Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CZiL_ndt1O3zyfzBmbaAgAzUhrY.roa
File:                     CZiL_ndt1O3zyfzBmbaAgAzUhrY.roa (raw, json)
Hash identifier:          ag+hJR2lRDYH1+hDQrrHFjpiLrRkzIXjWnf5MxUN2dM=
Subject key identifier:   09:98:8B:FE:77:6D:D4:ED:F3:C9:FC:C1:99:B6:80:80:0C:D4:86:B6
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       222E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CZiL_ndt1O3zyfzBmbaAgAzUhrY.roa
Signing time:             Fri 25 Nov 2022 04:40:52 +0000
ROA not before:           Fri 25 Nov 2022 04:40:52 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        123.194.204.64/27 maxlen: 27

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8750 (0x222e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:40:52 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=09988BFE776DD4EDF3C9FCC199B680800CD486B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:88:71:5a:63:66:5d:dd:e0:b5:c1:2f:8c:a8:
                    3f:4c:eb:86:ce:53:d3:d9:43:fa:96:4a:15:93:69:
                    f9:46:9d:20:12:4d:ac:f0:47:70:15:82:2a:c2:2f:
                    dd:85:2e:40:31:af:ba:eb:22:27:da:66:91:e4:f3:
                    69:4b:4c:67:a7:89:49:47:5b:04:ee:b1:bf:0f:94:
                    be:39:4f:1d:fb:77:19:cf:d2:81:5c:82:65:db:6d:
                    6e:91:de:bd:e5:cd:bb:28:36:c9:c3:3b:88:1e:d6:
                    08:ed:8b:07:1f:c2:ab:55:65:2c:c9:8e:60:d9:ad:
                    3b:0b:8e:af:7f:aa:39:19:21:3f:39:f9:d1:d5:dd:
                    16:86:e9:8f:f9:1f:ac:87:dc:66:0d:30:5c:c8:50:
                    0b:23:e1:e1:d2:86:30:e3:1a:81:d6:3e:76:0a:45:
                    d5:24:e1:bf:63:64:05:ac:1d:d5:9d:1c:5b:aa:c8:
                    8a:13:72:a6:9c:7c:57:8b:c2:3f:66:9b:cb:c3:ef:
                    07:71:ea:26:11:7c:0a:f9:a9:8c:58:14:98:b3:86:
                    61:00:c3:e0:f9:98:36:91:dd:ac:58:7e:b1:52:6f:
                    92:9c:7f:3f:70:d2:a2:9d:ab:fd:e4:75:69:69:2e:
                    74:37:a4:8d:f8:e4:19:bf:bd:91:7b:02:35:a9:dd:
                    c2:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:98:8B:FE:77:6D:D4:ED:F3:C9:FC:C1:99:B6:80:80:0C:D4:86:B6
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CZiL_ndt1O3zyfzBmbaAgAzUhrY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.204.64/27

    Signature Algorithm: sha256WithRSAEncryption
         b5:bb:21:73:58:c8:b0:5f:90:4e:f3:23:91:c2:18:dd:53:da:
         44:39:f7:7c:a2:04:0f:b6:76:4b:59:f2:4a:96:b8:2e:19:0a:
         f5:ac:c1:12:3e:c9:76:b0:e8:8c:32:3b:a6:7c:da:6f:4b:4c:
         ce:43:35:7e:42:6a:67:59:f2:6d:5e:7f:47:3c:57:32:68:82:
         8a:9f:8c:8a:d6:17:77:b0:6e:88:e1:0d:78:83:47:07:ff:3e:
         ea:f9:ff:c4:f1:8e:01:59:61:7e:2b:0b:a1:b7:7d:e9:e9:06:
         f3:9a:c6:62:b2:69:c9:0f:09:8a:f3:be:72:3f:6f:45:f9:9f:
         17:b9:32:6d:6b:90:30:eb:c5:32:c4:e2:ff:40:4a:c9:cb:2b:
         e3:15:fe:bc:88:73:63:a8:f7:e2:bb:b5:91:65:05:50:de:ae:
         00:a1:ea:24:aa:ce:11:ff:09:6d:26:77:05:08:14:a2:f7:6a:
         dc:bc:e6:c8:f2:cc:92:39:a4:e6:e6:f6:3a:3b:c2:52:37:96:
         36:38:ac:0f:01:8a:8a:32:7d:b4:39:ff:88:68:7a:72:c3:11:
         8c:52:e2:30:52:16:75:8c:e0:97:81:ae:a9:45:b0:2c:00:f4:
         ab:8a:03:62:15:b9:c9:c7:a2:c8:9e:ef:e7:d9:5d:48:52:63:
         71:70:dc:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----