Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_FEX3rQ4h5VLAa6OmMyp9AhVfr0.roa
File:                     _FEX3rQ4h5VLAa6OmMyp9AhVfr0.roa (raw, json)
Hash identifier:          Xuz5QTYpMfhFuNM0CHFiv63+S6kiVFkAn6gUcaddt+A=
Subject key identifier:   FC:51:17:DE:B4:38:87:95:4B:01:AE:8E:98:CC:A9:F4:08:55:7E:BD
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       234D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_FEX3rQ4h5VLAa6OmMyp9AhVfr0.roa
Signing time:             Fri 25 Nov 2022 04:43:25 +0000
ROA not before:           Fri 25 Nov 2022 04:43:25 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        123.193.0.0/20 maxlen: 20

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9037 (0x234d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:43:25 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=FC5117DEB43887954B01AE8E98CCA9F408557EBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:8a:5a:ef:88:37:ad:61:11:86:25:fd:d2:30:
                    89:0b:0b:d6:bd:1c:33:b4:f6:17:64:76:07:b8:dd:
                    7f:08:e2:48:77:c7:c8:d3:cf:a6:75:e1:a3:74:b2:
                    7a:f2:c8:dd:bf:17:7d:3b:ef:f5:22:68:d7:c7:5b:
                    d5:39:60:53:02:87:3f:b8:a1:4f:0f:b3:87:1a:6b:
                    15:f9:27:19:dd:47:95:f8:41:27:d3:3f:af:ca:8a:
                    7b:5d:ef:5d:d9:02:a1:58:fd:38:1e:c8:10:b8:45:
                    a2:73:cb:b7:b0:03:59:ff:ee:41:6b:29:8b:08:be:
                    23:ad:ac:72:ee:f6:b1:16:50:0c:65:b9:e8:45:f9:
                    e4:5f:e6:d4:8e:0a:25:0f:9e:0f:71:49:70:74:bd:
                    78:b6:02:1f:97:5b:2e:fb:a3:5d:9e:e5:7e:3c:41:
                    b2:1f:80:78:89:a9:d4:61:e9:8b:16:4b:a1:69:05:
                    43:4b:2b:06:01:ef:4b:84:b2:03:53:51:3e:cb:d5:
                    f9:19:52:a4:6d:ce:f9:04:c1:32:cb:04:b7:e2:0b:
                    c7:f8:d1:96:7e:eb:d5:b7:b0:29:35:a5:b5:6e:94:
                    dd:64:79:37:8b:87:07:95:9d:75:31:80:5d:f5:cd:
                    a2:39:cc:40:73:9f:b6:d9:f0:b1:c2:ff:63:2b:a8:
                    0e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:51:17:DE:B4:38:87:95:4B:01:AE:8E:98:CC:A9:F4:08:55:7E:BD
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_FEX3rQ4h5VLAa6OmMyp9AhVfr0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a2:69:29:c7:59:91:ba:12:d9:d1:95:26:d8:64:1b:ee:1d:cf:
         06:35:e0:0b:17:ed:db:73:6c:70:c9:79:42:16:bf:13:74:a8:
         82:a2:e4:b5:bc:53:eb:37:3d:a3:de:77:f2:60:ff:3e:89:04:
         ba:0f:eb:a2:69:36:db:0a:02:a3:8d:8e:f2:83:f7:aa:53:9e:
         6e:ca:96:3d:3c:17:9f:c6:77:8b:c3:48:3d:73:14:5c:9a:44:
         f1:7c:7b:00:c2:22:c5:af:f6:16:b6:af:1b:3f:55:58:f2:dc:
         51:66:cc:8f:bc:06:b4:f5:d4:cd:d6:ab:3c:57:3e:d3:d2:7b:
         d8:9a:8f:df:f3:fe:dd:72:09:3e:32:fd:c5:6a:5a:ff:40:ea:
         e2:d6:04:6b:83:22:bf:5e:9a:98:ac:72:06:78:c0:df:01:6f:
         0d:bc:32:84:ad:e4:21:ec:c7:b7:b1:1f:51:91:0b:b5:b6:d2:
         c6:d3:17:04:17:af:d0:96:da:ab:60:bc:6c:64:0b:29:99:d2:
         13:a3:86:77:ae:d5:35:cc:7e:3b:b8:5a:24:4f:a7:8a:28:f4:
         5f:0f:93:45:d8:a8:a2:69:43:f0:6a:3c:97:af:97:44:f9:74:
         d3:5d:7d:60:67:d6:84:c7:6c:f4:57:f2:39:2a:17:37:94:8a:
         58:1e:45:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----