Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dM3jmTr2xPuPR7m2xHyioacg8Dw.roa
File:                     dM3jmTr2xPuPR7m2xHyioacg8Dw.roa (raw, json)
Hash identifier:          ENOIEgao/Yawy7kdVfyAoq/rCST+6i77seJCmBXEUZA=
Subject key identifier:   74:CD:E3:99:3A:F6:C4:FB:8F:47:B9:B6:C4:7C:A2:A1:A7:20:F0:3C
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       2092
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dM3jmTr2xPuPR7m2xHyioacg8Dw.roa
Signing time:             Fri 25 Nov 2022 04:38:52 +0000
ROA not before:           Fri 25 Nov 2022 04:38:52 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        118.232.232.0/21 maxlen: 21

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8338 (0x2092)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:38:52 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=74CDE3993AF6C4FB8F47B9B6C47CA2A1A720F03C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:65:d3:5d:e0:67:15:83:8b:54:41:3c:68:a6:
                    15:37:2a:99:51:c0:f8:a7:4b:a5:7f:db:87:20:98:
                    c6:f6:e2:97:0f:16:23:68:84:75:b5:f8:65:04:bd:
                    b9:88:d4:5e:11:91:3a:14:0c:4f:51:51:c4:05:92:
                    7f:9b:b1:01:ae:86:66:2e:82:c1:dc:6a:53:5e:85:
                    a2:a1:59:b0:23:3f:ac:ce:2a:ba:fe:fe:00:66:59:
                    90:cb:09:94:a0:ed:07:8a:91:62:16:72:18:86:01:
                    74:06:e8:55:37:d9:f3:10:b4:ec:88:2d:a3:e4:95:
                    c3:83:3b:a8:2e:a6:ee:0b:d5:5b:39:38:01:af:e8:
                    40:fd:09:e7:58:cf:ab:f0:28:71:0e:46:ac:f9:47:
                    cd:06:51:7b:ea:4b:d0:92:b0:98:6f:06:01:ce:29:
                    8f:95:b2:cb:73:d2:7a:46:9c:0c:32:e8:49:f5:ee:
                    1d:47:2f:2a:6a:30:f9:98:d5:ff:98:35:fc:f4:6c:
                    d1:e7:56:15:02:40:d8:3a:a7:97:64:4d:e0:d0:c8:
                    7b:a8:77:b9:95:ec:b7:2d:e0:74:38:f7:c7:33:94:
                    86:17:75:3c:56:b9:6e:7f:41:81:a0:6f:a0:84:83:
                    88:4a:43:0b:5c:99:6b:bc:78:23:88:bd:7d:4d:78:
                    fd:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:CD:E3:99:3A:F6:C4:FB:8F:47:B9:B6:C4:7C:A2:A1:A7:20:F0:3C
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dM3jmTr2xPuPR7m2xHyioacg8Dw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6b:45:24:5f:6d:38:66:af:95:88:7e:d4:5a:93:47:ff:b5:67:
         c4:9e:60:2e:75:eb:f0:ce:99:59:d7:61:57:d4:92:76:e8:8d:
         23:60:37:f1:9b:0e:0e:73:a6:75:2e:b0:15:f9:98:00:84:bd:
         ba:b9:ed:71:72:14:a4:59:aa:4b:73:8b:90:5d:17:4d:ea:01:
         ff:91:42:42:bf:38:40:a2:b5:69:38:32:65:16:e0:01:a4:22:
         21:4b:1b:4b:d7:53:65:1c:54:5e:04:2d:7a:db:43:40:2c:4c:
         3f:51:d0:71:67:e1:b3:2e:e3:02:0a:83:35:f3:25:04:45:a8:
         51:c1:ef:2a:1e:16:e2:ef:ee:ef:b6:d1:54:6d:3e:d5:d8:8b:
         bb:c2:43:09:f4:59:e0:d1:47:57:87:45:72:83:86:d7:71:7c:
         68:e1:07:a1:73:7e:e7:ae:ac:32:79:e6:16:f8:d3:6a:5e:0d:
         1b:54:44:43:d9:c4:53:4a:e2:37:62:c5:35:20:fe:f0:3c:37:
         05:43:91:f5:8d:97:3a:c6:e4:45:99:6b:a8:df:9f:cf:73:a6:
         9e:1d:ca:a0:96:49:e5:88:b2:ac:42:01:60:97:be:b1:f2:81:
         09:25:6c:82:a4:a7:20:40:93:8f:2b:5a:c2:06:29:c7:72:f9:
         cd:61:46:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----