Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/i2txzEgyvInHTcptn6Q7epSCj9o.roa
File:                     i2txzEgyvInHTcptn6Q7epSCj9o.roa (raw, json)
Hash identifier:          PkW9qrtQRCj12j5jlH++HYE2fsH6ecWFCj65MHYz+Ok=
Subject key identifier:   8B:6B:71:CC:48:32:BC:89:C7:4D:CA:6D:9F:A4:3B:7A:94:82:8F:DA
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       2336
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/i2txzEgyvInHTcptn6Q7epSCj9o.roa
Signing time:             Fri 25 Nov 2022 04:42:13 +0000
ROA not before:           Fri 25 Nov 2022 04:42:13 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        106.1.45.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9014 (0x2336)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:42:13 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=8B6B71CC4832BC89C74DCA6D9FA43B7A94828FDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c4:2b:1d:47:0b:1d:d9:95:5d:07:e8:11:32:
                    e0:8f:9d:50:4f:b2:04:89:84:ad:aa:06:14:33:1d:
                    93:a1:b7:cb:bf:9f:49:e6:24:2b:e7:b6:70:89:82:
                    7d:8f:11:1a:6e:2b:75:9e:85:79:f7:82:c9:81:e5:
                    98:a7:82:99:a3:45:eb:64:1c:e6:20:fb:19:d9:9f:
                    b4:c9:bd:c9:85:ae:a2:a6:22:31:c8:7d:12:29:3e:
                    09:42:b7:c4:e2:c6:ac:7f:7a:d7:f9:fe:ce:58:19:
                    4b:df:c7:18:a3:e8:a8:9a:21:a0:99:ec:65:9d:e4:
                    9d:b6:f6:d0:92:42:a5:20:c2:0c:47:c0:01:35:5b:
                    45:47:31:ff:fb:1e:bc:c9:62:1a:2b:83:81:f7:d2:
                    bc:be:17:fc:2c:f8:22:9f:63:ba:be:ff:df:0a:ef:
                    30:97:21:71:28:78:9b:23:99:02:9c:e1:a7:c0:e6:
                    7b:b9:60:59:cf:e2:af:86:79:71:c4:0d:7a:ff:d6:
                    2f:35:30:07:78:a7:a8:2e:b3:e8:ff:2c:bf:28:43:
                    80:19:06:aa:b6:e3:d8:61:38:f3:9f:7c:47:cb:9f:
                    1a:6e:cf:2b:85:fa:28:f2:b8:cd:9b:6a:01:23:f4:
                    39:cd:62:dd:9e:f0:a5:84:10:27:50:01:3e:33:1c:
                    28:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:6B:71:CC:48:32:BC:89:C7:4D:CA:6D:9F:A4:3B:7A:94:82:8F:DA
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/i2txzEgyvInHTcptn6Q7epSCj9o.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:79:d0:b1:bf:c9:83:80:9d:89:69:36:5f:fe:fc:59:a1:40:
         2f:93:a7:e3:cd:92:07:38:23:84:f7:46:3f:0a:3b:3e:09:52:
         2c:a7:48:49:d1:74:89:25:c5:3f:31:7e:5f:4f:81:0c:fc:29:
         a8:99:98:db:90:00:c9:73:3c:0d:9d:a8:ef:16:27:1f:db:7b:
         82:19:49:76:0a:a6:c3:73:00:d7:91:1c:19:fc:86:37:aa:aa:
         b3:51:44:78:ac:22:6e:e6:0d:9c:3f:e4:50:49:de:12:94:99:
         f4:b1:7b:56:22:bb:1c:9d:72:c8:76:c7:16:c9:6d:63:59:02:
         d2:9c:ac:b5:3e:2c:25:3e:fc:25:9c:e7:63:38:01:79:bd:5f:
         63:f2:ef:e3:d0:79:d0:9f:b1:de:c2:31:fe:a1:08:f1:75:b6:
         dd:47:e4:03:bf:06:8d:b4:0f:d1:3e:58:4f:3f:e8:8b:c9:bf:
         09:2a:9a:ad:2f:9c:4b:92:51:79:11:52:b0:8b:86:e0:54:fa:
         fe:be:91:9b:38:bb:a4:83:f1:87:af:29:21:fe:93:0c:97:e6:
         e9:21:98:d5:a5:a3:3b:ec:b4:b1:fb:36:e7:91:b4:d7:f6:a0:
         ba:11:97:12:ee:30:75:f2:12:29:b4:34:dc:76:2c:58:54:03:
         d7:ea:18:f5
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIzYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDQyMTNaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDhCNkI3MUNDNDgzMkJD
ODlDNzREQ0E2RDlGQTQzQjdBOTQ4MjhGREEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDKxCsdRwsd2ZVdB+gRMuCPnVBPsgSJhK2qBhQzHZOht8u/n0nm
JCvntnCJgn2PERpuK3WehXn3gsmB5ZingpmjRetkHOYg+xnZn7TJvcmFrqKmIjHI
fRIpPglCt8Tixqx/etf5/s5YGUvfxxij6KiaIaCZ7GWd5J229tCSQqUgwgxHwAE1
W0VHMf/7HrzJYhorg4H30ry+F/ws+CKfY7q+/98K7zCXIXEoeJsjmQKc4afA5nu5
YFnP4q+GeXHEDXr/1i81MAd4p6gus+j/LL8oQ4AZBqq249hhOPOffEfLnxpuzyuF
+ijyuM2bagEj9DnNYt2e8KWEECdQAT4zHCihAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUi2txzEgyvInHTcptn6Q7epSCj9owHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2kydHh6RWd5dkluSFRjcHRu
NlE3ZXBTQ2o5by5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq
AS0wDQYJKoZIhvcNAQELBQADggEBABN50LG/yYOAnYlpNl/+/FmhQC+Tp+PNkgc4
I4T3Rj8KOz4JUiynSEnRdIklxT8xfl9PgQz8KaiZmNuQAMlzPA2dqO8WJx/be4IZ
SXYKpsNzANeRHBn8hjeqqrNRRHisIm7mDZw/5FBJ3hKUmfSxe1Yiuxydcsh2xxbJ
bWNZAtKcrLU+LCU+/CWc52M4AXm9X2Py7+PQedCfsd7CMf6hCPF1tt1H5AO/Bo20
D9E+WE8/6IvJvwkqmq0vnEuSUXkRUrCLhuBU+v6+kZs4u6SD8YevKSH+kwyX5ukh
mNWlozvstLH7NueRtNf2oLoRlxLuMHXyEim0NNx2LFhUA9fqGPU=
-----END CERTIFICATE-----