Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fnPESw704NrI-Y0wUHWhfxO05es.roa
File:                     fnPESw704NrI-Y0wUHWhfxO05es.roa (raw, json)
Hash identifier:          heTcGzGM/cv57P9Bj3PTrUAnSImE3+noxZFMQcEWYuU=
Subject key identifier:   7E:73:C4:4B:0E:F4:E0:DA:C8:F9:8D:30:50:75:A1:7F:13:B4:E5:EB
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       22C9
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fnPESw704NrI-Y0wUHWhfxO05es.roa
Signing time:             Fri 25 Nov 2022 04:41:39 +0000
ROA not before:           Fri 25 Nov 2022 04:41:39 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        106.1.215.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8905 (0x22c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:41:39 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=7E73C44B0EF4E0DAC8F98D305075A17F13B4E5EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:84:1c:5d:71:81:0d:58:3b:1a:85:81:ea:5f:
                    a0:80:4a:8d:a7:81:27:dc:0e:fd:3d:46:b1:f7:38:
                    a2:87:d5:79:a6:20:cb:ab:89:25:b4:16:aa:ff:7e:
                    f3:cb:91:84:73:d3:60:fa:96:e7:f7:90:10:7a:f7:
                    95:47:e2:bc:16:b0:dc:4b:bd:50:a3:74:74:11:37:
                    72:75:49:7d:d2:46:a9:3b:e4:5b:5a:34:3b:49:0d:
                    cc:9e:f5:80:f2:63:58:e9:73:61:06:fa:03:31:7f:
                    8e:0e:ca:b5:57:ac:b9:05:cc:0d:61:8e:aa:83:85:
                    08:09:11:cd:ee:41:41:fe:5f:4c:4c:91:1d:e2:c0:
                    14:95:39:33:20:bc:1d:af:e0:8e:3d:6b:e1:d4:95:
                    6a:84:95:dd:6a:4a:0a:c9:fe:55:3c:85:51:85:c9:
                    ec:ed:85:60:6a:de:ef:dc:15:f9:7b:2c:d7:44:52:
                    3a:be:11:ca:8e:00:79:ae:03:5a:e9:c5:b9:e6:17:
                    64:e0:b4:65:cc:0d:15:1c:c7:c3:3e:d2:70:d7:9f:
                    43:91:71:ba:19:f7:66:8c:93:c1:86:0c:ef:c5:0d:
                    e9:c4:ba:1c:11:f7:6c:d6:18:d2:2d:6a:08:d8:a6:
                    da:f0:1e:8e:40:ad:34:50:72:c4:df:29:36:5b:29:
                    c7:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:73:C4:4B:0E:F4:E0:DA:C8:F9:8D:30:50:75:A1:7F:13:B4:E5:EB
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fnPESw704NrI-Y0wUHWhfxO05es.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:4b:49:17:54:da:2d:a0:07:93:d8:3d:aa:ff:5d:a3:d4:91:
         0c:9d:d7:f2:ac:e7:a2:f7:7d:37:9f:a1:bf:35:f0:a8:d5:44:
         26:5b:8e:71:8e:50:e2:16:7b:92:1e:d4:d6:85:01:44:1d:0d:
         3a:57:44:22:f8:34:36:60:a0:da:11:3e:8c:88:24:15:85:c7:
         51:fc:76:d4:d0:d8:69:d1:53:ad:34:ec:8a:9a:4d:b6:91:b6:
         28:92:7d:b4:e4:4d:2b:b3:85:c9:ba:70:11:88:67:e4:51:58:
         56:ee:6c:aa:6d:10:47:41:f3:40:a7:a7:b3:df:49:46:e7:7d:
         1e:42:0f:fe:85:4c:8b:0a:79:27:c7:61:8f:c3:07:6b:8a:25:
         ed:64:74:fe:ce:ba:34:f9:11:a1:81:7d:44:7f:6b:7a:0d:f2:
         42:01:c4:5a:26:68:1f:cc:63:64:58:6c:64:78:87:e1:2b:20:
         a4:41:17:8e:ab:1c:a8:ef:a3:71:0d:ae:e2:65:f2:5c:f5:81:
         cf:95:97:9b:56:71:78:d4:2f:4c:a6:09:dd:0b:98:25:30:50:
         0c:6d:98:a5:42:3d:41:cc:38:14:fe:87:79:33:b8:88:4f:60:
         22:b4:af:2b:00:aa:df:c7:fd:77:32:4a:7d:9b:6d:42:5d:84:
         8d:59:93:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----