Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/a-e23oF-H3MF0sq7FZi30fRkgVY.roa
File:                     a-e23oF-H3MF0sq7FZi30fRkgVY.roa (raw, json)
Hash identifier:          BKlvcdPFg8v5ZQgrjhvcR489uQ7dBsrzA7HfUASV8jI=
Subject key identifier:   6B:E7:B6:DE:81:7E:1F:73:05:D2:CA:BB:15:98:B7:D1:F4:64:81:56
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       2161
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/a-e23oF-H3MF0sq7FZi30fRkgVY.roa
Signing time:             Fri 25 Nov 2022 04:39:52 +0000
ROA not before:           Fri 25 Nov 2022 04:39:52 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        180.177.228.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8545 (0x2161)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:39:52 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=6BE7B6DE817E1F7305D2CABB1598B7D1F4648156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:9f:dc:ae:6e:f2:ab:10:cc:71:96:57:d1:fd:
                    07:07:8c:da:e9:87:f6:e1:d0:d7:44:d7:49:e9:03:
                    b4:14:0f:c6:b0:cb:64:10:a9:49:0c:e8:ea:90:3e:
                    ba:5b:57:ac:72:69:b1:43:71:e9:f3:af:c1:67:7a:
                    13:61:08:e7:52:b9:a6:11:31:79:51:75:b1:71:f0:
                    ef:a3:13:08:b8:ec:f2:4d:2a:04:15:90:57:72:db:
                    8a:db:61:05:ad:ca:bf:49:23:4a:d9:63:e7:64:3f:
                    32:c7:0a:2b:2d:df:19:ea:7b:11:0f:82:77:fe:70:
                    92:f6:39:cc:4e:1e:ef:a9:64:b7:81:88:3d:fe:ec:
                    b0:9c:a0:3e:b1:a5:08:f6:a7:90:13:0a:61:90:84:
                    f6:00:b2:31:88:79:16:09:cc:c6:3d:73:40:d0:06:
                    d6:f9:5a:a5:f4:c8:ea:25:d4:59:c8:26:a0:38:de:
                    6a:25:b0:96:d3:68:2a:d6:c7:95:3a:97:ee:c3:fe:
                    b9:e9:3e:0a:ec:b0:79:6d:a2:f9:15:7e:ca:ab:95:
                    ee:65:14:c4:68:14:a5:bb:2b:83:37:17:ce:26:84:
                    5c:02:74:7c:cc:e3:b6:3b:75:b1:56:e8:9f:a7:44:
                    f7:0b:f5:aa:0d:db:b5:b6:62:12:03:73:ed:d5:3a:
                    11:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:E7:B6:DE:81:7E:1F:73:05:D2:CA:BB:15:98:B7:D1:F4:64:81:56
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/a-e23oF-H3MF0sq7FZi30fRkgVY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         33:38:cc:56:41:4b:40:1e:d5:cd:78:1c:c6:6c:e8:68:de:95:
         31:57:14:fd:e1:c2:1a:25:83:7d:02:36:52:bc:d9:e4:bd:2b:
         d8:d9:86:3c:0c:0d:11:19:4d:eb:47:7d:8a:63:66:3c:6e:55:
         29:ab:2c:e2:db:3c:6d:0a:fb:a4:02:57:4f:bc:32:76:2d:ac:
         b7:5d:9a:c9:cf:86:6e:5d:52:8f:b6:fe:71:a8:9d:af:af:d5:
         46:6c:3a:47:dd:5d:f7:f8:86:e9:ad:27:18:10:af:ca:1b:ac:
         98:23:4d:8c:20:2b:e7:ac:c7:fa:67:ba:09:14:94:7e:9c:d1:
         73:bc:b9:7c:7a:a6:3a:d1:71:7a:d4:86:3f:48:29:8b:f0:f8:
         74:f2:65:f1:88:88:99:c9:0b:39:e8:69:54:9a:47:3b:61:23:
         1c:64:08:cd:c8:48:14:26:5d:47:33:d2:a4:06:34:3f:cb:74:
         0f:0a:d9:ba:52:12:6c:1f:64:b9:0a:f6:5b:9f:b3:e0:88:f3:
         77:de:78:96:f2:ab:a4:10:2e:0f:03:44:5e:13:76:35:24:a7:
         ed:c3:41:91:d8:e7:55:77:f5:97:9e:81:58:31:1f:27:91:0a:
         bb:b6:a4:c7:1e:c2:79:b5:63:b0:b4:1c:ef:87:ba:5b:6b:21:
         bd:7f:07:d8
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIWEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDM5NTJaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDZCRTdCNkRFODE3RTFG
NzMwNUQyQ0FCQjE1OThCN0QxRjQ2NDgxNTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDdn9yubvKrEMxxllfR/QcHjNrph/bh0NdE10npA7QUD8awy2QQ
qUkM6OqQPrpbV6xyabFDcenzr8FnehNhCOdSuaYRMXlRdbFx8O+jEwi47PJNKgQV
kFdy24rbYQWtyr9JI0rZY+dkPzLHCist3xnqexEPgnf+cJL2OcxOHu+pZLeBiD3+
7LCcoD6xpQj2p5ATCmGQhPYAsjGIeRYJzMY9c0DQBtb5WqX0yOol1FnIJqA43mol
sJbTaCrWx5U6l+7D/rnpPgrssHltovkVfsqrle5lFMRoFKW7K4M3F84mhFwCdHzM
47Y7dbFW6J+nRPcL9aoN27W2YhIDc+3VOhFdAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUa+e23oF+H3MF0sq7FZi30fRkgVYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2EtZTIzb0YtSDNNRjBzcTdG
WmkzMGZSa2dWWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAG0
seQwDQYJKoZIhvcNAQELBQADggEBADM4zFZBS0Ae1c14HMZs6GjelTFXFP3hwhol
g30CNlK82eS9K9jZhjwMDREZTetHfYpjZjxuVSmrLOLbPG0K+6QCV0+8MnYtrLdd
msnPhm5dUo+2/nGona+v1UZsOkfdXff4humtJxgQr8obrJgjTYwgK+esx/pnugkU
lH6c0XO8uXx6pjrRcXrUhj9IKYvw+HTyZfGIiJnJCznoaVSaRzthIxxkCM3ISBQm
XUcz0qQGND/LdA8K2bpSEmwfZLkK9lufs+CI83feeJbyq6QQLg8DRF4TdjUkp+3D
QZHY51V39ZeegVgxHyeRCru2pMcewnm1Y7C0HO+HultrIb1/B9g=
-----END CERTIFICATE-----