Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KeA5ZUnvJUAOfSzF9G5ScACJ5TE.roa
File:                     KeA5ZUnvJUAOfSzF9G5ScACJ5TE.roa (raw, json)
Hash identifier:          tc3HTHMgn9DBKmFV3COZhnx4JayO5DzkMhS0UAYy+0o=
Subject key identifier:   29:E0:39:65:49:EF:25:40:0E:7D:2C:C5:F4:6E:52:70:00:89:E5:31
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       213A
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KeA5ZUnvJUAOfSzF9G5ScACJ5TE.roa
Signing time:             Fri 25 Nov 2022 04:39:40 +0000
ROA not before:           Fri 25 Nov 2022 04:39:40 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        180.176.192.0/21 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8506 (0x213a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:39:40 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=29E0396549EF25400E7D2CC5F46E52700089E531
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:8e:80:5d:96:d3:0a:74:58:a6:d0:32:43:d0:
                    14:a7:28:5d:05:2f:61:5b:71:df:04:b2:bc:37:25:
                    dd:2d:ee:9f:54:dc:38:7a:96:b7:b7:fb:fc:29:f0:
                    20:8f:37:6c:f3:f3:af:16:95:c4:f8:f2:b0:9e:d9:
                    97:0d:9c:fa:a1:8f:2e:5b:1b:e8:e4:7e:75:1b:25:
                    c0:c3:b2:c1:69:01:25:ec:e4:df:e3:6e:41:21:00:
                    f0:a5:75:07:19:fe:f2:d6:b1:d2:f1:86:53:81:33:
                    33:c2:e2:40:30:84:8a:4c:76:c0:3b:84:a5:9c:b1:
                    57:5f:3a:70:3d:74:dc:58:da:84:0d:ff:50:72:99:
                    0c:7d:75:e8:c4:f4:7c:3c:39:5a:ae:93:14:31:05:
                    c2:a4:54:27:f5:63:09:62:01:36:69:47:19:e7:c1:
                    ed:81:0d:5a:23:89:68:07:a3:65:b8:67:7f:1e:2b:
                    8a:17:2a:87:88:69:7e:b8:05:25:89:38:66:fb:5b:
                    60:b2:cc:38:03:67:f5:a4:fb:31:0c:ef:b7:d2:bc:
                    80:35:d7:b8:ba:d4:55:e6:da:fa:2c:f9:83:5c:15:
                    b4:81:ee:e5:30:7f:1e:29:10:79:62:32:ac:cc:d0:
                    40:36:46:7d:1f:53:d2:05:d5:76:07:89:85:fc:3c:
                    61:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:E0:39:65:49:EF:25:40:0E:7D:2C:C5:F4:6E:52:70:00:89:E5:31
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KeA5ZUnvJUAOfSzF9G5ScACJ5TE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         94:11:ac:0c:ff:2b:94:45:50:12:55:ed:62:3d:b7:f9:d5:79:
         5f:1f:8b:20:5d:7d:ed:32:b8:0f:60:d4:4e:98:94:0a:52:c8:
         ca:57:2f:7a:21:da:16:d5:65:87:7a:51:f8:78:b4:12:53:c3:
         4d:78:2e:f8:70:15:36:0c:65:49:e5:f3:2f:4f:3b:e8:e9:ca:
         4b:3e:46:58:67:c0:fb:d0:66:32:8a:c9:69:3b:2d:73:78:96:
         d5:ab:31:f2:b6:a2:b8:4e:45:66:b4:22:d0:a7:9a:9b:ae:95:
         12:15:07:ef:45:38:b6:94:9d:a5:dd:9b:b9:e7:d5:51:4c:5a:
         13:45:bd:75:99:ee:15:db:80:c3:4e:30:8c:1a:11:1e:97:4d:
         79:1d:53:6b:07:ea:68:e7:20:86:32:2e:eb:1b:82:c7:47:68:
         8a:6b:36:63:a6:13:d3:e4:17:80:b4:4c:d8:6f:ee:57:75:fd:
         7e:fd:f8:cc:e3:34:c2:cc:86:7a:75:41:75:61:dd:35:07:1a:
         a8:3e:1a:3a:42:17:1b:12:27:3f:39:c7:92:7a:df:e1:0a:fa:
         7f:11:4e:1d:9e:c1:53:47:27:c7:3e:a9:57:0b:5c:51:05:1a:
         eb:65:13:df:6e:34:5d:25:1a:c4:95:ef:a0:32:4f:5f:42:2b:
         f8:08:79:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----