Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bzc_c6cvWOQDNf5-0P98GS5QYBM.roa
File:                     bzc_c6cvWOQDNf5-0P98GS5QYBM.roa (raw, json)
Hash identifier:          z8ysY/4KuWtDxz2FbD/8QA68gCTbeP8kzyQS4F/Hpn0=
Subject key identifier:   6F:37:3F:73:A7:2F:58:E4:03:35:FE:7E:D0:FF:7C:19:2E:50:60:13
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bzc_c6cvWOQDNf5-0P98GS5QYBM.roa
Signing time:             Thu 15 Sep 2022 02:44:47 +0000
ROA not before:           Thu 15 Sep 2022 02:44:47 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     9924
IP address blocks:        211.76.121.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8096 (0x1fa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:44:47 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=6F373F73A72F58E40335FE7ED0FF7C192E506013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:84:82:e3:f7:59:c0:0b:6f:63:d5:f7:d3:83:
                    81:b2:36:60:4a:b6:22:3d:2f:77:23:9d:3b:f4:fc:
                    e7:db:85:cc:9d:65:7b:af:9d:19:c5:8e:18:f9:b5:
                    ea:4d:c8:93:58:9a:37:a7:ca:9b:86:14:c3:67:8a:
                    71:2f:72:42:82:de:74:60:a7:0b:7a:27:a6:2b:15:
                    53:ab:9e:a4:b4:12:3c:93:a6:13:d5:b6:ec:a0:cf:
                    ac:75:c0:30:6a:67:eb:18:dc:92:db:82:ac:c2:3a:
                    c5:f2:3b:cb:83:eb:d8:95:05:b6:5b:41:73:8b:5e:
                    81:97:6d:f8:c6:72:64:9f:7c:86:36:54:a1:0e:4e:
                    7b:ed:69:41:0d:0e:4c:79:b2:f6:81:d7:ef:e0:b5:
                    3c:21:dc:2a:00:0b:f6:9d:f6:46:14:d5:4d:c1:94:
                    77:a2:0d:66:e3:71:27:db:15:ca:43:57:a3:53:18:
                    d6:f7:84:04:50:ee:9a:e2:10:70:07:17:4e:c5:ed:
                    cb:89:48:ec:ae:ea:0c:29:28:52:ee:1f:9a:81:1f:
                    d6:9a:8c:c1:c1:dc:28:58:6c:41:cc:36:70:99:fa:
                    aa:fd:bd:6e:a9:00:ab:7f:e1:c1:c3:61:f9:06:d0:
                    9f:c2:2e:71:2f:d8:40:ce:1a:91:a3:1b:ee:e0:87:
                    7f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:37:3F:73:A7:2F:58:E4:03:35:FE:7E:D0:FF:7C:19:2E:50:60:13
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bzc_c6cvWOQDNf5-0P98GS5QYBM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.76.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:a9:6c:2f:6d:d8:9a:68:40:8f:11:9f:ef:b5:13:3f:03:23:
         0a:fb:71:1a:76:12:97:0b:e7:94:3b:1b:e3:79:66:90:a0:6c:
         61:df:fa:9a:cc:ca:30:2e:79:32:83:46:a9:ba:62:f7:39:65:
         4e:32:77:df:cf:0a:7a:72:9a:99:fe:72:4d:a5:8b:aa:46:56:
         3c:05:03:8f:86:f0:50:11:0d:57:90:19:4e:4f:ab:cf:82:72:
         a2:21:77:87:11:bc:d5:77:4e:1d:66:51:91:f8:db:49:a5:6b:
         2e:5d:db:ab:70:b0:d8:32:6b:e4:9c:7a:cd:4a:ec:b9:12:5b:
         ba:68:7c:0a:d6:7a:a2:89:c4:8a:70:ae:c9:41:84:6a:7c:28:
         da:45:ed:3a:e8:c3:e6:45:77:ba:e1:0c:74:4b:e2:73:0a:e4:
         68:31:e5:40:65:e0:f2:dc:21:a3:33:ad:a3:6a:26:d4:aa:39:
         bd:40:b6:3f:11:51:6b:68:f5:dd:58:38:82:27:4d:fb:c1:bc:
         d4:97:d8:99:07:b4:04:82:2d:24:45:d5:c4:46:98:27:0f:09:
         60:25:7a:0e:38:0e:e0:c5:4e:31:1b:fe:45:f7:28:b8:48:29:
         66:4c:03:da:7f:88:8a:6f:b8:76:24:81:16:92:f7:73:8e:91:
         25:77:e9:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----