Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PiJWEcUC3yWu9jZgAXpo60o3CK0.roa
File:                     PiJWEcUC3yWu9jZgAXpo60o3CK0.roa (raw, json)
Hash identifier:          KmYXlTNvJplgyxtQskxMIMKOyIIjxN+HFtIVAT9VqD4=
Subject key identifier:   3E:22:56:11:C5:02:DF:25:AE:F6:36:60:01:7A:68:EB:4A:37:08:AD
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PiJWEcUC3yWu9jZgAXpo60o3CK0.roa
Signing time:             Thu 15 Sep 2022 02:46:22 +0000
ROA not before:           Thu 15 Sep 2022 02:46:22 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        123.193.223.192/26 maxlen: 26

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8096 (0x1fa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:46:22 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=3E225611C502DF25AEF63660017A68EB4A3708AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e5:08:8e:74:f8:91:e8:fc:be:f2:8e:da:63:
                    d5:54:6f:c7:f7:ec:5e:9d:2b:c0:57:e6:10:b4:8f:
                    b7:90:1d:ba:16:62:3e:ec:45:03:b4:2a:95:73:05:
                    87:5e:e0:6d:97:a4:e8:f4:17:5c:dd:88:f6:50:ac:
                    b1:37:d0:ee:af:74:7e:8d:43:05:73:ea:dc:de:3d:
                    4b:90:88:bb:84:8b:d4:e7:d4:e8:89:dc:93:df:87:
                    fa:5d:dc:5b:aa:5e:da:1f:ee:e4:9f:1c:1e:0c:50:
                    7e:6b:db:24:a0:47:28:71:30:50:35:28:e1:30:3c:
                    ba:d2:6e:c9:2d:3f:9a:10:f7:1b:fb:fe:e2:8f:53:
                    a7:64:46:ba:8b:9f:50:fa:b2:9c:48:49:f3:af:72:
                    e7:e9:a6:1b:a9:df:61:d7:50:6e:51:05:cf:c2:d5:
                    61:99:6c:42:17:f7:2d:f5:ed:d0:36:1f:b8:c9:f0:
                    76:57:14:d9:f3:2a:99:da:ae:64:65:dd:2d:6c:2a:
                    e9:d5:80:63:ab:7b:96:37:07:26:93:4f:74:f1:27:
                    30:98:67:d5:de:ec:52:9b:3a:ad:77:f4:85:68:a4:
                    e5:0a:ca:3d:2b:3b:2b:3d:41:93:e3:ea:41:ee:86:
                    05:ed:f7:d3:66:b9:15:77:7c:d4:a0:62:81:bb:5b:
                    14:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:22:56:11:C5:02:DF:25:AE:F6:36:60:01:7A:68:EB:4A:37:08:AD
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PiJWEcUC3yWu9jZgAXpo60o3CK0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.223.192/26

    Signature Algorithm: sha256WithRSAEncryption
         2d:e7:65:4c:bc:8a:2d:c6:8d:cd:7b:d0:c5:8c:ff:49:38:4a:
         67:aa:42:bc:fb:69:50:50:f0:b9:83:75:ce:d9:be:8b:fd:e5:
         09:26:4e:31:b6:64:77:d8:43:67:31:41:49:98:4b:73:43:ab:
         70:3f:ba:ee:88:b5:59:ff:83:0f:f2:1f:b4:04:46:39:ca:f9:
         50:8c:14:08:8f:21:3e:c0:5e:5c:82:50:8c:70:e1:a2:79:13:
         96:b2:e5:c9:09:15:ea:e9:1e:00:5c:93:87:f3:23:68:3d:83:
         66:1b:dc:4d:2f:5c:ab:2a:cd:93:bf:09:01:cc:d6:66:4e:30:
         bc:fd:7e:1d:a9:92:46:70:8b:89:95:65:d7:e8:09:51:0f:01:
         e8:0c:76:d9:5e:ff:9c:50:8b:45:f2:e8:88:91:ad:76:44:47:
         69:96:9a:13:0d:57:1b:0b:20:88:6e:f3:98:ae:80:1b:03:b5:
         1f:48:f8:66:87:b6:a4:2d:4c:e9:c6:52:67:a2:6e:9d:b4:87:
         ff:18:a2:84:44:16:65:41:49:c9:17:10:82:7f:fe:67:03:27:
         d4:7d:30:c8:cf:6b:50:ec:53:63:2c:6b:37:b9:b3:10:8a:19:
         d7:1c:74:12:84:3f:e2:be:fb:88:6a:33:b8:07:a5:06:ee:31:
         94:b2:dc:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----