Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Jy0-AXICkhGHFhYWGzL4uwBuJBU.roa
File:                     Jy0-AXICkhGHFhYWGzL4uwBuJBU.roa (raw, json)
Hash identifier:          a9W7wRotxD8KJFrMi9tSx7fPxBfCYrRByM/uAY+NSEM=
Subject key identifier:   27:2D:3E:01:72:02:92:11:87:16:16:16:1B:32:F8:BB:00:6E:24:15
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Jy0-AXICkhGHFhYWGzL4uwBuJBU.roa
Signing time:             Thu 15 Sep 2022 02:45:33 +0000
ROA not before:           Thu 15 Sep 2022 02:45:33 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        123.194.204.128/25 maxlen: 25

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8096 (0x1fa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:45:33 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=272D3E0172029211871616161B32F8BB006E2415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:b9:3c:20:93:fc:36:9e:ec:cf:bc:a2:38:ca:
                    1e:5f:97:2a:49:7e:93:7f:b4:0e:fa:dd:ae:c2:95:
                    b5:93:94:c8:e2:ef:3e:ef:e2:37:d2:54:31:c0:1c:
                    e9:02:2d:c3:26:2f:7a:38:2a:47:20:d8:f9:66:62:
                    6e:a9:6e:e5:d1:83:58:b3:49:97:b7:91:f1:2f:0e:
                    49:b7:6d:07:2a:fd:0f:1c:57:ef:55:ae:12:c2:39:
                    f2:73:ab:e9:4a:22:f8:1a:a1:21:9f:a8:0a:de:fb:
                    7f:c5:2c:36:cb:85:89:dc:a9:15:80:dd:23:e4:88:
                    03:a6:15:05:4e:ba:09:8d:8c:7e:ca:4e:5a:ba:dc:
                    52:90:57:7e:5f:11:91:8c:a4:dc:e2:c3:cb:41:39:
                    17:ad:ce:00:6f:61:0b:f4:d0:74:dd:79:03:b3:52:
                    0a:af:c0:fa:5c:a3:41:a1:c3:21:73:ac:12:18:b1:
                    db:44:d4:76:54:26:09:a1:eb:b4:54:d4:f3:6f:00:
                    65:ff:52:16:80:9c:b0:e7:b5:84:f1:57:f2:f4:4d:
                    48:ee:4a:d5:be:e2:d3:9e:e0:be:41:c3:f0:8c:72:
                    43:f3:6b:83:ce:31:4b:e1:b9:c5:30:e1:4b:74:89:
                    aa:dc:e7:2f:a5:e7:9c:cf:45:9b:fb:ef:f1:f3:b5:
                    0e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:2D:3E:01:72:02:92:11:87:16:16:16:1B:32:F8:BB:00:6E:24:15
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Jy0-AXICkhGHFhYWGzL4uwBuJBU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.204.128/25

    Signature Algorithm: sha256WithRSAEncryption
         81:da:e2:73:9c:dc:0b:9a:d0:d0:dc:1d:48:e6:0a:c8:0f:10:
         75:f3:5d:6d:8a:e8:ec:b9:82:83:b9:d6:bb:6c:ba:34:41:53:
         6d:6e:ff:e2:01:08:4f:03:9b:43:d5:7c:cd:ec:82:1b:c1:ce:
         49:61:98:43:e0:2b:9e:b0:ec:93:05:a9:52:6b:fd:de:aa:05:
         9f:9f:4c:4c:f5:8f:b7:c1:1b:a9:58:69:44:fc:f3:8a:6a:01:
         49:c2:85:78:7b:2b:a5:65:32:c3:2d:41:ad:c7:81:f4:e1:b9:
         7e:d0:95:41:44:32:27:38:09:e4:5f:d8:36:91:2c:8b:91:b2:
         bb:28:a2:44:c4:07:1c:61:8c:d9:46:82:b9:14:5b:4c:8b:e7:
         1d:1b:df:31:99:88:e4:35:6c:0d:54:c3:97:f7:cb:c9:fa:8c:
         42:f6:b3:c3:20:c6:9e:cd:26:f6:df:f9:71:c6:fe:45:3b:31:
         99:64:ce:3c:c3:9f:b8:35:09:ed:88:b6:ca:02:25:f7:1a:7a:
         f3:79:99:e6:24:d5:21:b7:6c:4e:53:52:5f:b2:7e:ec:ac:4c:
         89:85:51:90:cc:32:57:7d:11:9f:cb:88:a7:d1:a4:d9:45:31:
         0b:73:7d:16:08:4a:5c:03:a0:96:00:cd:d9:2f:4f:c3:6a:cd:
         87:6f:a3:48
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgICH6AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MTUw
MjQ1MzNaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDI3MkQzRTAxNzIwMjky
MTE4NzE2MTYxNjFCMzJGOEJCMDA2RTI0MTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDiuTwgk/w2nuzPvKI4yh5flypJfpN/tA763a7ClbWTlMji7z7v
4jfSVDHAHOkCLcMmL3o4Kkcg2PlmYm6pbuXRg1izSZe3kfEvDkm3bQcq/Q8cV+9V
rhLCOfJzq+lKIvgaoSGfqAre+3/FLDbLhYncqRWA3SPkiAOmFQVOugmNjH7KTlq6
3FKQV35fEZGMpNziw8tBORetzgBvYQv00HTdeQOzUgqvwPpco0GhwyFzrBIYsdtE
1HZUJgmh67RU1PNvAGX/UhaAnLDntYTxV/L0TUjuStW+4tOe4L5Bw/CMckPza4PO
MUvhucUw4Ut0iarc5y+l55zPRZv77/HztQ4TAgMBAAGjggHvMIIB6zAdBgNVHQ4E
FgQUJy0+AXICkhGHFhYWGzL4uwBuJBUwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0p5MC1BWElDa2hHSEZoWVdH
ekw0dXdCdUpCVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQd7
wsyAMA0GCSqGSIb3DQEBCwUAA4IBAQCB2uJznNwLmtDQ3B1I5grIDxB1811tiujs
uYKDuda7bLo0QVNtbv/iAQhPA5tD1XzN7IIbwc5JYZhD4CuesOyTBalSa/3eqgWf
n0xM9Y+3wRupWGlE/POKagFJwoV4eyulZTLDLUGtx4H04bl+0JVBRDInOAnkX9g2
kSyLkbK7KKJExAccYYzZRoK5FFtMi+cdG98xmYjkNWwNVMOX98vJ+oxC9rPDIMae
zSb23/lxxv5FOzGZZM48w5+4NQntiLbKAiX3GnrzeZnmJNUht2xOU1Jfsn7srEyJ
hVGQzDJXfRGfy4in0aTZRTELc30WCEpcA6CWAM3ZL0/Das2Hb6NI
-----END CERTIFICATE-----