Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/iMbx03ERwgduHEcIB-Tnd73KqlU.roa
File:                     iMbx03ERwgduHEcIB-Tnd73KqlU.roa (raw, json)
Hash identifier:          fZEiyVeCBS5/iK1LQKz0mCvtFB5MKEj062vpHrDuHrQ=
Subject key identifier:   88:C6:F1:D3:71:11:C2:07:6E:1C:47:08:07:E4:E7:77:BD:CA:AA:55
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       224F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/iMbx03ERwgduHEcIB-Tnd73KqlU.roa
Signing time:             Fri 25 Nov 2022 04:41:01 +0000
ROA not before:           Fri 25 Nov 2022 04:41:01 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     9924
IP address blocks:        123.193.0.0/19 maxlen: 19

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8783 (0x224f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:41:01 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=88C6F1D37111C2076E1C470807E4E777BDCAAA55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7a:55:10:63:0b:d5:3a:1c:88:0a:36:de:38:
                    9d:ef:1b:99:b9:b5:96:ce:16:7f:68:cf:8d:2f:61:
                    39:02:01:0c:29:cb:57:fe:23:76:29:5c:a0:2e:ec:
                    2b:b6:0e:00:25:d5:78:e0:13:61:a8:8d:41:be:78:
                    db:86:50:d1:0c:a6:bd:74:73:3c:dd:56:6b:75:e2:
                    01:75:26:28:60:dc:c7:90:04:dc:47:eb:a3:7e:b4:
                    cd:7f:7d:e0:54:bb:db:56:53:ee:c9:6a:4a:7d:f3:
                    4d:ca:61:d1:db:3c:98:f6:5a:b5:5a:07:5b:af:11:
                    69:ce:44:2e:4c:0a:cd:86:21:df:3b:23:b9:f0:85:
                    d0:d7:ed:36:1b:31:05:24:d5:4d:09:e3:05:75:90:
                    2a:a7:4e:9b:10:3f:a9:82:20:cd:7f:66:f2:0b:62:
                    3a:ec:87:0f:86:f1:0b:2d:af:ab:20:3d:11:ce:a6:
                    c3:4e:8e:e7:7f:aa:b7:b7:9b:df:5e:1a:d4:b3:ae:
                    0a:2b:7e:01:a8:96:07:c0:75:05:f7:f8:bb:fd:12:
                    75:40:7b:02:14:eb:18:2f:7e:b9:ca:1c:a8:8a:b2:
                    b3:d7:2b:bb:4c:ca:35:b6:46:53:78:dd:9a:c8:66:
                    2b:53:ae:c2:ed:cf:f0:12:8f:23:d1:de:21:23:93:
                    9d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:C6:F1:D3:71:11:C2:07:6E:1C:47:08:07:E4:E7:77:BD:CA:AA:55
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/iMbx03ERwgduHEcIB-Tnd73KqlU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         0c:e7:71:2f:7b:f3:51:69:0f:43:97:4d:76:70:97:9f:38:7c:
         27:d8:b0:82:f1:bb:0d:77:1f:da:20:0c:65:df:03:d4:fc:f2:
         7c:04:0f:8f:d2:47:2c:5f:ae:43:fd:1d:38:c8:bc:b1:8a:65:
         90:64:96:db:a0:19:d2:4e:a2:13:c3:fe:65:58:5a:0a:21:00:
         26:2d:e5:33:49:e1:b5:f0:36:b8:c4:6f:ab:2f:44:c9:fc:af:
         39:5f:20:e2:7c:35:c2:16:b4:65:a3:9a:0b:ea:99:28:da:ca:
         06:63:ae:ec:0b:79:43:62:0f:99:10:96:73:d0:e3:7e:47:36:
         49:79:7d:c5:fb:c1:c4:ea:8d:62:c5:ea:51:c5:1b:f1:f1:25:
         e7:ee:fa:c3:6e:8a:ff:da:98:be:a9:cf:96:1b:1d:d7:3b:6f:
         40:f7:d9:6d:20:4d:c9:1c:ee:3b:ce:bb:9a:0e:d8:24:f9:5f:
         24:8d:67:14:d3:db:7e:64:47:ef:f1:2d:8f:a0:aa:00:1f:a2:
         64:a0:05:ca:f2:a0:32:b3:45:22:c5:75:9c:25:0e:11:18:c3:
         a8:0d:b3:3f:23:d9:dd:f7:44:40:2d:0a:87:e9:72:f3:5d:11:
         23:85:6a:18:8b:91:22:1b:c0:ed:e1:a0:ee:3b:06:57:51:f0:
         ef:4c:62:03
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIk8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDQxMDFaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDg4QzZGMUQzNzExMUMy
MDc2RTFDNDcwODA3RTRFNzc3QkRDQUFBNTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC2elUQYwvVOhyICjbeOJ3vG5m5tZbOFn9oz40vYTkCAQwpy1f+
I3YpXKAu7Cu2DgAl1XjgE2GojUG+eNuGUNEMpr10czzdVmt14gF1Jihg3MeQBNxH
66N+tM1/feBUu9tWU+7Jakp9803KYdHbPJj2WrVaB1uvEWnORC5MCs2GId87I7nw
hdDX7TYbMQUk1U0J4wV1kCqnTpsQP6mCIM1/ZvILYjrshw+G8Qstr6sgPRHOpsNO
jud/qre3m99eGtSzrgorfgGolgfAdQX3+Lv9EnVAewIU6xgvfrnKHKiKsrPXK7tM
yjW2RlN43ZrIZitTrsLtz/ASjyPR3iEjk53HAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUiMbx03ERwgduHEcIB+Tnd73KqlUwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2lNYngwM0VSd2dkdUhFY0lC
LVRuZDczS3FsVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAV7
wQAwDQYJKoZIhvcNAQELBQADggEBAAzncS9781FpD0OXTXZwl584fCfYsILxuw13
H9ogDGXfA9T88nwED4/SRyxfrkP9HTjIvLGKZZBkltugGdJOohPD/mVYWgohACYt
5TNJ4bXwNrjEb6svRMn8rzlfIOJ8NcIWtGWjmgvqmSjaygZjruwLeUNiD5kQlnPQ
435HNkl5fcX7wcTqjWLF6lHFG/HxJefu+sNuiv/amL6pz5YbHdc7b0D32W0gTckc
7jvOu5oO2CT5XySNZxTT235kR+/xLY+gqgAfomSgBcryoDKzRSLFdZwlDhEYw6gN
sz8j2d33REAtCofpcvNdESOFahiLkSIbwO3hoO47BldR8O9MYgM=
-----END CERTIFICATE-----