Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Pqh9rLFKoJBu55AsGgpWuwTnjbw.roa
File:                     Pqh9rLFKoJBu55AsGgpWuwTnjbw.roa (raw, json)
Hash identifier:          b7fKlaIpKsAHrKimKX3wtYQvjriw1nFXFPvkVS2TCbg=
Subject key identifier:   3E:A8:7D:AC:B1:4A:A0:90:6E:E7:90:2C:1A:0A:56:BB:04:E7:8D:BC
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       2135
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Pqh9rLFKoJBu55AsGgpWuwTnjbw.roa
Signing time:             Fri 25 Nov 2022 04:39:38 +0000
ROA not before:           Fri 25 Nov 2022 04:39:38 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        123.193.111.192/28 maxlen: 28

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8501 (0x2135)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:39:38 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=3EA87DACB14AA0906EE7902C1A0A56BB04E78DBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:68:3a:48:f0:e0:95:b2:87:16:af:a4:bb:69:
                    15:7b:c5:4f:53:65:81:25:9b:28:64:3c:3f:13:49:
                    44:ac:86:35:c6:5a:d0:ab:ee:81:b2:7a:89:76:3c:
                    54:4b:78:6d:8d:40:f6:43:7a:b9:97:d5:78:6f:93:
                    0a:09:f4:34:06:06:a4:28:7b:d4:f4:f2:d6:f6:08:
                    65:6d:24:fd:3c:c8:14:d7:ac:3c:1b:1b:4b:a5:2a:
                    4d:75:75:83:47:f5:ce:3d:7a:1e:62:d8:e9:1e:ae:
                    2b:06:cd:b3:ee:b7:fb:58:b3:cf:30:9f:18:3c:3a:
                    44:00:d5:ba:dd:9f:6b:aa:27:d8:de:fe:59:37:43:
                    86:52:0b:74:4c:63:13:96:4d:74:69:f4:24:d4:41:
                    7b:10:98:f7:90:a8:0c:3a:38:89:79:9e:c3:f3:f6:
                    4c:4a:ce:0a:09:0b:46:80:f2:60:83:31:8f:ce:70:
                    73:04:90:a5:2e:37:90:75:9e:97:52:9b:e7:c0:37:
                    4c:63:63:9f:71:25:d3:ed:be:3b:7c:ba:10:02:fd:
                    fc:4c:96:9f:24:36:7b:ea:0d:94:79:49:e0:bc:eb:
                    7b:f9:ec:6b:48:70:66:2a:ad:e9:fc:eb:65:04:f4:
                    e0:8f:8a:06:39:8e:4e:6d:40:fb:33:b5:31:0a:a5:
                    e4:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:A8:7D:AC:B1:4A:A0:90:6E:E7:90:2C:1A:0A:56:BB:04:E7:8D:BC
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Pqh9rLFKoJBu55AsGgpWuwTnjbw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.111.192/28

    Signature Algorithm: sha256WithRSAEncryption
         ba:e9:3b:0c:6f:5e:ed:8d:a1:8f:b9:19:d4:e2:93:ed:4a:eb:
         82:e2:bc:05:9d:89:7b:d8:f5:12:f6:35:81:18:75:d6:75:9b:
         af:ab:c1:f9:bf:a1:01:9b:9a:2f:53:68:7b:53:b7:ac:fa:dc:
         a1:de:44:46:96:96:12:e1:f8:c4:77:3a:d1:ab:10:2b:73:a8:
         16:c2:67:17:e5:b3:63:af:25:68:b1:66:a9:70:2a:fe:6a:83:
         94:02:25:4e:c7:db:f3:aa:86:e4:37:b1:82:e2:84:2d:d1:b8:
         f2:bc:8d:2f:33:7e:97:16:80:7c:b0:ff:bf:bc:3f:f7:74:9e:
         19:d4:b9:c6:5e:79:d9:cb:c7:0c:a8:f4:06:c2:7e:dd:70:ba:
         3c:4f:ea:09:bf:a1:14:ba:37:03:96:88:15:29:65:c4:c2:c4:
         d6:74:a2:8c:7a:34:f1:15:e1:e8:42:9b:dc:be:9c:78:48:a6:
         bf:83:b4:ac:4b:a2:f0:97:88:ed:ea:de:65:fe:85:16:ed:5c:
         ea:62:17:b2:7a:c2:89:05:07:b8:8f:f6:d4:af:3d:99:00:b6:
         9a:24:37:94:ea:50:c2:92:5f:1b:04:63:49:a3:4d:c9:51:18:
         22:9a:45:f7:c1:13:59:cb:f3:b2:f5:2b:2b:30:b5:2a:9d:22:
         57:f4:c2:e8
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgICITUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDM5MzhaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDNFQTg3REFDQjE0QUEw
OTA2RUU3OTAyQzFBMEE1NkJCMDRFNzhEQkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDNaDpI8OCVsocWr6S7aRV7xU9TZYElmyhkPD8TSUSshjXGWtCr
7oGyeol2PFRLeG2NQPZDermX1XhvkwoJ9DQGBqQoe9T08tb2CGVtJP08yBTXrDwb
G0ulKk11dYNH9c49eh5i2OkerisGzbPut/tYs88wnxg8OkQA1brdn2uqJ9je/lk3
Q4ZSC3RMYxOWTXRp9CTUQXsQmPeQqAw6OIl5nsPz9kxKzgoJC0aA8mCDMY/OcHME
kKUuN5B1npdSm+fAN0xjY59xJdPtvjt8uhAC/fxMlp8kNnvqDZR5SeC863v57GtI
cGYqren862UE9OCPigY5jk5tQPsztTEKpeQPAgMBAAGjggHvMIIB6zAdBgNVHQ4E
FgQUPqh9rLFKoJBu55AsGgpWuwTnjbwwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1BxaDlyTEZLb0pCdTU1QXNH
Z3BXdXdUbmpidy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQR7
wW/AMA0GCSqGSIb3DQEBCwUAA4IBAQC66TsMb17tjaGPuRnU4pPtSuuC4rwFnYl7
2PUS9jWBGHXWdZuvq8H5v6EBm5ovU2h7U7es+tyh3kRGlpYS4fjEdzrRqxArc6gW
wmcX5bNjryVosWapcCr+aoOUAiVOx9vzqobkN7GC4oQt0bjyvI0vM36XFoB8sP+/
vD/3dJ4Z1LnGXnnZy8cMqPQGwn7dcLo8T+oJv6EUujcDlogVKWXEwsTWdKKMejTx
FeHoQpvcvpx4SKa/g7SsS6Lwl4jt6t5l/oUW7VzqYheyesKJBQe4j/bUrz2ZALaa
JDeU6lDCkl8bBGNJo03JURgimkX3wRNZy/Oy9SsrMLUqnSJX9MLo
-----END CERTIFICATE-----