Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hPfFYhuxKg-SzB12oNXOOQIAG5Y.roa
File:                     hPfFYhuxKg-SzB12oNXOOQIAG5Y.roa (raw, json)
Hash identifier:          vttdjfvxxKsQGiJ/bW9ky9szHrf5GiY148sFUQBAyq8=
Subject key identifier:   84:F7:C5:62:1B:B1:2A:0F:92:CC:1D:76:A0:D5:CE:39:02:00:1B:96
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hPfFYhuxKg-SzB12oNXOOQIAG5Y.roa
Signing time:             Thu 15 Sep 2022 02:45:25 +0000
ROA not before:           Thu 15 Sep 2022 02:45:25 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        123.193.246.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8096 (0x1fa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:45:25 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=84F7C5621BB12A0F92CC1D76A0D5CE3902001B96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ce:5a:d9:bb:5c:54:e6:e2:2d:2e:8c:4e:a3:
                    1b:00:11:4b:8b:6d:63:6b:f1:f6:dc:d3:4d:73:22:
                    ae:34:9c:51:89:7d:ad:bc:bb:b9:25:f5:42:a8:66:
                    90:f6:67:a3:b3:19:12:fe:6a:a2:d2:df:ea:46:e8:
                    19:0d:6b:63:db:10:cf:be:83:1e:63:17:3f:67:27:
                    d7:b1:b8:9a:c9:cc:ce:13:52:5f:25:2e:49:d0:13:
                    22:d3:21:21:69:10:36:83:48:6f:5f:16:22:a2:44:
                    90:91:15:c5:ae:00:1a:85:88:5a:75:67:bc:50:10:
                    4d:21:a4:19:6b:90:b0:48:27:22:b9:71:c2:a0:12:
                    23:08:c7:c2:b4:7b:ad:2f:53:d5:06:e3:00:e5:e8:
                    e5:c0:ec:7e:a1:56:07:35:07:a0:ed:35:07:07:28:
                    9e:c9:7d:41:cb:c1:6d:ec:40:b6:7f:94:3e:e2:df:
                    1a:76:c2:74:f3:be:d3:98:78:20:c3:9d:3a:6d:01:
                    2b:f1:a7:6d:c1:69:1e:1e:09:76:0e:4a:59:ac:55:
                    97:58:93:b1:7f:ad:2a:a8:a3:48:a7:28:98:8d:97:
                    fa:1a:64:72:4f:87:63:0a:92:96:f2:08:2e:e6:4b:
                    e4:0d:63:6c:ea:52:ae:9c:e7:3c:4a:f2:e6:b1:2e:
                    ad:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:F7:C5:62:1B:B1:2A:0F:92:CC:1D:76:A0:D5:CE:39:02:00:1B:96
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hPfFYhuxKg-SzB12oNXOOQIAG5Y.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:b7:bc:6c:d2:89:af:f5:90:26:51:ea:b9:f6:3d:54:4f:ee:
         8b:8e:1b:02:21:4b:76:1b:82:a5:eb:60:c4:23:11:80:17:8c:
         63:5d:1c:77:95:b7:f6:58:4b:9b:3e:b9:49:1b:5c:12:30:49:
         67:7d:9c:da:a3:d2:3f:dc:df:6a:8c:aa:6a:c1:19:81:74:a1:
         41:b4:71:c1:a5:a5:4c:d5:71:5c:5e:1c:47:ac:93:bd:78:0b:
         d1:bb:6f:98:6d:46:4e:75:2e:e1:df:46:ad:1d:5e:41:be:b4:
         e8:08:5b:e3:71:3e:d3:01:c2:7e:88:61:0f:85:3b:8b:8c:3a:
         71:bb:a3:92:2b:71:c1:fc:55:ac:6d:2b:c4:4e:c7:ff:cd:30:
         c8:33:85:cb:db:f2:9d:65:db:40:66:4e:a8:a9:53:06:0e:8a:
         c8:d5:2b:2d:7c:14:8e:9a:36:d4:0b:a3:70:ad:fd:96:4e:16:
         4d:a3:47:78:b1:8f:2d:94:7a:0e:82:7a:52:9b:e6:ff:4e:77:
         43:ec:6a:dd:2a:1e:34:c3:49:b1:1c:5e:b0:6c:51:1b:d4:33:
         32:02:11:1d:a1:c8:73:41:fb:80:40:19:10:10:10:00:7d:a0:
         31:c6:49:98:8f:c4:61:69:c6:ea:92:54:0d:53:fa:c8:0e:f3:
         39:bf:57:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----