Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RypTxH2U7KuLdF6dC134Nq9FY5g.roa
File:                     RypTxH2U7KuLdF6dC134Nq9FY5g.roa (raw, json)
Hash identifier:          qU/UuKlQibgLAEjirK3oWlJnREnuol3HLiSKp8Jx0Rk=
Subject key identifier:   47:2A:53:C4:7D:94:EC:AB:8B:74:5E:9D:0B:5D:F8:36:AF:45:63:98
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RypTxH2U7KuLdF6dC134Nq9FY5g.roa
Signing time:             Thu 15 Sep 2022 02:45:57 +0000
ROA not before:           Thu 15 Sep 2022 02:45:57 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        211.76.126.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8096 (0x1fa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:45:57 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=472A53C47D94ECAB8B745E9D0B5DF836AF456398
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:38:e5:87:32:04:75:71:23:8a:b3:ed:6b:d9:
                    3d:5c:f4:79:8e:4a:3e:2a:fb:03:71:ae:7f:f9:98:
                    78:c6:cd:aa:fe:22:63:d6:23:0f:cf:ee:e5:19:3a:
                    63:8f:aa:4b:f0:5b:7e:b4:7f:95:31:66:57:be:97:
                    a0:02:87:63:64:27:16:72:71:66:5f:d0:bf:0a:26:
                    aa:81:59:fa:07:40:1e:4e:ca:92:d1:6d:99:27:b9:
                    41:93:ad:8d:68:df:ea:48:61:ae:a2:f3:e4:08:b7:
                    4d:4b:e5:37:fe:63:c2:de:f1:b1:a9:fd:88:d4:fc:
                    47:1a:cf:49:29:9d:5a:4a:98:3a:db:8c:28:d3:f8:
                    f4:42:39:f3:2b:27:ca:10:77:24:fc:4d:b6:dd:dd:
                    7c:18:fe:45:4b:dc:63:53:34:d5:01:32:76:58:15:
                    fc:33:ce:5f:95:79:56:87:03:ec:d9:1d:92:0b:04:
                    63:1f:7d:c5:c6:7f:b1:20:23:44:21:6b:a4:a6:d8:
                    9b:f8:8c:da:ee:3c:dd:4c:8f:13:24:2d:8e:6e:5b:
                    54:72:da:41:6d:10:f8:30:6f:ac:77:38:df:b5:ef:
                    74:0d:b5:c3:03:b3:a4:a4:e4:1d:8e:7f:87:2d:8b:
                    54:60:c5:e7:f8:b1:32:3c:ea:dd:64:73:b9:c6:b6:
                    f3:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:2A:53:C4:7D:94:EC:AB:8B:74:5E:9D:0B:5D:F8:36:AF:45:63:98
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RypTxH2U7KuLdF6dC134Nq9FY5g.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.76.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         73:10:06:31:42:0e:c8:a4:ef:2f:29:af:e9:4a:aa:81:61:0b:
         70:af:f7:9a:9f:4a:4f:98:72:a2:e1:fe:98:d3:76:d8:82:4f:
         3d:7f:09:90:81:51:2e:9d:b3:21:8f:35:aa:ce:d2:3f:9b:8b:
         05:19:88:41:ef:61:8d:79:3b:76:e4:d6:1d:aa:75:63:b7:e0:
         15:f0:36:00:55:d6:32:ea:8a:46:40:94:23:c3:5f:34:0e:ad:
         9d:42:bb:d3:40:8a:76:4e:45:0d:77:6b:8e:03:09:71:f0:24:
         28:71:d6:dd:eb:b6:37:b7:14:b8:c7:b0:91:a8:60:aa:3d:04:
         da:89:6f:69:fd:86:c8:3a:87:c5:ab:9f:6b:51:3e:21:27:74:
         da:cb:fd:bc:16:e6:b8:25:2f:c2:6a:d2:be:10:d9:4a:83:0f:
         a5:4b:44:d6:4e:a3:64:76:70:00:41:a9:2c:00:d3:6a:99:5e:
         7a:12:46:cb:68:9d:5b:a2:c7:11:c2:b8:19:55:56:15:0d:dc:
         3f:03:4d:6d:e7:96:6a:c6:5f:c5:18:f0:46:6d:35:22:95:ce:
         34:65:5a:9f:5a:e6:5f:f4:06:ab:47:e8:11:ea:0b:59:49:2a:
         83:63:6d:c7:8e:d1:35:c0:77:c5:90:bb:b8:6a:e9:ec:0b:e2:
         27:ca:5f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----