Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lkafY6nqOm8E-7uNJVwhEb7Gwec.roa
File:                     lkafY6nqOm8E-7uNJVwhEb7Gwec.roa (raw, json)
Hash identifier:          5zDqYUuGLua+3xxZ0lmwUCB5VRzdK3IzHarfEQsvoEs=
Subject key identifier:   96:46:9F:63:A9:EA:3A:6F:04:FB:BB:8D:25:5C:21:11:BE:C6:C1:E7
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       2253
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lkafY6nqOm8E-7uNJVwhEb7Gwec.roa
Signing time:             Fri 25 Nov 2022 04:41:02 +0000
ROA not before:           Fri 25 Nov 2022 04:41:02 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        2407:4d00:ff02::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8787 (0x2253)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:41:02 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=96469F63A9EA3A6F04FBBB8D255C2111BEC6C1E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a2:c3:bb:09:8b:ce:12:e5:82:26:04:52:66:
                    69:c2:b8:31:70:1f:35:54:44:f8:3d:6b:5e:25:c6:
                    95:fc:32:59:ea:c0:18:68:d2:62:dc:a9:5d:b1:9c:
                    7f:80:53:4b:b1:98:64:db:9c:ca:7e:86:5d:e2:22:
                    47:20:d2:62:71:bc:c6:22:b0:27:89:bf:1e:20:07:
                    85:64:de:44:87:17:c9:d7:34:c4:3e:f5:f2:fb:a3:
                    ef:9a:57:44:fa:56:0a:1a:5b:29:f2:b1:1f:c9:eb:
                    be:e4:f2:94:5c:43:d8:bd:5e:a9:ec:5c:2e:8b:bd:
                    bd:0c:f6:35:94:44:d8:39:5f:8c:b7:3f:ff:01:83:
                    fb:6a:09:42:f5:3f:7d:da:11:a7:80:44:10:49:57:
                    e5:56:ce:8e:24:41:c2:4c:69:3d:1c:49:46:de:92:
                    e4:93:de:a2:4b:85:69:12:e6:c2:f1:6d:f2:5f:a6:
                    df:fc:f2:5e:b5:01:5c:24:08:78:d8:b8:5b:47:5a:
                    f4:60:e8:3f:90:24:41:7d:a9:53:56:29:e9:10:1e:
                    10:85:89:13:27:3d:bb:c3:3d:f1:4a:8e:b8:14:e7:
                    af:3a:2d:6c:e2:26:ce:d5:e4:e0:6d:c7:69:f7:5d:
                    44:fe:ba:61:5b:3e:23:e1:dc:f4:f7:28:a4:a8:23:
                    94:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:46:9F:63:A9:EA:3A:6F:04:FB:BB:8D:25:5C:21:11:BE:C6:C1:E7
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lkafY6nqOm8E-7uNJVwhEb7Gwec.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:4d00:ff02::/48

    Signature Algorithm: sha256WithRSAEncryption
         79:98:04:54:b5:3e:80:cd:c1:79:42:07:a1:19:54:f3:cf:23:
         b1:81:dc:5b:4a:6c:00:84:a6:51:3f:65:9a:d3:89:87:2e:13:
         f2:fb:b2:77:31:c2:a1:68:23:ae:a9:6c:67:6f:a7:85:6d:0e:
         61:37:84:74:2b:bd:78:1b:94:1f:8c:26:60:86:62:ca:7f:84:
         6c:ec:17:ff:0c:21:ca:b8:2b:a6:4a:5d:60:cd:63:be:dc:2e:
         58:75:62:29:ea:d9:35:77:24:4b:c6:48:e5:57:9e:3d:ef:9f:
         fc:4d:00:8a:bd:ef:1e:ad:fd:6b:b5:c9:53:27:d3:1c:a2:36:
         75:b7:15:9f:fa:80:1d:2c:b0:56:69:b6:b4:5b:46:12:3f:82:
         c5:9b:6b:18:c0:94:ee:91:9f:82:f8:45:99:9e:b2:fa:d0:1a:
         3d:70:82:2b:77:3f:b5:da:d4:7b:31:73:c5:82:93:9f:4f:fb:
         72:78:67:93:39:4d:79:d6:db:fb:c5:93:0b:11:c1:17:ca:08:
         62:31:8c:ef:d7:a9:b5:0a:83:6a:97:72:58:46:2d:78:35:8f:
         cf:d5:46:97:30:4a:e9:48:e8:1f:cd:11:17:79:24:d1:44:69:
         e6:29:d1:55:88:ed:4c:19:dc:2d:2f:90:48:3c:f4:2e:7e:74:
         b7:67:fb:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----