Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UpnQBxHxiZt6iLeuMGqj1jOXuVQ.roa
File:                     UpnQBxHxiZt6iLeuMGqj1jOXuVQ.roa (raw, json)
Hash identifier:          0AqJFdr4BBKrx8Sq8tYKk49zu4iWwZENMovkgit/kAc=
Subject key identifier:   52:99:D0:07:11:F1:89:9B:7A:88:B7:AE:30:6A:A3:D6:33:97:B9:54
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       21FE
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UpnQBxHxiZt6iLeuMGqj1jOXuVQ.roa
Signing time:             Fri 25 Nov 2022 04:40:39 +0000
ROA not before:           Fri 25 Nov 2022 04:40:38 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        180.176.32.0/21 maxlen: 21

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8702 (0x21fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:40:38 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=5299D00711F1899B7A88B7AE306AA3D63397B954
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:24:2f:29:84:e4:d7:75:f3:78:08:76:11:1b:
                    e4:26:99:23:e5:bc:a9:f5:b9:f8:42:c5:b4:f2:0a:
                    e7:04:dd:bf:ee:4b:b6:cf:8e:e4:b4:ae:b5:f7:c9:
                    f1:67:3d:7f:c4:d0:d6:ad:fe:1a:e9:fe:6d:c2:86:
                    2e:76:c1:84:cd:35:8a:8a:e6:25:17:50:aa:f4:df:
                    a4:ae:c3:68:9d:85:7f:21:99:92:f9:71:79:d2:10:
                    ca:1f:35:c8:11:27:b6:56:e9:09:c4:7c:8c:8f:cc:
                    5b:5b:e1:17:6c:1b:a2:e1:cd:e0:29:5c:c2:24:9d:
                    c0:01:9b:c1:6c:30:fc:07:57:a9:ab:54:4e:f4:59:
                    59:87:a3:cb:f0:30:56:cb:36:7e:73:dc:61:fd:35:
                    b0:88:5e:70:ee:16:36:20:45:a3:82:71:d5:85:46:
                    d9:d1:9b:8d:c1:e3:fa:2f:49:8b:e8:20:cf:89:de:
                    fc:dd:8d:83:31:3c:9c:87:59:8a:ed:0e:3f:f2:70:
                    ab:63:fc:3d:6d:ab:9d:39:29:ce:ef:62:ba:4c:81:
                    4c:fd:32:f7:a9:e9:cd:c1:ee:2c:f1:94:ef:47:10:
                    11:70:a6:d9:c0:d7:82:01:08:38:9e:8f:a7:d6:1e:
                    d1:af:9d:7d:dd:ab:68:8a:21:72:bf:6f:9f:81:60:
                    ec:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:99:D0:07:11:F1:89:9B:7A:88:B7:AE:30:6A:A3:D6:33:97:B9:54
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UpnQBxHxiZt6iLeuMGqj1jOXuVQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9c:29:da:e4:93:f7:1c:9c:48:8e:a2:a3:08:16:5e:6b:60:b8:
         a6:63:69:07:c3:34:58:1f:92:b3:f7:2b:b6:27:d1:45:59:71:
         fd:d3:61:30:ed:f4:d1:38:32:51:fc:1d:b1:26:87:38:da:4a:
         00:78:58:90:7d:72:1f:1b:19:95:09:fb:69:aa:96:bb:51:c8:
         4e:00:8f:8d:ed:8f:11:0d:76:5a:db:01:b3:d6:d9:dd:bf:e2:
         b1:24:31:64:89:8a:9d:10:20:ee:2f:40:ec:ce:20:68:fb:a6:
         54:ef:80:ed:cd:e1:30:ac:c3:61:9d:1a:00:d6:cd:16:a4:34:
         59:f3:8d:d3:4e:bc:e2:b4:32:06:c5:af:64:fe:40:82:a7:ac:
         45:6b:4e:b1:b5:77:16:49:b0:0a:07:58:bb:60:33:41:81:05:
         9e:09:61:2c:56:fb:7e:a6:68:be:16:24:77:36:e4:9b:3f:3b:
         1c:9b:d9:66:bf:d1:88:9f:1d:4f:21:28:21:9e:79:79:03:ea:
         9c:53:4b:3b:34:0e:34:83:70:86:a3:20:9b:b5:86:f4:45:67:
         03:7e:1d:87:d1:81:ad:a6:61:88:5d:ef:32:83:d5:40:71:78:
         ef:a6:76:70:55:f7:25:78:77:5b:ba:44:bf:85:0f:a1:0e:27:
         ef:f0:04:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----