Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IPSEnw3heTeMGlDfzeRHZkdFEM8.roa
File:                     IPSEnw3heTeMGlDfzeRHZkdFEM8.roa (raw, json)
Hash identifier:          zi7rG/Xj6L2f2vSTq247ysf0YOgirhe5xz+fXnV48oY=
Subject key identifier:   20:F4:84:9F:0D:E1:79:37:8C:1A:50:DF:CD:E4:47:66:47:45:10:CF
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IPSEnw3heTeMGlDfzeRHZkdFEM8.roa
Signing time:             Thu 15 Sep 2022 02:46:08 +0000
ROA not before:           Thu 15 Sep 2022 02:46:08 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     9924
IP address blocks:        123.195.128.0/18 maxlen: 18

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8096 (0x1fa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:46:08 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=20F4849F0DE179378C1A50DFCDE44766474510CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:a5:4d:dc:48:2c:cc:25:f2:22:dd:f0:fb:02:
                    b9:0b:09:7a:cc:a6:c0:39:00:98:e4:27:8e:06:5d:
                    a3:a9:90:8d:d7:55:cf:b0:da:be:13:96:84:2d:9f:
                    9a:24:3f:5f:69:d3:0e:83:d2:f8:2b:50:a2:32:f4:
                    55:cd:5e:70:78:14:5a:d8:bb:5c:cc:98:1f:43:e2:
                    69:60:d0:5a:9b:cf:ad:e6:19:ba:3d:5d:9f:e1:ea:
                    c3:7d:66:52:f8:3e:60:ee:93:9e:0e:30:3c:a9:ef:
                    4e:14:42:3d:ca:3d:26:c9:f5:3d:4f:be:fe:09:04:
                    1d:a3:0b:a2:0d:ed:69:fd:78:a4:7b:6c:e6:99:1a:
                    01:16:5d:27:01:e3:a6:f5:5b:8a:ef:2d:45:8e:cb:
                    ce:86:34:12:47:c0:b3:59:01:58:fe:c5:f0:d9:7f:
                    b0:06:75:01:c6:de:f2:82:c4:ea:52:74:89:a7:c2:
                    31:cb:30:d2:9d:06:70:21:69:23:37:66:ce:3d:c2:
                    21:33:e0:83:47:f3:7f:53:15:be:b2:62:b7:50:e4:
                    48:e3:96:35:3b:2b:a3:f5:04:1f:1f:7d:9f:bb:36:
                    fe:c1:83:df:07:88:28:e8:fa:a6:aa:fd:b1:03:28:
                    1a:85:0c:c5:a2:05:61:64:3d:b6:e1:e2:2d:28:17:
                    e8:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:F4:84:9F:0D:E1:79:37:8C:1A:50:DF:CD:E4:47:66:47:45:10:CF
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IPSEnw3heTeMGlDfzeRHZkdFEM8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         50:d4:19:7b:bc:19:24:af:3f:e3:af:53:25:5b:17:f8:25:20:
         58:7a:c3:13:89:cf:25:81:84:a4:d5:19:1c:06:8b:b9:38:3b:
         d5:2a:89:f6:6c:07:b1:10:cd:56:6c:dd:b6:f7:bf:0c:21:19:
         8f:ca:b0:aa:12:2f:72:c5:6b:70:64:20:18:ad:10:9b:55:b5:
         71:53:c3:08:cb:21:bb:12:55:ca:ac:76:69:24:18:1d:61:63:
         bd:0b:d8:9f:c8:82:ce:9d:24:c9:66:6f:ac:d3:87:6e:a9:27:
         f9:66:de:93:9a:f6:d1:2c:39:08:c2:8e:80:f6:80:17:45:7d:
         b0:9e:35:95:44:46:be:70:63:e2:73:04:70:9b:55:4e:b6:56:
         2c:6e:ae:fd:f9:2a:17:d8:3f:e9:84:57:37:ad:ba:92:07:2c:
         ad:be:d1:47:d3:c1:27:ae:f7:96:60:5c:cf:82:d2:3a:19:3e:
         b1:cd:7d:fc:84:de:57:5d:75:ab:54:c0:47:37:0d:fe:b1:76:
         8c:bf:5a:75:1c:02:e2:8a:12:1d:7d:93:7f:e8:18:0b:3a:1b:
         d4:ad:11:d4:90:30:94:f8:68:b2:5e:76:71:d7:d4:45:74:42:
         6e:83:e3:2f:91:70:f1:81:df:8f:77:67:a0:62:90:34:d5:63:
         56:1d:e2:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----