Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RADGH711sMtgbjwbt8WlNIkV_yM.roa
File:                     RADGH711sMtgbjwbt8WlNIkV_yM.roa (raw, json)
Hash identifier:          PvWrO0G6l7VpKWYnMFi58lewl3f0REE8EMc2fjyIs28=
Subject key identifier:   44:00:C6:1F:BD:75:B0:CB:60:6E:3C:1B:B7:C5:A5:34:89:15:FF:23
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       21FF
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RADGH711sMtgbjwbt8WlNIkV_yM.roa
Signing time:             Fri 25 Nov 2022 04:40:39 +0000
ROA not before:           Fri 25 Nov 2022 04:40:39 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        2407:4d00:ff05::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8703 (0x21ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:40:39 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=4400C61FBD75B0CB606E3C1BB7C5A5348915FF23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c4:90:f9:2e:66:04:62:68:7f:78:02:3e:7a:
                    0a:ca:e7:68:f5:19:77:63:39:a6:a2:bc:06:34:fa:
                    50:b5:2b:f7:06:52:4f:3d:29:cd:ba:7b:8e:95:5d:
                    ce:2e:df:1c:c3:3d:09:7b:30:09:b4:0e:9b:aa:e8:
                    7d:6c:a7:39:59:f6:e6:d1:72:53:3d:68:3f:1c:d6:
                    37:0b:bf:77:23:72:17:28:01:c9:32:b6:0e:c2:f2:
                    70:ea:b8:9f:ea:46:55:9b:49:48:f1:1c:be:d5:83:
                    fc:ac:ed:87:e2:47:f7:e2:62:ac:52:ef:28:4c:d3:
                    73:99:c1:41:93:0c:47:8a:cf:ee:3e:e9:7d:60:b1:
                    fc:b2:e6:11:43:fe:da:58:bd:9e:10:b2:bd:35:e8:
                    39:55:f8:ed:01:98:fb:48:cb:b9:10:da:76:2e:c1:
                    01:7a:9c:e7:01:e1:2d:6d:1e:e0:b4:30:bc:42:33:
                    2c:1d:a2:01:50:2f:36:4f:dd:82:39:64:bf:cb:85:
                    c9:5e:9c:d6:3e:38:24:4b:a1:b8:fd:4b:34:4b:60:
                    1e:1d:2d:29:a4:dc:2c:80:eb:e9:c6:70:58:32:b9:
                    48:48:cb:a2:d7:ea:cf:e0:a2:b7:69:89:69:55:3e:
                    38:a0:e1:fa:b8:53:5c:66:6e:1f:c7:2f:48:a0:e5:
                    0c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:00:C6:1F:BD:75:B0:CB:60:6E:3C:1B:B7:C5:A5:34:89:15:FF:23
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RADGH711sMtgbjwbt8WlNIkV_yM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:4d00:ff05::/48

    Signature Algorithm: sha256WithRSAEncryption
         53:24:3a:be:75:59:7e:bd:1e:4c:0b:ca:e9:ea:8a:39:ea:7d:
         41:0b:d8:e3:9f:6a:b7:bf:de:d3:75:99:12:e0:10:0f:0e:7f:
         fa:1f:56:af:81:90:f1:31:79:00:44:df:fe:49:b8:95:5a:9d:
         70:a4:20:89:c5:b5:d9:21:1f:d3:da:f0:08:1b:e0:6a:d0:5f:
         3d:30:d0:70:ca:b9:9b:b1:9c:1a:b4:92:d2:f1:0b:5e:9a:a0:
         55:5c:71:db:60:ab:31:27:7b:1f:dd:2e:25:ec:4b:c6:16:f9:
         24:ac:32:a9:1f:a0:c1:f5:5d:b1:21:fe:5b:d3:44:cc:6f:7b:
         d1:f7:82:95:f8:99:0d:66:07:9b:9b:ed:52:92:00:f8:aa:62:
         9c:4c:c9:70:67:01:cf:39:57:90:37:bd:a6:63:7e:79:33:88:
         b6:9e:89:17:0e:81:6b:a2:ff:cf:84:b5:2b:70:58:23:94:ca:
         a3:aa:a8:40:a0:61:58:06:fb:4f:3a:82:c7:bf:7a:c1:b8:4e:
         6f:6f:bd:eb:93:75:d5:42:9d:b6:66:91:37:17:87:3b:97:e9:
         30:9a:b9:8c:a9:26:43:78:b7:a3:8f:a0:ca:cf:83:c0:75:7e:
         3c:b7:c8:69:56:2c:97:dc:89:84:de:45:38:96:52:81:12:08:
         c1:b5:cf:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----