Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/is8cIGBrCJIjspMX22pE_MPcMHI.roa
File:                     is8cIGBrCJIjspMX22pE_MPcMHI.roa (raw, json)
Hash identifier:          spF/gq45NC5n/95gzlYo+riglElrJkzexyc8EAzWiA4=
Subject key identifier:   8A:CF:1C:20:60:6B:08:92:23:B2:93:17:DB:6A:44:FC:C3:DC:30:72
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/is8cIGBrCJIjspMX22pE_MPcMHI.roa
Signing time:             Thu 15 Sep 2022 02:45:34 +0000
ROA not before:           Thu 15 Sep 2022 02:45:34 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        2407:4d00:ff08::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8096 (0x1fa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:45:34 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=8ACF1C20606B089223B29317DB6A44FCC3DC3072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:0b:8a:b7:ca:e5:04:ee:34:7f:03:d3:c7:f2:
                    b1:83:2d:c2:2b:a4:51:71:3c:f5:9a:5a:38:b6:e9:
                    3c:4e:5e:cd:70:b3:a9:5c:d6:4a:d6:bb:f0:a8:e8:
                    ba:5f:86:53:0c:eb:2e:7f:6f:e8:9a:ed:67:51:c8:
                    48:26:1c:e5:d5:5f:49:de:f9:ff:2a:92:bf:ff:81:
                    db:4a:a7:ff:24:a4:96:98:f4:ae:40:3c:35:6a:f8:
                    1c:c0:1f:5a:e4:6c:28:15:c1:b1:e4:2e:e2:77:8e:
                    02:bd:ed:46:34:e8:58:f6:4d:da:dc:6c:27:c4:4c:
                    e0:d2:fe:a4:07:6a:b6:36:67:54:0b:07:d2:ac:58:
                    92:aa:c5:f9:77:51:02:70:9c:c7:d4:bc:4a:83:27:
                    58:5d:72:e0:80:cb:6a:be:0d:82:f4:6f:59:78:fe:
                    00:69:1e:89:b2:cb:55:b2:c1:48:6b:55:f8:92:f3:
                    b1:00:ed:fe:21:f7:28:1d:95:f5:45:b0:31:c3:2e:
                    20:a3:ea:bb:c7:55:b1:37:67:53:89:82:6f:36:7b:
                    d1:1e:bd:b3:d0:c6:1f:66:7f:94:a7:72:45:e0:bb:
                    dd:b2:0d:2b:9f:d0:a8:39:81:3c:c8:7d:78:f2:a9:
                    bb:36:f4:d3:f9:3a:52:a4:76:08:25:2f:7f:d7:47:
                    46:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:CF:1C:20:60:6B:08:92:23:B2:93:17:DB:6A:44:FC:C3:DC:30:72
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/is8cIGBrCJIjspMX22pE_MPcMHI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:4d00:ff08::/48

    Signature Algorithm: sha256WithRSAEncryption
         5f:0c:d6:0b:75:77:f7:c0:ca:4c:fb:78:c2:61:66:2a:53:de:
         ea:a1:41:28:93:fd:05:f9:6f:13:89:d9:41:e8:a4:b2:92:f2:
         6a:cd:4b:eb:ad:a4:6d:9c:e7:51:94:a0:09:6c:d6:de:17:54:
         1d:6b:f6:44:f7:2a:d5:16:c0:79:78:a8:ce:6e:b8:55:30:1b:
         81:b6:16:56:e4:48:ad:e3:ff:22:4e:4b:2c:d7:7a:a7:e7:bd:
         03:50:da:ea:51:42:a5:c4:85:c7:dd:74:97:86:13:42:2e:6e:
         8e:f3:ee:aa:c5:50:a3:f9:26:1b:8e:41:f3:14:3e:37:0e:e6:
         17:f6:fe:7d:0f:6c:9f:8a:60:bb:59:03:5a:a6:0a:ef:b8:70:
         0f:9b:cf:e5:1d:ac:2d:de:ef:52:42:9e:8f:5f:f5:61:f1:a0:
         b3:43:d2:05:a4:cc:d0:74:a7:dd:16:6b:cb:ea:a1:ef:ec:55:
         dc:81:6f:26:5e:5c:96:ae:73:68:94:19:fa:92:a5:d6:02:96:
         a6:6c:35:85:3d:db:e4:b5:c9:86:3c:3a:91:d2:82:9d:42:f8:
         ba:86:44:3d:6d:34:ce:7c:cc:96:bc:24:58:a5:74:b4:be:89:
         21:a9:7e:ce:a2:fd:b6:b5:bf:2a:7b:fe:86:85:32:b8:f2:17:
         d6:de:78:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----