Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cY3buFuoh-BEO_YmOAb2D7Sdu5k.roa
File:                     cY3buFuoh-BEO_YmOAb2D7Sdu5k.roa (raw, json)
Hash identifier:          rmYcGS2v3+Ez8vUX1fsLYgXUiPyIzZ7izLUKEDDOelA=
Subject key identifier:   71:8D:DB:B8:5B:A8:87:E0:44:3B:F6:26:38:06:F6:0F:B4:9D:BB:99
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cY3buFuoh-BEO_YmOAb2D7Sdu5k.roa
Signing time:             Thu 15 Sep 2022 02:53:33 +0000
ROA not before:           Thu 15 Sep 2022 02:53:33 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        118.233.16.0/21 maxlen: 21

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8098 (0x1fa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:53:33 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=718DDBB85BA887E0443BF6263806F60FB49DBB99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:5e:3c:29:e8:ee:56:30:bf:7f:2b:e6:a6:b7:
                    f2:ec:23:0f:8a:6d:03:38:86:e1:6d:e6:e5:41:b3:
                    ab:c1:07:2c:c2:b8:dc:9d:84:f8:b9:3d:8a:bf:6a:
                    17:54:32:c7:d9:85:6e:6e:5b:69:4a:db:51:61:a1:
                    d7:03:b0:da:30:ca:a0:77:fe:f6:cf:00:53:be:72:
                    11:a1:9d:25:9d:d7:20:c3:d9:8d:81:a8:bf:0e:b6:
                    6b:b4:b6:91:43:ae:13:52:2f:da:ef:95:ed:7d:83:
                    ac:eb:76:4b:c0:5a:15:cf:47:e8:f5:c2:5a:c0:5b:
                    bc:36:27:f9:1f:d0:29:e9:9a:ee:91:9e:2c:1e:06:
                    f2:8f:8b:ec:a7:e3:27:44:d2:30:e1:b1:20:10:f7:
                    91:f1:f8:01:77:c4:71:cf:4a:c4:33:05:32:74:cc:
                    ae:d3:62:20:94:68:c1:38:ed:af:92:1f:a0:07:8f:
                    30:54:a4:bd:51:fb:19:74:d6:34:8e:a6:ad:2f:7f:
                    fd:f0:12:a5:1f:2f:98:72:4d:db:80:52:35:e3:f3:
                    60:31:25:4b:17:df:a5:5e:d9:39:cc:ec:09:18:25:
                    93:ce:49:d7:79:01:bb:c8:71:2e:03:d5:67:df:22:
                    95:a1:86:64:c1:0a:88:a2:80:33:8d:de:36:b1:eb:
                    b9:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:8D:DB:B8:5B:A8:87:E0:44:3B:F6:26:38:06:F6:0F:B4:9D:BB:99
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cY3buFuoh-BEO_YmOAb2D7Sdu5k.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.233.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         30:cb:57:c2:87:4c:35:dc:58:38:65:b7:b1:f9:13:21:e5:7e:
         c3:04:b1:5e:01:32:dc:8e:6c:b1:d7:66:b1:bd:c0:e3:0b:ca:
         e8:f0:81:e9:88:de:dc:67:42:ee:96:bb:d2:1c:16:f8:b7:66:
         53:24:72:fb:0e:58:ce:6c:84:85:d1:84:f0:4f:4f:47:c9:69:
         8d:dd:65:e3:6a:26:2c:68:ea:04:18:a2:a3:60:0e:63:43:6c:
         4e:5d:51:74:60:3e:8d:66:01:c4:37:f4:01:c4:23:d5:39:be:
         17:6e:05:33:bc:5a:58:20:b0:04:2a:e3:35:3d:4b:49:ee:bf:
         bb:bc:1f:ab:73:24:64:fd:57:a0:e8:0c:07:2a:e8:46:56:c9:
         32:9c:9a:7c:af:e7:5f:9c:89:19:d3:1e:cc:2a:46:47:ee:4e:
         7e:a4:cd:30:dc:2f:25:55:bc:a5:49:55:76:95:00:5b:30:80:
         68:58:73:4b:2b:bd:13:cf:be:a4:32:89:34:47:91:4a:a8:e2:
         59:05:cc:f0:27:99:5b:f2:31:b2:6a:1d:ce:09:9d:c7:f6:99:
         5c:d1:2c:6f:cb:c8:c9:12:a5:dc:cb:25:25:62:ae:49:9e:bf:
         cf:a1:f3:e7:4d:5c:ec:18:81:fe:1e:f7:d8:e8:0f:c5:1c:48:
         48:53:d5:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----