Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JSZkBNfQAksNjofJ9CBMcgCjn40.roa
File:                     JSZkBNfQAksNjofJ9CBMcgCjn40.roa (raw, json)
Hash identifier:          fUD7/LqbFeKrl4xm91lBw498jCFoTethmlt/yetxm6w=
Subject key identifier:   25:26:64:04:D7:D0:02:4B:0D:8E:87:C9:F4:20:4C:72:00:A3:9F:8D
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       22B7
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JSZkBNfQAksNjofJ9CBMcgCjn40.roa
Signing time:             Fri 25 Nov 2022 04:41:33 +0000
ROA not before:           Fri 25 Nov 2022 04:41:33 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        180.177.184.0/21 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8887 (0x22b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:41:33 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=25266404D7D0024B0D8E87C9F4204C7200A39F8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:29:aa:28:31:af:5d:49:2a:b8:bf:5f:eb:6f:
                    b0:3a:61:17:bd:87:ce:a6:bd:f0:d7:1a:47:6f:6f:
                    8a:41:45:89:8a:bd:a2:1a:f2:21:ca:54:db:49:b3:
                    52:6e:a6:a6:a6:1b:be:3f:49:10:25:05:0c:25:93:
                    7d:93:81:3d:c2:5b:c1:8a:bf:ec:e7:65:16:33:50:
                    93:26:f8:62:eb:06:15:1c:02:d5:8a:db:f3:80:a0:
                    78:74:77:8d:cc:9f:53:a8:3f:2e:29:c3:64:f4:44:
                    0e:de:80:e1:82:8a:0a:e8:dc:5f:87:47:c6:1f:4a:
                    19:7e:1a:b4:6a:a2:11:9c:e2:e6:88:a0:14:30:1d:
                    f4:2e:f4:17:a1:fd:2a:1d:a7:f0:15:c7:d0:4c:f0:
                    68:54:6c:20:04:45:6c:2a:2b:ef:28:89:5d:a2:40:
                    f9:f6:3e:43:2f:ab:dd:e2:99:6e:34:42:4c:61:b0:
                    73:6d:f8:b9:4d:fd:cd:a6:40:d8:7a:41:09:e2:4b:
                    d2:f0:79:6a:52:ee:54:0b:63:e4:ec:cf:59:48:f8:
                    2f:f4:ad:48:8d:41:98:25:db:ed:aa:60:99:a5:9a:
                    a1:7d:a9:dc:24:db:98:37:d1:b1:c0:04:81:77:e0:
                    56:74:73:99:92:49:cf:9a:5f:cc:34:96:1c:b7:c8:
                    ac:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:26:64:04:D7:D0:02:4B:0D:8E:87:C9:F4:20:4C:72:00:A3:9F:8D
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JSZkBNfQAksNjofJ9CBMcgCjn40.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5b:9a:d2:2e:3c:97:e5:a5:8c:1e:c2:ad:ab:ce:ae:fd:a8:6b:
         d4:dc:99:60:1f:14:c3:22:49:b4:23:ba:d8:45:8f:23:0a:4a:
         33:e2:2a:8e:5b:4b:a6:4e:39:e2:65:1e:f6:0a:f5:14:6e:87:
         b0:ae:5a:37:85:6a:2f:67:2e:71:68:3a:5b:b1:b8:6d:61:a2:
         cc:a7:d5:b3:69:0d:00:78:b4:28:7b:68:75:d1:c6:52:72:1b:
         07:b2:34:c0:ec:e8:0f:98:c8:fc:d2:f8:ec:b7:ee:de:30:cf:
         8d:3e:b8:1d:01:27:24:78:d8:69:11:36:e4:44:0c:00:4e:f6:
         7d:20:b5:59:4a:c1:6d:aa:27:6c:93:b1:82:f0:af:3d:74:b3:
         1c:8c:b2:c5:b6:c7:f7:36:49:3b:5a:e4:9e:20:df:36:22:ad:
         39:0c:e3:e3:fe:30:fe:7f:39:b2:ca:1b:05:c8:d4:e1:b1:b3:
         8d:8b:8b:2e:de:27:65:a9:f6:94:b9:68:20:1d:27:c0:2c:1b:
         33:1e:ff:f7:6b:c9:e7:03:9f:c1:45:9c:5b:e1:d1:10:5c:5b:
         59:e6:8a:0e:88:12:8f:8b:6e:55:d5:c5:7e:56:4a:1f:5f:5c:
         66:1f:31:c4:5c:69:26:51:86:20:78:04:87:aa:35:ec:de:96:
         b7:ac:3d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----