Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EezgDEOPSZxMLrEqyjYNc_2Jpd8.roa
File:                     EezgDEOPSZxMLrEqyjYNc_2Jpd8.roa (raw, json)
Hash identifier:          BQu7qOHGZYpL5Qh2EaU9csu1+iawag+zNjHUQ7YC0oc=
Subject key identifier:   11:EC:E0:0C:43:8F:49:9C:4C:2E:B1:2A:CA:36:0D:73:FD:89:A5:DF
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       21A9
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EezgDEOPSZxMLrEqyjYNc_2Jpd8.roa
Signing time:             Fri 25 Nov 2022 04:40:10 +0000
ROA not before:           Fri 25 Nov 2022 04:40:10 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        118.232.144.0/21 maxlen: 21

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8617 (0x21a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:40:10 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=11ECE00C438F499C4C2EB12ACA360D73FD89A5DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:3d:21:6a:f6:f6:80:3e:67:42:a9:62:f1:d8:
                    68:f9:81:1c:b5:1d:32:49:56:77:a7:b8:b0:b5:61:
                    06:2d:cb:c7:72:a1:1e:48:09:ea:40:1b:67:df:a9:
                    44:49:27:5b:85:4e:2b:19:09:42:05:c6:a5:b2:43:
                    76:97:8f:71:fd:0b:f9:2a:83:6a:ac:ea:3e:bd:65:
                    a4:3f:af:95:bb:78:30:82:2f:10:9d:ec:13:63:ff:
                    b3:97:7f:20:00:92:a4:b6:e2:a7:75:d6:a9:5f:d9:
                    fc:3a:70:6b:74:c0:78:97:9e:be:6e:c7:1d:c8:45:
                    b9:84:54:e3:ec:2a:3f:27:2b:f9:1f:62:2b:c5:69:
                    90:4f:bb:10:3f:cb:1a:2c:3d:ce:12:44:94:a6:ea:
                    81:32:18:f9:66:80:98:f1:68:68:2e:a1:54:30:76:
                    95:1c:bf:60:97:ca:fe:73:dc:d8:39:ca:42:b3:1f:
                    a5:00:6d:f2:b1:bd:fb:1b:bd:67:b0:5e:7f:3b:4d:
                    50:8c:8f:18:b6:22:75:fc:9a:d8:34:78:fe:af:c8:
                    9e:b3:ec:d4:c9:f8:01:c7:51:8a:9e:53:7f:60:b7:
                    a9:9f:58:02:52:81:70:7d:16:f8:b8:b5:6a:85:5f:
                    0c:d2:84:f8:f3:61:c9:71:c8:13:81:3c:c5:06:0c:
                    3d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:EC:E0:0C:43:8F:49:9C:4C:2E:B1:2A:CA:36:0D:73:FD:89:A5:DF
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EezgDEOPSZxMLrEqyjYNc_2Jpd8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4f:8e:0a:6d:e0:c5:38:86:a2:13:d9:85:02:cf:55:51:d2:73:
         1a:fc:23:1e:a8:93:cf:92:6f:09:d4:26:9a:e0:9e:5d:02:1b:
         3f:e1:1d:5a:07:e8:32:a9:d5:22:23:fd:29:13:24:b9:25:a5:
         97:3f:61:0f:6a:40:36:22:65:cf:30:33:6b:95:0c:12:c2:11:
         3d:53:32:ff:d7:be:7d:93:90:e1:29:a3:24:f8:56:9c:27:e5:
         52:15:2e:90:ed:02:72:d6:72:46:17:87:f2:9e:37:00:91:14:
         4f:13:0d:37:8f:3c:d7:31:96:3b:da:d4:9e:e0:c2:72:65:c0:
         58:62:70:47:97:39:e2:38:bc:c0:3e:3f:15:ec:53:ed:85:d1:
         6f:c1:5f:91:62:e1:6d:1f:e1:c2:22:92:53:a0:a7:ff:b8:a7:
         ca:22:be:42:a4:17:e1:81:39:bf:9e:4a:01:cf:8f:e3:18:ff:
         de:d3:fb:85:d7:26:b5:b7:6a:cd:ac:1a:56:a0:c0:1c:32:73:
         fb:ec:e2:d2:87:1d:61:31:70:9a:6e:68:90:b7:ee:97:a2:30:
         2b:7d:e5:24:81:5e:ee:9d:41:11:eb:af:c3:94:ed:44:e4:ce:
         dc:19:f3:5c:2b:66:2b:1a:08:46:aa:04:d1:63:1f:1a:56:8b:
         24:36:41:f2
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIakwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDQwMTBaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDExRUNFMDBDNDM4RjQ5
OUM0QzJFQjEyQUNBMzYwRDczRkQ4OUE1REYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD4PSFq9vaAPmdCqWLx2Gj5gRy1HTJJVnenuLC1YQYty8dyoR5I
CepAG2ffqURJJ1uFTisZCUIFxqWyQ3aXj3H9C/kqg2qs6j69ZaQ/r5W7eDCCLxCd
7BNj/7OXfyAAkqS24qd11qlf2fw6cGt0wHiXnr5uxx3IRbmEVOPsKj8nK/kfYivF
aZBPuxA/yxosPc4SRJSm6oEyGPlmgJjxaGguoVQwdpUcv2CXyv5z3Ng5ykKzH6UA
bfKxvfsbvWewXn87TVCMjxi2InX8mtg0eP6vyJ6z7NTJ+AHHUYqeU39gt6mfWAJS
gXB9Fvi4tWqFXwzShPjzYclxyBOBPMUGDD0xAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUEezgDEOPSZxMLrEqyjYNc/2Jpd8wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0VlemdERU9QU1p4TUxyRXF5
allOY18ySnBkOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN2
6JAwDQYJKoZIhvcNAQELBQADggEBAE+OCm3gxTiGohPZhQLPVVHScxr8Ix6ok8+S
bwnUJprgnl0CGz/hHVoH6DKp1SIj/SkTJLklpZc/YQ9qQDYiZc8wM2uVDBLCET1T
Mv/Xvn2TkOEpoyT4Vpwn5VIVLpDtAnLWckYXh/KeNwCRFE8TDTePPNcxljva1J7g
wnJlwFhicEeXOeI4vMA+PxXsU+2F0W/BX5Fi4W0f4cIiklOgp/+4p8oivkKkF+GB
Ob+eSgHPj+MY/97T+4XXJrW3as2sGlagwBwyc/vs4tKHHWExcJpuaJC37peiMCt9
5SSBXu6dQRHrr8OU7UTkztwZ81wrZisaCEaqBNFjHxpWiyQ2QfI=
-----END CERTIFICATE-----