Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lEQvHSDiZfFBGxNWR3aF-kQrUt8.roa
File:                     lEQvHSDiZfFBGxNWR3aF-kQrUt8.roa (raw, json)
Hash identifier:          wsC/O736esB16YXwRJKBXg1OJNwSEhnyxju0LIfpMMg=
Subject key identifier:   94:44:2F:1D:20:E2:65:F1:41:1B:13:56:47:76:85:FA:44:2B:52:DF
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       20A4
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lEQvHSDiZfFBGxNWR3aF-kQrUt8.roa
Signing time:             Fri 25 Nov 2022 04:38:56 +0000
ROA not before:           Fri 25 Nov 2022 04:38:56 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        106.1.100.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8356 (0x20a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:38:56 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=94442F1D20E265F1411B1356477685FA442B52DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:49:c7:b4:be:af:7c:9e:87:78:c0:dd:15:e2:
                    b1:b9:c4:90:78:af:fb:cc:1e:1b:84:e0:7d:86:5d:
                    6c:6c:ac:98:50:31:58:5a:1c:8b:e4:78:7f:f0:54:
                    b5:c3:dd:5e:56:92:26:bd:bb:ee:30:59:4a:7b:37:
                    2e:a8:90:63:1e:94:4d:f9:0d:f2:b2:84:42:a7:65:
                    7f:01:fd:90:f4:f3:6e:49:1f:e3:94:13:4d:59:4d:
                    f1:9b:a4:a2:04:cc:4e:88:48:0e:e4:e7:68:c6:01:
                    5d:1e:cb:43:38:85:75:b7:1d:99:4f:b8:1b:9d:6c:
                    4f:c7:8f:54:6b:df:9a:00:87:14:af:df:2e:4a:8c:
                    f9:8f:09:16:42:5f:64:e9:fb:a8:bc:51:0a:8e:17:
                    c9:e7:28:97:9d:f6:04:52:d3:97:0d:91:dd:cc:51:
                    86:80:99:3f:0e:be:18:14:5f:61:5f:d7:f5:e9:56:
                    ae:52:a7:f2:77:cf:95:46:50:87:05:78:98:f2:46:
                    3f:3d:8e:36:a1:79:f3:cb:bb:6a:c1:4b:33:85:d9:
                    0b:39:28:c2:93:88:b5:05:75:24:fc:9d:ac:0f:89:
                    b3:a5:a4:c8:1c:f7:83:38:db:3f:bb:8c:30:e8:c4:
                    a3:32:89:ae:52:b1:a6:a0:d6:58:93:48:a2:26:6a:
                    72:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:44:2F:1D:20:E2:65:F1:41:1B:13:56:47:76:85:FA:44:2B:52:DF
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lEQvHSDiZfFBGxNWR3aF-kQrUt8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:06:94:74:eb:2d:b6:34:95:32:54:b8:ac:d0:98:99:fb:6d:
         2a:b1:25:68:40:e2:26:dd:8b:30:7c:92:10:98:f2:21:2a:6c:
         14:a9:78:78:87:26:e4:b2:64:10:02:5b:5d:68:42:88:85:60:
         c3:a8:24:4d:8e:8b:28:0d:32:47:b8:15:1b:8e:29:c6:9c:59:
         9a:b4:36:b0:90:df:f8:54:1f:9c:9e:c4:0e:da:0d:7d:94:36:
         00:11:24:13:3f:f5:0b:2a:ce:20:08:62:56:89:cf:3c:b2:34:
         7d:3d:60:15:87:23:e9:22:e5:b5:e4:50:a7:ab:5c:cb:e3:29:
         ef:67:d9:18:be:e1:03:70:b6:f9:3a:91:9d:f6:ee:4f:18:a5:
         f7:52:46:5c:dd:7b:10:e8:55:87:6f:59:85:44:9e:da:81:e1:
         d6:be:bd:a9:5f:8e:c7:eb:17:0b:52:76:e0:fd:ec:a3:c9:1b:
         60:d0:68:31:77:30:9f:2c:e5:78:d3:f2:81:96:f6:8d:80:eb:
         2e:58:1f:f5:95:f1:28:57:53:07:48:dd:f5:d4:e0:bf:d8:6c:
         13:a6:25:2c:97:55:d2:10:0a:8a:5f:b5:1f:38:73:38:d1:56:
         dc:e3:6c:64:76:bb:4b:8e:3c:9e:89:bf:f6:f7:84:0a:0b:48:
         bb:fe:6f:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----