Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HTsmMMVVlF599Su7Rln7igUtA2o.roa
File:                     HTsmMMVVlF599Su7Rln7igUtA2o.roa (raw, json)
Hash identifier:          vFGVz5vyc+8GiBeWc/lNsUdkqZSQboQK9GU739AM7PY=
Subject key identifier:   1D:3B:26:30:C5:55:94:5E:7D:F5:2B:BB:46:59:FB:8A:05:2D:03:6A
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       21C3
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HTsmMMVVlF599Su7Rln7igUtA2o.roa
Signing time:             Fri 25 Nov 2022 04:40:22 +0000
ROA not before:           Fri 25 Nov 2022 04:40:22 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        180.176.92.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8643 (0x21c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:40:22 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=1D3B2630C555945E7DF52BBB4659FB8A052D036A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8f:8b:cb:b5:19:6f:83:6d:4f:3a:e1:d1:78:
                    8d:c6:a8:c6:6a:c8:3c:82:e8:25:51:92:1c:2a:0c:
                    ec:57:df:ab:70:7b:e7:77:ac:96:c6:9f:b5:1c:6d:
                    ec:f4:eb:ba:c9:2b:ad:27:e3:c8:86:38:ce:b9:e5:
                    ee:d9:20:93:84:94:15:40:cd:af:9c:bb:25:0e:93:
                    8c:7b:f1:74:56:55:79:49:1b:fc:62:c8:e6:0e:a3:
                    6b:06:37:9f:17:fa:6a:9a:a0:92:d8:a1:49:a5:70:
                    ee:69:a2:1e:e0:09:87:3a:36:d9:0d:b2:83:3b:f5:
                    a3:2e:da:63:5e:71:98:71:be:76:9e:41:18:ee:8c:
                    71:11:dc:5a:9e:8c:93:1b:c3:f9:64:77:68:c4:47:
                    0f:d9:ac:c5:36:27:f2:b5:1a:50:6c:5e:23:03:20:
                    43:40:c1:2b:22:ca:eb:86:9f:5d:73:ea:01:0d:7b:
                    37:b6:63:92:30:11:8c:81:9a:63:1c:38:d7:0f:c4:
                    4b:4b:0b:73:3d:fb:9c:50:38:31:3c:e4:fa:5e:63:
                    b4:dc:e1:98:c0:bc:f0:65:61:94:2f:a8:f7:74:10:
                    3e:81:a6:02:89:d8:a2:44:3e:58:da:84:eb:c5:73:
                    c1:2f:f4:c8:eb:13:00:53:dd:e2:78:5a:2b:c5:aa:
                    6b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:3B:26:30:C5:55:94:5E:7D:F5:2B:BB:46:59:FB:8A:05:2D:03:6A
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HTsmMMVVlF599Su7Rln7igUtA2o.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:7f:a2:d1:04:14:2e:2c:37:04:86:29:67:96:c3:ec:fa:f3:
         44:bc:58:08:cb:74:2e:b3:ed:c0:b9:95:36:ae:eb:25:f7:27:
         da:13:70:33:11:53:4a:a4:c6:0a:3d:73:98:d9:15:92:85:d2:
         cb:26:ae:bd:bb:c7:b0:d5:14:d9:2a:20:f9:a8:3f:92:5b:64:
         68:5e:09:79:f1:17:15:4b:8a:08:d1:6d:f7:bb:79:60:da:2f:
         0d:47:94:2d:85:56:e1:17:c1:db:c1:1d:a9:dd:44:87:19:cf:
         56:e4:df:57:28:bf:9d:2c:a6:e8:ff:a4:19:86:90:b5:d5:c3:
         e9:c3:83:68:83:5b:73:b9:27:d6:37:7c:4e:2f:c7:19:c5:14:
         27:e9:fe:0e:89:2c:4a:30:91:8e:c5:7f:59:d0:29:51:89:e2:
         0e:a1:a0:80:95:c0:70:07:4b:dc:49:96:68:0d:ae:7f:3c:9f:
         64:33:8b:77:5c:ef:62:0a:c5:22:c6:06:21:a0:6e:25:ec:48:
         62:d9:dc:74:e6:5a:8b:ed:77:2e:42:7a:06:1b:ce:cc:f2:0a:
         95:01:4c:f5:04:bd:a5:b4:cd:f9:81:7c:fb:3f:dd:5d:15:cf:
         42:ac:a4:81:2c:1f:e5:2b:d0:64:ce:10:b7:f3:6d:e0:cc:2b:
         70:b9:9b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----