Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WrrUYy4Ao2lxy3EQPU-YQWhPbf8.roa
File:                     WrrUYy4Ao2lxy3EQPU-YQWhPbf8.roa (raw, json)
Hash identifier:          wpZT1W9Ag3s5/BA/B3u9/7VdSjpHYbRIAfOHInzNnX8=
Subject key identifier:   5A:BA:D4:63:2E:00:A3:69:71:CB:71:10:3D:4F:98:41:68:4F:6D:FF
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA4
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WrrUYy4Ao2lxy3EQPU-YQWhPbf8.roa
Signing time:             Thu 15 Sep 2022 02:56:07 +0000
ROA not before:           Thu 15 Sep 2022 02:56:07 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        123.195.238.128/25 maxlen: 25

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8100 (0x1fa4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:56:07 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=5ABAD4632E00A36971CB71103D4F9841684F6DFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:4e:eb:9b:f5:7e:51:7b:19:96:d2:14:15:65:
                    3b:db:f0:d5:d5:58:56:44:7f:60:44:f4:ac:45:03:
                    13:fc:07:89:91:83:3f:30:d8:fc:9b:dc:d8:87:88:
                    c7:e1:e2:86:6d:1f:1b:4b:fe:74:ef:36:6a:0c:22:
                    68:4e:f8:a5:a7:d6:da:e5:de:62:1d:31:84:1e:90:
                    db:3f:af:e0:65:82:28:b9:7b:e9:9e:2e:01:d1:26:
                    5c:af:0b:04:75:f5:29:c3:72:dc:40:8b:87:1e:0e:
                    d7:e3:80:a5:bd:d3:40:0c:3a:df:2c:1b:29:f5:7e:
                    2b:cd:d1:1e:5a:ad:e6:4e:b1:6c:d9:82:34:f0:e9:
                    b3:0e:c3:21:2b:24:83:15:32:82:d7:ea:8a:76:c8:
                    d9:99:4f:4e:c2:89:16:51:18:e0:60:8f:1f:91:5d:
                    3b:74:ad:29:b0:bd:59:fb:ec:94:b5:45:8e:e8:bb:
                    a9:35:a8:a9:b0:f2:f4:bc:b4:0b:98:f8:f2:6c:93:
                    74:f5:ee:30:0b:53:ec:e4:c7:b2:19:04:89:b1:06:
                    1b:53:02:72:01:81:ac:55:ca:1d:c1:22:27:27:fe:
                    2d:cf:7e:a5:c2:3b:23:ad:40:9d:68:c8:fe:30:31:
                    da:cb:98:54:91:4a:56:3e:ed:77:49:25:70:9f:de:
                    b7:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:BA:D4:63:2E:00:A3:69:71:CB:71:10:3D:4F:98:41:68:4F:6D:FF
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WrrUYy4Ao2lxy3EQPU-YQWhPbf8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.238.128/25

    Signature Algorithm: sha256WithRSAEncryption
         66:30:ce:b6:9c:46:6a:20:87:a0:e7:8e:c3:28:76:e7:91:a3:
         61:59:67:aa:67:b5:94:bb:b3:42:30:cd:66:9e:9a:71:73:b4:
         18:91:3e:c6:fc:1e:e0:00:07:b1:a8:cb:60:8d:5c:92:d5:6e:
         2e:3f:cf:8a:08:28:d1:f2:27:46:cd:c4:95:57:78:f5:3d:13:
         55:3b:8a:58:84:29:47:c6:9b:15:07:31:23:3c:1b:dc:68:e4:
         20:4c:82:c2:0c:49:ae:1d:6b:f3:53:07:cd:46:1f:5d:9a:eb:
         cd:11:f6:75:8c:f8:36:5c:52:52:ac:61:03:a8:13:10:35:2b:
         b5:9e:a6:0a:92:84:49:cd:ac:55:bd:a5:7f:9f:c3:af:2d:fe:
         a0:b3:8a:55:1d:d1:86:3c:3a:89:e4:e2:23:33:84:77:e0:fb:
         f7:b8:3b:dc:0e:72:9d:ab:94:5e:ce:aa:f8:f4:23:9c:10:41:
         f5:54:bc:c3:cd:a3:a9:98:00:10:d5:19:ba:a6:a3:42:61:c7:
         11:bc:cf:26:d9:28:9e:19:81:9c:41:7b:f6:1e:7c:54:f2:be:
         0a:ea:ff:d4:8d:fb:1f:f5:cd:0a:c2:96:19:c9:b6:b9:ec:72:
         fe:fa:12:78:68:c3:3b:5c:4d:28:2d:2c:cb:24:a9:0f:af:63:
         4f:59:1a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----