Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HaINEYrfwrwegRWy2re4zkNgnwA.roa
File:                     HaINEYrfwrwegRWy2re4zkNgnwA.roa (raw, json)
Hash identifier:          sdjx6eiDsZgHhJ08ctTzs6hB8iz4llUMxkOM6zIkBp0=
Subject key identifier:   1D:A2:0D:11:8A:DF:C2:BC:1E:81:15:B2:DA:B7:B8:CE:43:60:9F:00
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       21A6
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HaINEYrfwrwegRWy2re4zkNgnwA.roa
Signing time:             Fri 25 Nov 2022 04:40:10 +0000
ROA not before:           Fri 25 Nov 2022 04:40:10 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        180.177.16.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8614 (0x21a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:40:10 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=1DA20D118ADFC2BC1E8115B2DAB7B8CE43609F00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:0a:62:e5:bf:97:bf:43:f6:f1:ce:75:c1:e1:
                    43:7a:da:b0:ad:92:d3:5a:65:55:ae:53:e9:5b:fa:
                    f8:dd:cd:cd:f7:0d:67:bd:f5:55:0c:c9:fd:de:b8:
                    3d:f2:12:31:12:3d:39:4d:a2:6d:42:1d:87:cb:58:
                    7b:ae:1e:c6:c6:58:c6:3d:c7:c6:a2:31:ab:f6:f1:
                    cb:df:66:ce:e9:b3:96:ee:8c:c8:91:90:76:94:27:
                    c8:7e:94:28:ff:5f:9c:bb:dc:cd:3f:b1:ba:7c:16:
                    e7:49:72:cf:51:2d:ff:2b:40:89:24:bd:0d:11:51:
                    d7:53:2b:a8:6a:8e:42:ec:49:13:66:ab:1b:55:06:
                    71:fe:67:79:ac:04:53:1d:d4:03:69:e3:2c:22:e6:
                    39:f6:de:0d:36:c0:19:4e:77:49:01:b3:a6:63:a2:
                    61:cd:9d:34:2a:ce:67:0c:d8:86:18:d3:f4:c4:f9:
                    e7:db:07:e1:8a:56:6c:4f:dc:f5:22:c5:aa:96:a4:
                    6b:a8:51:b7:55:43:81:16:2d:02:a1:e0:bd:c8:65:
                    ae:b9:a7:87:e6:c1:24:21:7c:f5:a3:db:55:c2:af:
                    30:40:2c:ad:dc:e1:92:8c:43:08:48:e4:3f:ec:8e:
                    1a:9a:94:bc:b2:36:68:98:31:db:98:9c:5a:0c:56:
                    fe:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:A2:0D:11:8A:DF:C2:BC:1E:81:15:B2:DA:B7:B8:CE:43:60:9F:00
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HaINEYrfwrwegRWy2re4zkNgnwA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:c7:28:dc:f9:87:c4:98:67:2e:cb:a4:a0:f3:b6:0e:23:1c:
         f2:4a:d7:95:37:0e:14:06:31:2c:9a:1b:c7:c0:1a:03:d7:93:
         f3:79:ab:72:f6:76:05:23:2f:fd:99:70:00:51:47:69:9c:46:
         28:6c:49:ea:2a:eb:53:1c:da:84:3f:f7:2e:ed:79:df:7e:01:
         46:e1:98:b0:66:1b:30:ca:9e:9c:dd:b4:d2:f4:0d:d4:ea:e1:
         07:7b:00:64:41:f1:d6:fa:1b:07:24:f8:b4:7c:81:84:a5:c5:
         c9:48:61:55:9b:0f:6f:30:1f:37:9e:2f:e5:0c:2e:b1:1f:19:
         43:8f:13:70:6c:90:85:40:79:23:2b:d4:6a:35:36:05:39:3f:
         c2:a1:f7:d4:5c:ae:43:b9:2c:82:cd:0b:00:8d:e9:af:83:98:
         8e:ca:a7:31:b2:1e:d3:11:d2:51:d5:13:63:b7:3e:ae:c6:2c:
         8f:fe:10:e8:d4:ed:5f:37:87:16:14:72:af:9d:29:f9:14:e6:
         d4:25:0a:9d:79:89:d2:60:1e:de:06:33:64:49:e9:cf:0a:b8:
         68:6b:23:d7:9c:a6:09:ce:76:d1:a1:0a:75:ff:da:62:1a:e6:
         0c:c0:46:7c:7f:83:e0:c5:e9:d4:53:ac:a3:eb:05:e9:fe:4f:
         5f:71:8e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----