Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RIaU5mQmmvs-uCiCkWvPMX4eAG8.roa
File:                     RIaU5mQmmvs-uCiCkWvPMX4eAG8.roa (raw, json)
Hash identifier:          bq5DMbP1XIBt1n/jYuybAzMArfjv66TUSNFgztpBrCU=
Subject key identifier:   44:86:94:E6:64:26:9A:FB:3E:B8:28:82:91:6B:CF:31:7E:1E:00:6F
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       2016
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RIaU5mQmmvs-uCiCkWvPMX4eAG8.roa
Signing time:             Fri 25 Nov 2022 04:38:18 +0000
ROA not before:           Fri 25 Nov 2022 04:38:18 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        118.233.88.0/21 maxlen: 21

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8214 (0x2016)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:38:18 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=448694E664269AFB3EB82882916BCF317E1E006F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8c:5a:89:59:ee:98:28:38:0d:bb:e6:0d:c8:
                    91:d4:4b:74:e5:89:91:a0:58:82:37:f3:8e:7c:75:
                    05:3c:cd:f7:c2:33:5d:93:ec:99:3c:4b:aa:ea:50:
                    6d:c6:db:95:e8:fc:9f:49:34:75:35:9f:9e:a9:d7:
                    c7:6c:da:69:f1:ee:0b:10:b9:17:46:b4:a3:1d:a7:
                    95:2d:c1:0f:d5:86:a5:f5:48:a4:e2:07:f6:3f:3d:
                    c4:77:0a:6f:33:d4:c5:18:30:47:b3:d8:0b:0d:61:
                    b4:2e:92:3b:7b:33:ba:06:b2:d4:eb:c8:8e:ce:f5:
                    6d:6b:8e:69:55:06:7e:76:e7:ad:57:21:ac:58:99:
                    77:89:c4:4e:49:00:64:ff:bd:17:b6:85:45:62:bd:
                    27:78:81:2a:3b:28:9a:45:d3:5a:e5:82:79:d2:43:
                    8e:53:d4:aa:e4:a6:a8:30:81:12:d7:21:cf:72:cc:
                    97:ed:50:9a:50:c8:97:e2:91:b4:e5:3a:f2:d8:e8:
                    ba:6d:8b:1e:8f:c8:c1:4c:8b:cc:3f:c1:af:b0:fc:
                    64:bf:7b:27:90:95:7e:42:6e:74:f0:31:93:a0:52:
                    de:ee:26:16:23:8d:16:b1:98:9e:46:c8:2f:ad:43:
                    2e:cf:44:f5:37:8c:6f:80:b6:d9:5e:c2:04:2d:ad:
                    1f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:86:94:E6:64:26:9A:FB:3E:B8:28:82:91:6B:CF:31:7E:1E:00:6F
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RIaU5mQmmvs-uCiCkWvPMX4eAG8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.233.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         86:7c:13:a5:07:1a:a1:eb:c1:a0:b8:f0:af:a9:bc:c6:fe:8c:
         d5:36:1e:7a:8d:cc:d2:52:55:96:90:c0:79:f2:d6:59:0c:91:
         8a:cf:0d:51:1a:10:f2:7f:11:4b:30:1b:86:e3:27:e3:11:7f:
         8d:b1:09:a1:af:a3:47:67:97:65:9f:79:da:9d:4a:da:59:e1:
         6d:03:39:3a:ba:12:4c:47:a7:41:3e:d3:3c:e5:10:27:e8:32:
         59:82:5e:25:37:fe:71:e3:4e:d1:19:c3:ea:c5:4a:42:b9:08:
         e3:41:27:97:64:35:92:0a:2c:44:07:72:30:bb:86:99:a3:fa:
         09:2c:e7:c1:28:84:22:fd:06:91:0e:f0:45:75:84:f2:39:3f:
         80:74:56:6d:aa:67:d8:bb:52:c8:40:fa:d2:29:a2:96:0d:5d:
         d2:2f:31:81:7e:d1:ed:bc:8d:0c:3a:28:27:19:3e:34:f9:84:
         e2:b2:12:46:c7:18:f4:02:34:38:dd:06:3b:26:d1:1d:33:92:
         f2:b8:b8:ed:ef:aa:a4:71:76:e9:27:7d:cc:09:99:d6:df:a3:
         b5:69:0c:46:04:65:aa:fa:d9:a9:9f:de:59:ce:7c:f3:27:e8:
         06:fa:85:44:1b:d9:92:ba:32:8b:53:d6:11:bc:da:51:a6:4e:
         b1:bf:b5:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----