Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Id2xB7xZuGRpAgsvCyeRWQ2FQec.roa
File:                     Id2xB7xZuGRpAgsvCyeRWQ2FQec.roa (raw, json)
Hash identifier:          GfH7S5URxoWqPhpnpe+09I56zYFcAGqkxX3uf4xFTWs=
Subject key identifier:   21:DD:B1:07:BC:59:B8:64:69:02:0B:2F:0B:27:91:59:0D:85:41:E7
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Id2xB7xZuGRpAgsvCyeRWQ2FQec.roa
Signing time:             Thu 15 Sep 2022 02:46:32 +0000
ROA not before:           Thu 15 Sep 2022 02:46:32 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        123.192.96.0/20 maxlen: 20

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8096 (0x1fa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:46:32 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=21DDB107BC59B86469020B2F0B2791590D8541E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ed:58:a4:19:0b:40:f8:9d:ff:83:c1:bd:b5:
                    ab:e5:1f:0f:ae:25:b6:bd:84:b4:f5:f9:42:89:92:
                    0b:4d:ed:76:13:2e:b9:30:be:a5:58:a8:fa:f8:c4:
                    05:e6:1e:c3:c8:78:29:e5:9d:5f:cc:98:f8:87:a8:
                    4e:bb:33:96:7b:c6:53:51:84:b0:c7:f6:f5:37:b7:
                    af:f1:9e:86:dc:72:5b:66:67:1e:c1:d6:60:41:c5:
                    bd:60:83:d9:bd:94:c6:d1:0b:b7:87:03:d4:1e:de:
                    1d:cb:c1:bb:e6:93:41:52:74:01:38:77:8f:24:2a:
                    a0:8c:ca:c3:69:88:95:81:20:ed:20:86:18:6c:6c:
                    b5:8b:3c:4d:d6:b4:b4:f7:28:09:2a:c3:9d:71:53:
                    2f:8b:97:40:3a:89:56:cd:c4:73:cb:25:80:4d:b4:
                    21:2a:ca:a7:5e:f5:a2:e7:7a:1a:1f:17:5b:3f:09:
                    7c:e9:79:46:64:30:63:6e:12:75:e9:f2:81:50:d6:
                    ab:90:bb:d9:a5:6c:26:42:71:f9:ff:21:d9:4c:cf:
                    0b:0b:12:7d:91:e9:45:6d:68:ff:ad:01:e8:fb:79:
                    bc:64:3f:9d:89:a4:0b:f6:a8:a0:92:55:1b:28:6e:
                    26:33:02:cf:e1:8b:8a:9e:5d:6f:fe:06:03:6d:5e:
                    0f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:DD:B1:07:BC:59:B8:64:69:02:0B:2F:0B:27:91:59:0D:85:41:E7
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Id2xB7xZuGRpAgsvCyeRWQ2FQec.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.192.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         52:3d:ee:6c:90:52:e1:eb:1a:3e:fc:1d:35:d3:7f:44:cd:9c:
         c1:51:91:34:e9:06:6e:5b:46:f3:a6:d2:1c:f2:c5:35:24:1d:
         2d:82:b2:70:ea:37:64:d2:51:47:db:53:42:a8:33:b5:0f:45:
         d5:ec:f0:fa:e7:b3:15:2f:b8:05:71:fc:a7:f9:04:88:c2:d8:
         7f:c3:3b:43:97:1a:fd:80:85:19:a2:25:ec:22:d7:aa:e0:5d:
         a0:73:bd:fe:03:d8:5d:07:ad:e9:72:e3:bb:cc:c4:12:f1:f4:
         14:7f:ac:c2:e2:ba:fe:64:43:d3:eb:6b:95:39:fb:5b:9b:fe:
         5e:0f:d4:19:f6:99:a6:b5:c8:62:a8:50:53:84:c2:2b:63:b7:
         44:9a:29:16:7c:ee:b3:6b:90:b8:b7:72:a4:34:6c:d4:35:68:
         1b:17:af:39:0a:f9:ba:e7:9f:4d:4c:fd:21:81:08:0b:65:93:
         32:17:1e:bf:de:d6:f1:13:9c:f9:59:ad:7f:0a:7b:c2:b9:25:
         de:08:80:13:60:e8:5e:91:10:ce:a6:1d:54:07:66:a4:5f:01:
         92:2c:e6:c9:51:89:76:29:66:58:71:7a:c8:9c:bd:67:d0:91:
         c6:dd:80:a7:1b:ee:8f:a0:ff:1f:74:dc:58:ba:bb:f6:65:4a:
         15:b7:f5:7c
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH6AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MTUw
MjQ2MzJaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDIxRERCMTA3QkM1OUI4
NjQ2OTAyMEIyRjBCMjc5MTU5MEQ4NTQxRTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDm7VikGQtA+J3/g8G9tavlHw+uJba9hLT1+UKJkgtN7XYTLrkw
vqVYqPr4xAXmHsPIeCnlnV/MmPiHqE67M5Z7xlNRhLDH9vU3t6/xnobccltmZx7B
1mBBxb1gg9m9lMbRC7eHA9Qe3h3Lwbvmk0FSdAE4d48kKqCMysNpiJWBIO0ghhhs
bLWLPE3WtLT3KAkqw51xUy+Ll0A6iVbNxHPLJYBNtCEqyqde9aLnehofF1s/CXzp
eUZkMGNuEnXp8oFQ1quQu9mlbCZCcfn/IdlMzwsLEn2R6UVtaP+tAej7ebxkP52J
pAv2qKCSVRsobiYzAs/hi4qeXW/+BgNtXg/hAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUId2xB7xZuGRpAgsvCyeRWQ2FQecwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0lkMnhCN3hadUdScEFnc3ZD
eWVSV1EyRlFlYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAR7
wGAwDQYJKoZIhvcNAQELBQADggEBAFI97myQUuHrGj78HTXTf0TNnMFRkTTpBm5b
RvOm0hzyxTUkHS2CsnDqN2TSUUfbU0KoM7UPRdXs8PrnsxUvuAVx/Kf5BIjC2H/D
O0OXGv2AhRmiJewi16rgXaBzvf4D2F0Hrely47vMxBLx9BR/rMLiuv5kQ9Pra5U5
+1ub/l4P1Bn2maa1yGKoUFOEwitjt0SaKRZ87rNrkLi3cqQ0bNQ1aBsXrzkK+brn
n01M/SGBCAtlkzIXHr/e1vETnPlZrX8Ke8K5Jd4IgBNg6F6REM6mHVQHZqRfAZIs
5slRiXYpZlhxesicvWfQkcbdgKcb7o+g/x903Fi6u/ZlShW39Xw=
-----END CERTIFICATE-----