Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/T7M3QROazRt-E5FLdKKyzoQaWqk.roa
File:                     T7M3QROazRt-E5FLdKKyzoQaWqk.roa (raw, json)
Hash identifier:          jIA4nftjr4rFgGm+v/PvPos0E3a/q7nkUIdhzOWD3VM=
Subject key identifier:   4F:B3:37:41:13:9A:CD:1B:7E:13:91:4B:74:A2:B2:CE:84:1A:5A:A9
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FDB
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/T7M3QROazRt-E5FLdKKyzoQaWqk.roa
Signing time:             Sat 22 Oct 2022 11:19:05 +0000
ROA not before:           Sat 22 Oct 2022 11:19:05 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        123.194.24.0/21 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8155 (0x1fdb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Oct 22 11:19:05 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=4FB33741139ACD1B7E13914B74A2B2CE841A5AA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6e:e3:15:75:4c:3f:53:9e:07:36:08:75:a3:
                    66:db:c0:3a:35:b4:d6:c1:6f:89:2c:f7:29:93:f1:
                    21:79:b3:36:a8:35:12:90:27:8f:96:2d:d2:0b:23:
                    72:80:28:56:5b:1c:f7:41:e5:60:87:a4:d4:28:4a:
                    3d:be:a0:7b:15:35:c6:6c:d4:6b:94:66:ec:48:68:
                    12:36:86:25:36:ed:2a:eb:52:68:55:fc:a9:bc:de:
                    62:7c:e7:a7:04:14:85:13:71:bc:e1:a2:0b:79:cd:
                    da:68:d7:07:3e:d9:bc:03:09:f5:99:f9:f1:ca:2b:
                    31:90:d7:65:72:51:d5:0d:9a:42:08:df:b6:2f:a4:
                    34:80:4d:07:c1:e2:70:b4:8f:92:13:6c:fb:29:e9:
                    ab:b7:39:e7:2d:6f:96:7a:be:c1:9e:b2:6e:ac:ef:
                    da:dc:22:67:1a:2f:e9:18:15:dc:4f:1c:39:c1:02:
                    1a:bc:6c:49:a7:01:4c:c9:2a:9b:81:8e:29:f0:33:
                    7a:dc:8f:d8:06:80:d3:11:d7:7a:de:c1:b5:72:81:
                    5c:12:49:df:cc:ac:ff:ae:96:bd:c9:54:8b:bc:ef:
                    11:ac:d4:08:07:c5:e4:72:f2:0d:77:cc:73:47:5b:
                    2d:01:65:69:24:a9:96:e0:f3:22:1c:c5:4a:db:22:
                    6f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:B3:37:41:13:9A:CD:1B:7E:13:91:4B:74:A2:B2:CE:84:1A:5A:A9
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/T7M3QROazRt-E5FLdKKyzoQaWqk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         57:93:ab:98:03:d9:ed:dd:57:ca:e2:d2:17:87:db:74:c1:ef:
         a9:7a:2f:ca:23:60:85:a4:ce:b5:c3:31:4d:85:60:97:31:7e:
         dc:cf:0a:cd:1b:70:a1:44:0c:7e:6e:3b:51:70:bb:41:4e:55:
         4e:4c:85:17:04:d6:f8:d9:9a:9b:d8:9f:04:68:54:4f:dd:2d:
         7f:0e:05:0d:d6:1d:01:63:11:1e:e2:62:a6:37:f7:15:3a:57:
         83:d1:35:aa:7f:7d:69:f5:6a:48:04:13:b3:b1:53:22:1c:74:
         e2:96:f8:bf:5f:4f:0f:f0:11:89:06:83:ae:5a:8a:23:67:23:
         95:01:ef:b4:e5:02:e7:ed:e3:db:49:fa:02:72:88:81:a3:67:
         57:25:aa:aa:bb:ad:31:a5:3b:c5:f9:8f:5d:0d:07:d8:89:44:
         47:a0:b9:fb:9a:f7:ca:d5:d0:3a:1b:fb:60:58:38:36:06:d0:
         ee:51:d9:ab:bd:d9:da:0c:f7:fa:b5:c7:94:ea:e1:95:b3:1c:
         07:17:5b:c9:42:25:9a:bd:df:f3:62:7c:5b:7b:ab:a5:9f:17:
         cb:62:2e:8e:f7:80:50:1f:bc:0e:51:3c:7d:93:37:d2:fb:a8:
         c6:7a:34:67:57:db:a7:5b:e3:bf:ed:86:fb:5e:bb:0e:7a:ff:
         8b:9a:ee:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----