Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/l3Z-0gnQ9IWeLttfJDwCquApnEY.roa
File:                     l3Z-0gnQ9IWeLttfJDwCquApnEY.roa (raw, json)
Hash identifier:          eKhfTwFHr34RpKunvkagLm/pSIufp75AVS3lT4du9fM=
Subject key identifier:   97:76:7E:D2:09:D0:F4:85:9E:2E:DB:5F:24:3C:02:AA:E0:29:9C:46
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       22BF
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/l3Z-0gnQ9IWeLttfJDwCquApnEY.roa
Signing time:             Fri 25 Nov 2022 04:41:36 +0000
ROA not before:           Fri 25 Nov 2022 04:41:36 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     9924
IP address blocks:        123.194.232.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8895 (0x22bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:41:36 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=97767ED209D0F4859E2EDB5F243C02AAE0299C46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:9b:83:75:58:84:bf:c5:ed:1f:75:6c:d3:09:
                    25:50:9b:de:bc:39:4d:7f:03:06:99:9a:fe:b3:93:
                    62:98:39:55:c6:6b:a8:48:22:56:0c:25:17:40:38:
                    03:18:1a:62:7c:f6:7f:d5:38:98:2c:8c:ca:25:06:
                    6f:dd:9f:a0:d7:88:9c:75:59:23:9b:4c:7d:b2:ad:
                    3a:93:f4:cd:c7:7d:f7:ee:42:d1:22:79:8e:aa:85:
                    25:31:7a:b0:2e:e7:5b:a6:be:68:2e:6c:d7:1b:a1:
                    e6:41:8e:ed:47:99:41:cb:ab:99:be:cb:7c:13:a0:
                    0d:a8:c0:6a:25:a5:75:b4:9a:c2:f3:b7:d9:af:ff:
                    2b:5b:ac:4c:14:15:99:53:11:e1:54:ca:e4:f0:c4:
                    8d:6c:9c:04:62:46:a1:15:25:97:49:c4:5d:b6:f8:
                    13:ef:22:b1:c9:a0:99:0c:98:63:73:20:79:1b:a3:
                    2f:b9:f7:d1:71:de:fb:46:3a:37:8e:42:48:76:6e:
                    06:08:37:b0:c0:91:c3:83:b8:61:8f:bd:b1:21:ae:
                    8b:9b:33:81:e1:c4:27:2d:a9:1c:73:b2:51:dc:fa:
                    ef:11:f1:75:1b:e3:d0:7e:9e:06:40:f7:95:6b:b2:
                    12:00:7c:6b:c7:20:00:29:c8:9d:95:a8:4f:1b:ea:
                    11:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:76:7E:D2:09:D0:F4:85:9E:2E:DB:5F:24:3C:02:AA:E0:29:9C:46
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/l3Z-0gnQ9IWeLttfJDwCquApnEY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:5f:7b:d4:32:39:1d:be:ee:59:ef:e7:fb:e5:54:04:b2:4d:
         c6:5e:54:4c:28:11:a4:24:26:2d:9a:76:59:6d:02:44:fd:42:
         3b:c1:f6:70:d9:33:af:49:4a:ae:59:ea:99:18:21:5a:54:a7:
         ec:65:4f:0e:b8:c0:51:c6:b1:c2:a8:16:47:ea:96:11:7b:73:
         05:ed:69:18:0c:cb:06:d2:13:40:94:5f:45:41:3e:92:ac:15:
         d0:61:02:dc:5e:e1:03:2a:d6:c4:80:60:5e:fe:43:a3:cf:e3:
         06:7e:05:41:22:4b:05:43:bd:e6:8c:28:46:2e:58:8c:cc:da:
         b6:ba:3b:f3:33:bf:fc:01:e8:a9:2c:6d:1a:7f:3f:63:6d:ff:
         68:cb:aa:ef:6d:a2:84:4f:40:10:f7:2e:e6:bc:78:6f:7a:a2:
         83:61:e4:df:2f:5a:b2:c9:0b:d6:98:55:3a:6f:12:15:72:81:
         14:c4:fe:fe:e1:67:d1:e2:fb:c9:69:e0:a6:46:9b:46:c6:ed:
         ab:47:11:f8:1d:da:d3:30:9e:ba:f6:31:70:3c:77:2c:d9:f3:
         fa:86:98:4e:98:8a:3a:ed:ab:56:cc:d0:d7:5c:d0:59:e5:0f:
         05:01:e9:1c:fa:c1:68:eb:f5:bd:bd:5f:11:b1:43:66:90:72:
         a9:02:54:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----