Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fNKzPDgM1b9wI1_AKB8XH8GjWkU.roa
File:                     fNKzPDgM1b9wI1_AKB8XH8GjWkU.roa (raw, json)
Hash identifier:          ej/r+oyVbCPP4VIiXIQQwmu33HOn44bo/yANVvB/9Ak=
Subject key identifier:   7C:D2:B3:3C:38:0C:D5:BF:70:23:5F:C0:28:1F:17:1F:C1:A3:5A:45
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fNKzPDgM1b9wI1_AKB8XH8GjWkU.roa
Signing time:             Thu 15 Sep 2022 02:52:25 +0000
ROA not before:           Thu 15 Sep 2022 02:52:25 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        2407:4d00:ff0a::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8098 (0x1fa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:52:25 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=7CD2B33C380CD5BF70235FC0281F171FC1A35A45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:25:f3:e4:09:e0:f6:a6:1a:88:b5:ed:31:0f:
                    5c:8f:29:0f:e4:b5:a9:8d:25:8f:89:b9:de:e1:bc:
                    19:33:95:c4:73:a1:8f:86:5d:a5:20:d6:58:5d:59:
                    4c:8a:ca:bf:f4:a3:11:1e:05:06:4d:72:ad:4c:38:
                    52:c4:6a:64:a4:4c:47:a5:ec:2f:2b:54:9a:fe:1b:
                    6a:e2:41:81:f6:b3:ee:6d:0b:d5:1e:e7:76:5d:13:
                    07:92:c8:a4:42:49:e5:01:f9:06:64:b0:76:c1:7f:
                    09:f6:a1:2d:ce:c2:6f:9c:3c:6c:be:84:46:3a:73:
                    0a:97:d5:38:50:48:61:94:5d:6f:88:fa:a6:17:2e:
                    34:15:f4:2b:fa:14:20:bf:e1:1d:f9:b8:39:0c:83:
                    4c:94:95:4c:81:15:15:3d:20:99:c5:7c:0d:10:91:
                    fb:60:ac:9a:82:4d:33:5b:a7:88:c8:00:96:d3:8a:
                    c5:5d:d9:3c:a4:fb:34:99:e7:06:e0:00:cc:ab:d2:
                    92:35:eb:e8:8f:6e:33:28:2a:26:e7:f4:15:8f:6e:
                    47:3e:e7:84:cd:7e:33:7d:93:31:bf:a9:06:41:56:
                    60:56:56:50:d9:d7:a3:b7:a9:73:91:ec:88:c8:7c:
                    9c:5c:dc:bc:69:c3:b2:d4:43:c9:38:f7:e3:77:90:
                    87:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:D2:B3:3C:38:0C:D5:BF:70:23:5F:C0:28:1F:17:1F:C1:A3:5A:45
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fNKzPDgM1b9wI1_AKB8XH8GjWkU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:4d00:ff0a::/48

    Signature Algorithm: sha256WithRSAEncryption
         43:67:8b:66:74:69:f7:9f:35:ba:c3:66:0f:1f:2b:55:ec:da:
         65:3e:3c:fc:73:aa:a1:61:ee:34:19:76:13:1a:fe:f8:06:99:
         af:e9:c6:75:b5:27:4d:47:dc:5c:e3:61:93:9f:73:68:0b:73:
         0f:ee:26:fe:80:c1:83:5a:18:3a:57:14:17:53:a2:2f:06:d1:
         cd:f5:70:2c:52:ff:0b:33:b6:79:68:7c:56:1f:d5:aa:85:63:
         ee:96:ac:43:f0:5c:fe:1f:bc:78:de:20:56:30:0f:e7:f4:a1:
         60:3a:3d:95:93:25:ee:43:d4:be:69:d2:cf:9d:b8:ae:5d:e0:
         ef:2e:fa:c4:b5:51:21:e0:03:42:24:e1:7b:eb:49:35:5d:f2:
         de:1f:c2:cd:1f:43:4d:01:27:4b:e6:7c:5f:67:d0:a4:49:11:
         f9:3a:5c:31:5a:04:d5:5b:ac:61:15:75:d3:3b:4c:6c:f9:5e:
         aa:35:00:1a:2f:d7:8c:9a:10:92:b2:3c:e0:1d:bb:e7:86:3b:
         e6:68:42:e1:6b:0b:ca:5c:c7:66:5a:f9:ec:dc:e6:c2:9e:b9:
         12:2c:b3:1c:7f:dd:2d:c0:cb:c7:3c:82:4d:cb:6e:14:9b:78:
         35:46:96:2a:10:67:1e:6e:94:bc:22:7e:44:af:b5:b9:8a:11:
         63:03:45:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----