Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_DHDJYTgYgNrkSuHaE10OcB1PCs.roa
File:                     _DHDJYTgYgNrkSuHaE10OcB1PCs.roa (raw, json)
Hash identifier:          T7hE3jX5gglbzImHHKOrx4UliS2LF1iqub2LHzQiMmY=
Subject key identifier:   FC:31:C3:25:84:E0:62:03:6B:91:2B:87:68:4D:74:39:C0:75:3C:2B
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       20C8
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_DHDJYTgYgNrkSuHaE10OcB1PCs.roa
Signing time:             Fri 25 Nov 2022 04:39:06 +0000
ROA not before:           Fri 25 Nov 2022 04:39:06 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        118.232.201.64/26 maxlen: 26

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8392 (0x20c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:39:06 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=FC31C32584E062036B912B87684D7439C0753C2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:82:90:77:a9:09:ff:3f:a9:4e:63:97:63:d5:
                    26:0f:f2:9e:46:bb:69:05:96:ca:20:5e:3f:0a:89:
                    43:05:ec:74:09:65:8b:67:96:96:ef:3b:63:6d:72:
                    bd:d1:e5:8d:da:d5:b8:34:d6:56:e2:21:a0:85:59:
                    c4:19:76:ec:f5:38:39:79:98:d2:87:2e:99:6c:66:
                    35:a7:da:97:62:66:ee:99:ea:13:3a:5b:2f:15:97:
                    22:00:7f:4f:0e:8a:59:32:07:9e:6a:e8:54:ca:fd:
                    8b:6e:85:c3:f6:aa:8a:fa:71:13:e0:b5:a1:84:b7:
                    78:88:63:b8:19:d9:23:49:c6:91:4a:94:af:a8:e9:
                    bc:be:59:dc:c8:81:66:0a:00:e4:47:ed:f2:1b:36:
                    91:e7:ca:b5:b1:2c:22:77:6c:db:2f:7b:db:06:63:
                    e2:23:2b:94:57:29:7c:5d:fd:71:75:86:7b:70:2e:
                    f2:04:a6:4b:51:83:8c:b8:ae:42:71:66:a4:61:10:
                    b1:9e:31:23:9b:45:bd:84:10:df:b5:54:4e:fa:17:
                    69:2a:10:38:8a:ca:49:9e:9b:dd:dc:85:c3:a7:5b:
                    9f:a7:a7:0b:75:f3:07:51:fd:ba:0e:d1:c3:72:0f:
                    04:31:95:d9:14:ff:0b:a7:7f:4f:7d:f8:71:e4:81:
                    eb:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:31:C3:25:84:E0:62:03:6B:91:2B:87:68:4D:74:39:C0:75:3C:2B
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_DHDJYTgYgNrkSuHaE10OcB1PCs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.201.64/26

    Signature Algorithm: sha256WithRSAEncryption
         1e:37:ab:a0:00:00:c1:90:43:28:1a:ae:7a:1f:da:73:db:21:
         01:63:2f:cb:01:7b:3c:69:c1:5f:a1:36:91:41:32:fb:08:03:
         e0:fb:31:c7:cc:f0:d4:28:55:7f:e2:d9:be:4d:88:c9:63:c6:
         02:c7:90:dd:cd:e1:59:28:be:ff:c9:0d:56:7d:ae:46:82:94:
         ad:fe:dc:ce:08:35:59:48:28:e4:d8:f2:b2:46:d7:3f:69:e2:
         9a:47:9a:fa:42:55:f4:ab:45:2b:32:07:18:f1:f4:87:60:8b:
         6e:0d:a9:d8:18:ec:37:64:71:d7:cb:a0:b5:2b:89:68:bd:44:
         cf:61:38:da:37:6e:56:0a:44:1e:b7:4a:3b:6e:9a:01:d4:3e:
         7a:ae:2b:20:15:73:43:3f:cb:91:f6:86:43:34:0c:7b:3f:90:
         bc:96:e0:76:4e:04:87:f4:7b:4f:60:00:51:95:4f:97:2a:4f:
         e7:9b:5b:23:43:82:67:38:13:5e:5b:f1:81:f2:aa:b7:21:fa:
         c2:f7:91:9c:23:67:17:bc:2d:12:fd:62:54:bc:ca:2f:87:dd:
         6f:8d:29:c7:e9:1e:ed:2c:2b:89:8c:b8:33:67:1f:37:aa:15:
         78:9c:10:25:a0:b9:3b:30:fd:a9:94:b3:94:7b:ed:93:80:e8:
         6c:a4:89:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----