Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CT_n3FRFKRYSGIlweB1dtWd8t_I.roa
File:                     CT_n3FRFKRYSGIlweB1dtWd8t_I.roa (raw, json)
Hash identifier:          0jrMVnWe+XhibCxkBethOkLbYCOlr1drqCCVJT5MYBY=
Subject key identifier:   09:3F:E7:DC:54:45:29:16:12:18:89:70:78:1D:5D:B5:67:7C:B7:F2
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       224D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CT_n3FRFKRYSGIlweB1dtWd8t_I.roa
Signing time:             Fri 25 Nov 2022 04:41:00 +0000
ROA not before:           Fri 25 Nov 2022 04:41:00 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        123.193.72.0/21 maxlen: 21

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8781 (0x224d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:41:00 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=093FE7DC5445291612188970781D5DB5677CB7F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:4e:73:1a:8e:fe:dd:b4:0e:51:f7:ad:ad:2b:
                    04:7a:62:35:17:0a:de:26:5b:3a:f5:9b:5b:d3:55:
                    16:fc:66:13:cb:ad:71:e0:c3:3b:24:2f:ad:b0:76:
                    b9:d9:a7:53:a4:ef:f0:96:87:d5:52:46:ca:ed:bd:
                    3f:c7:42:ce:de:0d:36:71:65:e1:55:68:cb:7e:20:
                    85:13:2b:ae:d3:66:4f:22:a5:e3:21:14:36:74:a9:
                    c8:c7:6e:d2:89:3f:25:83:29:9e:71:c7:4b:15:a4:
                    c6:4d:72:69:43:cf:0e:42:5f:4c:8e:d1:93:9a:f5:
                    02:4c:69:9c:20:28:04:e6:f5:0a:c4:80:c7:b6:5c:
                    02:73:2f:d5:b1:e1:a4:76:5b:b8:37:c5:f8:e8:38:
                    74:94:93:5e:5a:cc:43:8f:bf:59:fb:ea:67:b1:da:
                    a2:4e:d8:30:b2:8f:ae:12:4d:0d:f0:0b:85:1d:4c:
                    64:c3:c7:bf:f6:22:cb:e6:ed:fc:da:98:36:86:84:
                    c4:9f:18:73:3a:85:cf:93:3a:87:00:8a:7e:76:15:
                    34:39:c3:04:b0:92:bc:49:e8:97:24:40:86:69:c8:
                    85:7e:9d:bc:b1:a0:b7:46:7e:e6:e8:79:2c:1d:3a:
                    d7:cd:f9:f2:e0:aa:b3:11:4f:e1:75:96:02:8c:df:
                    d6:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:3F:E7:DC:54:45:29:16:12:18:89:70:78:1D:5D:B5:67:7C:B7:F2
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CT_n3FRFKRYSGIlweB1dtWd8t_I.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3b:f4:0c:6e:7a:0f:93:d1:0e:17:f8:58:f4:9d:1a:1d:3e:32:
         24:c9:a9:8a:8e:a1:7b:ac:8e:08:87:4a:c7:ff:61:28:63:3e:
         d1:d8:12:88:c2:8e:66:b2:17:04:c4:7e:73:66:12:b6:a8:f3:
         9e:1a:a8:2b:0d:f1:07:5b:71:2b:6c:1c:7f:33:9b:5f:a7:82:
         9a:5f:a1:c3:73:f6:30:89:c2:21:0d:73:2b:80:7b:d1:82:09:
         ba:b2:b5:28:95:01:9c:6a:93:fd:66:94:49:51:2e:c7:60:eb:
         de:ee:16:fb:ef:60:32:19:59:ed:ee:d1:38:8e:9b:6a:64:78:
         16:83:aa:41:81:42:46:3a:4d:9f:73:95:20:b0:e2:c8:c9:ea:
         68:84:68:c3:04:d7:f0:ce:96:b1:09:c1:0e:74:3e:b0:30:d8:
         0f:2a:06:45:34:55:74:90:5a:47:e5:a0:50:c8:f4:47:88:fc:
         07:82:57:97:d3:18:36:10:fb:0b:6f:34:4c:bf:78:9f:eb:5e:
         c1:f9:76:42:d5:38:6e:8f:7a:7a:ac:11:31:60:18:07:ab:78:
         a6:64:16:9d:cf:1c:6a:d6:20:9f:99:29:b8:22:e9:5b:1f:8c:
         a4:c5:01:9a:19:29:8f:95:f9:44:20:d6:f8:a8:86:76:f0:df:
         24:7c:b6:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----