Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/i2d4HSR2mAp6vwQyQ0G2sLr1UsM.roa
File:                     i2d4HSR2mAp6vwQyQ0G2sLr1UsM.roa (raw, json)
Hash identifier:          HiYrDJJ9jM+GSDC+frWmngEJxo6jEwnf1tV3DwpUqqg=
Subject key identifier:   8B:67:78:1D:24:76:98:0A:7A:BF:04:32:43:41:B6:B0:BA:F5:52:C3
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       215A
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/i2d4HSR2mAp6vwQyQ0G2sLr1UsM.roa
Signing time:             Fri 25 Nov 2022 04:39:50 +0000
ROA not before:           Fri 25 Nov 2022 04:39:50 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        106.1.248.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8538 (0x215a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:39:50 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=8B67781D2476980A7ABF04324341B6B0BAF552C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:d1:b9:2f:a8:a8:bb:a0:d2:f6:68:8d:a8:3a:
                    59:99:13:9a:8d:f0:18:68:63:8f:12:05:d0:6b:4d:
                    9f:f5:02:c9:62:f7:e3:17:fe:9f:31:14:74:af:b9:
                    13:f3:b9:7a:e8:fe:0d:e2:c6:11:9f:48:e4:8e:1f:
                    7f:b5:fb:9b:63:9c:aa:62:db:f7:ec:e6:d3:fd:a8:
                    31:33:ae:9f:97:62:05:76:c1:f7:75:a1:fb:e8:d6:
                    1b:52:9c:a5:02:77:a3:cd:9a:47:6b:5b:87:a7:90:
                    4c:67:0e:e6:7d:58:25:ac:b5:2d:81:6a:53:cd:2d:
                    e4:f3:a8:99:d1:c6:6b:03:3b:c4:e1:5b:de:55:a2:
                    57:c5:7f:23:91:2e:d6:e8:44:8f:e2:b2:12:50:14:
                    6b:a8:0c:e6:cb:7e:89:3d:64:26:6c:11:b5:40:ad:
                    11:10:c8:e7:93:29:3f:df:ad:d2:cf:bd:03:03:00:
                    6d:7f:ee:83:9d:f9:e7:98:78:c7:f7:15:b2:e0:3e:
                    26:00:1f:43:b5:3d:b0:53:ed:f5:55:b6:b2:8d:d4:
                    f4:3e:ab:b5:aa:d4:e1:3b:da:78:df:e9:72:80:d3:
                    9e:07:3e:7d:3b:f8:1b:da:7d:45:f4:e5:06:d3:82:
                    4b:6d:26:c5:a4:ab:2a:36:27:4e:15:d0:97:6c:2b:
                    9f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:67:78:1D:24:76:98:0A:7A:BF:04:32:43:41:B6:B0:BA:F5:52:C3
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/i2d4HSR2mAp6vwQyQ0G2sLr1UsM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:02:24:39:68:06:82:c4:c7:92:4a:e2:2f:66:f0:ec:19:26:
         f1:b7:a3:ba:af:fd:97:b0:22:76:90:ab:80:cf:b5:0e:d2:c4:
         4d:0e:b8:de:70:da:0b:bf:b2:73:cf:a1:c7:8e:e7:4c:8a:22:
         6c:d3:d9:d9:04:42:12:fd:66:30:34:85:dc:a3:83:c2:ad:d6:
         d1:77:22:0d:db:34:66:96:d8:d3:a9:0f:e1:a0:90:1b:a7:18:
         1c:73:c3:c7:85:4e:04:e5:3f:b9:04:d4:7e:b0:f0:95:34:f2:
         f3:6c:8c:c3:54:40:e2:92:18:13:59:cc:76:ed:e9:3a:53:0e:
         fa:e6:b8:84:bb:e5:c6:c9:e3:00:0d:5c:e3:1a:f3:3f:03:0e:
         01:fa:7b:96:a2:67:96:d5:d2:b9:3a:42:88:46:5d:15:2d:ff:
         8e:83:cd:09:b0:57:6c:32:eb:b2:59:2c:61:2d:80:c3:5a:1d:
         82:c6:45:42:58:3e:f1:f0:a1:cb:db:85:0b:97:43:82:00:3c:
         05:26:98:f1:28:95:7b:97:89:a1:d4:74:60:c4:79:e2:6b:9b:
         9d:19:6a:3d:31:2b:5a:68:e0:26:f4:52:79:da:9f:08:b5:3a:
         65:57:97:77:a7:88:a3:53:ca:46:0b:f4:56:52:ce:85:34:12:
         d0:49:d4:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----