
                    53:d4:29:d5:e7:a9:0e:25:cd:2b:1b:24:f5:33:b1:
                    a5:57:51:d6:3f:a3:9e:65:e3:9e:48:1a:99:de:da:
                    89:67:df:51:5b:5f:f2:6d:bc:d9:cc:e7:28:44:31:
                    ba:0c:d3:d1:cc:35:68:4f:79:66:59:6f:cd:d6:e3:
                    7f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:D6:A8:22:07:9B:2F:8A:CF:F8:43:06:89:35:AC:6E:89:E5:A8:DA
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CNaoIgebL4rP-EMGiTWsbonlqNo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:95:d0:d0:5e:a7:4a:21:81:2b:51:01:67:dd:c5:91:98:c1:
         16:18:d3:62:4c:af:60:ef:94:ea:7a:ab:f0:90:02:f2:2f:d0:
         95:b6:73:51:90:c4:c6:6e:e2:0a:32:32:2c:43:0e:4b:87:d7:
         25:57:2d:3f:b9:c8:85:06:d9:56:de:df:3a:95:ab:9b:f9:9e:
         b2:88:e5:ff:dd:5b:ed:24:c0:9a:58:b7:a9:3e:5b:a7:00:0c:
         8a:d6:5b:68:7f:b2:93:16:9e:c5:b2:46:b7:fc:e5:aa:36:08:
         d9:2d:92:7d:bc:f0:43:9e:8e:7b:ea:05:61:62:d9:a0:67:bd:
         69:1b:74:14:d6:9a:00:97:72:f7:ba:04:39:59:a1:b9:35:43:
         bd:a6:02:92:8a:f0:67:ef:f7:db:96:02:79:b8:81:01:95:0e:
         69:31:d9:5c:3d:f3:77:43:00:9c:a2:69:6e:65:24:83:21:ea:
         7f:43:1b:32:a4:34:d0:7d:d6:50:2a:ff:a1:62:e4:04:e1:ac:
         63:ab:50:4c:3f:5f:00:ce:96:9c:ed:d4:a2:d5:05:03:0e:46:
         0d:88:c5:42:f8:fb:26:27:35:e8:c6:24:c6:6e:6b:5f:20:ed:
         03:d3:11:ae:e4:15:c9:e3:96:61:7c:3a:35:c2:88:91:9e:f6:
         05:f3:9a:e3
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH6AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MTUw
MjQ2MjFaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDA4RDZBODIyMDc5QjJG
OEFDRkY4NDMwNjg5MzVBQzZFODlFNUE4REEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDeJLXHKpmOxEr+c1/+SQq3+RLV+IMaXMTulwOi9Abb8i3uCcIP
mHD3MX8RsXxQ652pxr1xJKrXXVuu0s+fxae2WM1xSD+2FGBntdMbuf/a8LOQlmfG
H8nfIksoEtGAb5CB16zEtU2M0Z6XDHs1DB4J35e9TWewcDJ+rcFOt/UaMo55Klsb
KiksqUBLTm1jSF8vG4VbWGZNU5UqupY4WzDP6jxhUjI5snUiul56wEhYGvVBD399
EEg0dSRBCes7hMfPilPUKdXnqQ4lzSsbJPUzsaVXUdY/o55l455IGpne2oln31Fb
X/JtvNnM5yhEMboM09HMNWhPeWZZb83W43+jAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUCNaoIgebL4rP+EMGiTWsbonlqNowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0NOYW9JZ2ViTDRyUC1FTUdp
VFdzYm9ubHFOby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
wygwDQYJKoZIhvcNAQELBQADggEBAFSV0NBep0ohgStRAWfdxZGYwRYY02JMr2Dv
lOp6q/CQAvIv0JW2c1GQxMZu4goyMixDDkuH1yVXLT+5yIUG2Vbe3zqVq5v5nrKI
5f/dW+0kwJpYt6k+W6cADIrWW2h/spMWnsWyRrf85ao2CNktkn288EOejnvqBWFi
2aBnvWkbdBTWmgCXcve6BDlZobk1Q72mApKK8Gfv99uWAnm4gQGVDmkx2Vw983dD
AJyiaW5lJIMh6n9DGzKkNNB91lAq/6Fi5AThrGOrUEw/XwDOlpzt1KLVBQMORg2I
xUL4+yYnNejGJMZua18g7QPTEa7kFcnjlmF8OjXCiJGe9gXzmuM=
-----END CERTIFICATE-----