Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TblRjP-xjX7axCvowjiz3UeJhs8.roa
File:                     TblRjP-xjX7axCvowjiz3UeJhs8.roa (raw, json)
Hash identifier:          +rvLN1yhm1bGA8I8uiyFdOIvAmZ/rRf3B19j4r0QtJI=
Subject key identifier:   4D:B9:51:8C:FF:B1:8D:7E:DA:C4:2B:E8:C2:38:B3:DD:47:89:86:CF
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TblRjP-xjX7axCvowjiz3UeJhs8.roa
Signing time:             Thu 15 Sep 2022 02:53:51 +0000
ROA not before:           Thu 15 Sep 2022 02:53:51 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        118.232.200.0/21 maxlen: 21

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8098 (0x1fa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:53:51 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=4DB9518CFFB18D7EDAC42BE8C238B3DD478986CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c2:4a:88:a0:bf:a0:81:c8:73:a4:38:09:03:
                    dc:8c:a6:88:99:d4:bc:67:8d:f9:29:a4:5e:3c:84:
                    ae:14:7b:a8:58:77:c6:13:5c:e9:a0:c0:36:e6:bc:
                    4a:61:d2:5b:c1:8c:d3:59:b0:59:fa:0b:fd:a5:30:
                    21:b8:4c:a1:56:5a:36:41:5a:12:bf:42:f2:2e:a2:
                    cd:34:96:ca:3e:c6:df:bd:09:3e:64:47:67:03:77:
                    10:38:62:c0:d5:45:13:a8:cd:9c:3d:ed:18:0e:84:
                    7a:fb:41:1b:55:41:98:1c:c6:55:47:ad:1b:13:92:
                    d3:a6:fd:ea:b8:46:c6:2e:b9:dc:70:a2:8e:43:09:
                    fc:4e:1c:58:ac:78:0b:27:0b:2d:07:33:22:30:49:
                    d9:34:36:c0:0b:11:bd:2a:31:26:31:62:cd:0c:22:
                    85:f9:10:91:30:46:19:9b:a9:a5:ad:8f:e7:d5:dd:
                    0f:d2:2e:9d:ce:bb:ef:dd:d6:79:c4:40:c4:52:5e:
                    99:ba:65:3b:d8:24:4c:9f:61:9b:7c:62:9b:93:1e:
                    4a:fc:1c:8f:45:94:cc:6c:36:a7:f6:94:eb:f2:ec:
                    c4:6f:e8:74:a5:53:49:74:89:85:44:ce:f5:e5:54:
                    ac:14:32:0c:f1:53:e5:07:29:23:8e:37:11:f8:fd:
                    c8:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:B9:51:8C:FF:B1:8D:7E:DA:C4:2B:E8:C2:38:B3:DD:47:89:86:CF
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TblRjP-xjX7axCvowjiz3UeJhs8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         aa:dc:c6:c3:57:aa:bc:5f:a7:b4:ba:2b:f6:7f:91:8e:d5:ac:
         d2:79:ec:7f:79:65:23:67:2a:c1:f1:6d:55:2d:01:7c:1b:1f:
         fd:79:09:86:ae:3b:7d:22:dd:13:e7:5a:e8:d4:fb:d9:8a:46:
         32:a5:fc:2f:a9:f0:d2:a6:22:81:9a:ab:40:bf:0d:f8:ae:fb:
         5e:bd:f6:5f:89:a3:1b:50:4d:c8:f8:8d:68:a2:e0:6d:63:6d:
         49:1e:b6:e7:f5:80:8f:3c:5f:f7:50:26:70:52:70:7e:e6:71:
         0e:ed:c9:51:f2:40:30:7b:64:27:91:50:3c:c5:be:7c:12:52:
         86:68:cb:f3:2d:cd:74:fe:da:ca:3d:3b:23:e8:44:cd:34:2a:
         72:d4:ed:5c:12:89:40:24:55:b2:2e:50:03:ca:40:32:b0:8f:
         1a:cc:45:90:49:5e:14:90:fd:2c:22:9f:e1:f1:54:fb:c8:51:
         1c:7e:05:5f:8a:62:b5:98:8c:b2:2d:29:95:36:41:4e:82:be:
         76:23:d8:ab:b4:ac:89:c6:22:67:28:ec:1f:5f:76:8c:10:85:
         9b:00:69:c3:50:0d:f1:85:61:3a:6f:90:99:56:54:49:05:72:
         aa:c9:dc:d3:1f:06:36:bc:9a:72:ca:92:7b:38:5d:33:17:97:
         84:a1:4e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----