Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cwWGFpRv8rQ10SHp7aDhSZ5xks8.roa
File:                     cwWGFpRv8rQ10SHp7aDhSZ5xks8.roa (raw, json)
Hash identifier:          GvF7rbyf8PiCUo+NB6JXXdFzJ8ySy5zLn0gXK167W/w=
Subject key identifier:   73:05:86:16:94:6F:F2:B4:35:D1:21:E9:ED:A0:E1:49:9E:71:92:CF
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1F79
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cwWGFpRv8rQ10SHp7aDhSZ5xks8.roa
Signing time:             Thu 08 Sep 2022 02:48:11 +0000
ROA not before:           Thu 08 Sep 2022 02:48:11 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        106.1.136.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8057 (0x1f79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep  8 02:48:11 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=73058616946FF2B435D121E9EDA0E1499E7192CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:fc:0a:86:89:fe:9b:57:e4:9d:4e:c4:df:b0:
                    14:bc:2b:93:c0:e7:87:36:8d:48:46:0d:47:d3:dc:
                    b5:79:a3:d9:5b:f0:78:d5:4f:de:f6:04:46:75:98:
                    6d:33:10:d7:71:48:8b:61:c0:dc:b2:c7:45:d3:90:
                    c4:d3:09:84:f6:5b:63:27:ee:5c:d3:3a:14:96:93:
                    6a:1d:8f:36:a9:03:24:19:18:24:55:dd:1b:43:b0:
                    ec:48:9d:fb:a0:cd:3d:3f:ca:d3:40:02:27:10:65:
                    05:17:ad:52:23:61:8c:4e:c0:d7:3a:34:7e:ae:02:
                    f3:05:2f:da:99:96:09:d5:39:4e:72:8c:45:0b:c9:
                    31:b2:20:9b:98:39:08:12:6e:4a:b2:7e:64:b5:55:
                    76:95:d1:5f:8a:60:0d:c2:47:0e:b8:1b:27:3a:06:
                    51:c7:38:93:6b:b5:ca:7f:df:95:3f:0d:c7:39:5f:
                    65:b3:41:22:69:1e:65:c4:5c:13:08:df:e9:a8:be:
                    55:06:ce:34:32:c7:32:1a:69:c8:19:bd:d9:09:90:
                    5b:d9:40:e3:16:6c:8f:c6:f2:c6:47:ce:6c:44:d3:
                    ed:e0:10:f2:f2:67:64:b9:19:4b:77:82:17:61:30:
                    d4:7f:95:0b:37:30:e4:71:40:c4:a4:e2:d5:94:82:
                    d1:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:05:86:16:94:6F:F2:B4:35:D1:21:E9:ED:A0:E1:49:9E:71:92:CF
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cwWGFpRv8rQ10SHp7aDhSZ5xks8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:f3:15:8b:5d:c6:3e:0e:b8:24:4a:af:3a:de:83:eb:ee:6c:
         65:bc:1d:04:23:f6:69:77:d2:a1:98:15:b4:04:06:8f:5b:db:
         39:41:9b:d1:84:f0:6d:c6:aa:63:9e:96:b8:cc:ea:b8:d6:b6:
         95:7e:f8:39:07:26:f2:83:ca:e2:42:49:fd:fe:0f:ab:5e:bf:
         ae:ed:f8:2e:bb:6e:3f:70:d4:9c:99:ac:77:a2:5b:50:8b:aa:
         8d:c1:42:ab:6b:c5:cd:9e:96:b7:e3:1c:a8:4b:a9:aa:99:4b:
         39:84:36:27:9d:42:0c:81:17:96:32:81:c9:fc:04:4b:4b:b3:
         23:29:69:8e:1b:56:e4:97:fd:09:af:52:4d:b3:31:a4:73:e9:
         f9:e9:38:83:9b:98:9a:06:75:3e:dc:59:c5:3f:ce:4e:0d:d1:
         d5:8a:0d:19:6a:d6:4e:e1:e0:d8:bf:ed:e3:f1:61:e3:10:5b:
         c6:c1:8e:88:fd:c7:24:dd:f0:32:d5:e9:05:60:83:c1:e8:ae:
         0e:53:af:20:a9:96:d1:d3:b3:ff:78:2c:b6:78:8e:9e:cd:24:
         99:ce:31:7a:45:f4:54:29:bf:5e:76:9e:9c:c7:15:36:3f:37:
         d6:85:f3:c9:88:b4:b1:35:e6:92:5c:14:d1:64:3e:12:03:4e:
         b6:04:be:ca
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH3kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MDgw
MjQ4MTFaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDczMDU4NjE2OTQ2RkYy
QjQzNUQxMjFFOUVEQTBFMTQ5OUU3MTkyQ0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDL/AqGif6bV+SdTsTfsBS8K5PA54c2jUhGDUfT3LV5o9lb8HjV
T972BEZ1mG0zENdxSIthwNyyx0XTkMTTCYT2W2Mn7lzTOhSWk2odjzapAyQZGCRV
3RtDsOxInfugzT0/ytNAAicQZQUXrVIjYYxOwNc6NH6uAvMFL9qZlgnVOU5yjEUL
yTGyIJuYOQgSbkqyfmS1VXaV0V+KYA3CRw64Gyc6BlHHOJNrtcp/35U/Dcc5X2Wz
QSJpHmXEXBMI3+movlUGzjQyxzIaacgZvdkJkFvZQOMWbI/G8sZHzmxE0+3gEPLy
Z2S5GUt3ghdhMNR/lQs3MORxQMSk4tWUgtGfAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUcwWGFpRv8rQ10SHp7aDhSZ5xks8wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2N3V0dGcFJ2OHJRMTBTSHA3
YURoU1o1eGtzOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJq
AYgwDQYJKoZIhvcNAQELBQADggEBAAPzFYtdxj4OuCRKrzreg+vubGW8HQQj9ml3
0qGYFbQEBo9b2zlBm9GE8G3GqmOelrjM6rjWtpV++DkHJvKDyuJCSf3+D6tev67t
+C67bj9w1JyZrHeiW1CLqo3BQqtrxc2elrfjHKhLqaqZSzmENiedQgyBF5Yygcn8
BEtLsyMpaY4bVuSX/QmvUk2zMaRz6fnpOIObmJoGdT7cWcU/zk4N0dWKDRlq1k7h
4Ni/7ePxYeMQW8bBjoj9xyTd8DLV6QVgg8Horg5TryCpltHTs/94LLZ4jp7NJJnO
MXpF9FQpv152npzHFTY/N9aF88mItLE15pJcFNFkPhIDTrYEvso=
-----END CERTIFICATE-----