Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VJKrfRngrerJ6pem_lQj7h77ptk.roa
File:                     VJKrfRngrerJ6pem_lQj7h77ptk.roa (raw, json)
Hash identifier:          MTth5dXzOvoFfv7/WE7FTtax5QJbVyNrXR27+CF5xMo=
Subject key identifier:   54:92:AB:7D:19:E0:AD:EA:C9:EA:97:A6:FE:54:23:EE:1E:FB:A6:D9
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VJKrfRngrerJ6pem_lQj7h77ptk.roa
Signing time:             Thu 15 Sep 2022 02:53:25 +0000
ROA not before:           Thu 15 Sep 2022 02:53:25 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        2407:4d00::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8098 (0x1fa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:53:25 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=5492AB7D19E0ADEAC9EA97A6FE5423EE1EFBA6D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ff:43:31:cf:ed:05:ce:35:6f:4b:a9:f4:9d:
                    8d:05:5a:9d:75:05:ef:a1:b8:9a:d8:83:d3:a7:94:
                    5c:08:f9:ba:ee:79:a1:1c:1c:9a:93:74:10:f5:24:
                    8a:ec:b1:1b:a0:c7:f8:bf:47:8f:89:74:3b:69:9e:
                    04:88:e5:92:8d:54:dd:49:fe:20:77:28:8c:00:ba:
                    ea:fe:56:74:2d:13:2b:3e:04:2f:8b:d4:5a:e7:4a:
                    31:29:8e:e7:0f:2b:fa:ab:eb:89:14:82:e1:ea:fe:
                    6a:52:9e:79:1b:db:a9:63:cf:df:4d:d0:a4:0e:a1:
                    60:04:e0:eb:4a:41:ba:7c:c2:2f:95:2a:24:fe:4c:
                    53:94:b7:9f:b2:8c:5c:bd:4e:6e:39:6e:42:6b:6b:
                    88:58:cc:2a:66:38:a9:f6:1a:fb:6a:65:90:95:16:
                    54:c7:0f:03:7f:1d:41:9e:e0:fd:4f:e3:57:44:73:
                    6e:26:b7:11:04:1b:57:83:56:c5:20:b2:80:91:81:
                    81:fa:95:e7:8b:9b:f3:d2:1b:a5:b4:9f:19:2f:4b:
                    ff:1b:93:86:ac:b7:23:e6:c1:e1:74:84:2e:d9:e9:
                    b8:e5:eb:6d:e1:65:54:84:72:56:7a:4b:2c:ec:ca:
                    89:ee:a7:5f:06:9e:eb:eb:14:1c:59:25:5e:c1:8f:
                    59:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:92:AB:7D:19:E0:AD:EA:C9:EA:97:A6:FE:54:23:EE:1E:FB:A6:D9
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VJKrfRngrerJ6pem_lQj7h77ptk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:4d00::/32

    Signature Algorithm: sha256WithRSAEncryption
         b1:91:29:e2:1f:3c:c3:6c:8e:5e:f7:d2:fd:3f:14:37:f6:fe:
         cc:29:5e:b3:c2:16:84:06:de:24:f3:a9:ec:59:81:86:10:eb:
         71:e6:c1:eb:93:35:cc:54:c9:4b:8a:ad:4e:04:ab:55:71:76:
         44:9f:61:45:d8:0a:29:76:40:59:2c:b9:bd:7f:ad:81:6c:4d:
         b0:32:02:3c:30:86:2d:c1:77:28:45:2b:c3:02:4d:a5:e6:b8:
         6d:87:ea:e9:ee:2a:15:57:64:75:ae:7d:eb:d7:9d:9f:21:ef:
         a1:0d:30:f3:be:5e:7a:95:dc:ce:85:2d:e7:5a:c2:d8:14:2b:
         d3:9f:eb:0c:ca:6b:23:1f:d5:f5:1a:2f:cd:19:4f:4f:66:1b:
         4a:d6:d6:1d:15:11:9f:02:91:e6:08:bd:b6:a7:26:c3:d9:3f:
         71:fd:87:e6:0d:a1:97:bd:c2:0c:86:28:e3:a9:6e:7d:2b:ca:
         73:d5:fb:58:3c:a4:d3:0c:dc:1e:80:21:b0:41:19:4a:9e:7b:
         dc:2c:93:96:4e:f2:57:77:be:de:a4:18:ec:4a:56:8c:b6:f5:
         96:3b:99:7e:26:2c:a2:9c:69:e4:cf:56:e8:d2:d1:93:d5:0f:
         8c:a5:20:09:d9:22:70:c5:14:6d:07:77:66:53:cd:ec:ed:4f:
         5c:77:2b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----