Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/n0rfSpBEgC0xjGM7vOPCq6hIfIQ.roa
File:                     n0rfSpBEgC0xjGM7vOPCq6hIfIQ.roa (raw, json)
Hash identifier:          0g40gRVJXLkJWrYlGi9XeqnreiE+63Gj829iwUTwdXk=
Subject key identifier:   9F:4A:DF:4A:90:44:80:2D:31:8C:63:3B:BC:E3:C2:AB:A8:48:7C:84
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       21B2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/n0rfSpBEgC0xjGM7vOPCq6hIfIQ.roa
Signing time:             Fri 25 Nov 2022 04:40:12 +0000
ROA not before:           Fri 25 Nov 2022 04:40:12 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     9924
IP address blocks:        118.232.160.0/19 maxlen: 19

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8626 (0x21b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:40:12 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=9F4ADF4A9044802D318C633BBCE3C2ABA8487C84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:55:2e:91:4c:53:22:f0:70:b3:59:c3:9f:47:
                    84:09:da:be:4c:b9:1a:7f:40:d3:c1:33:97:36:2d:
                    e2:a2:aa:95:e3:78:96:32:9c:43:e4:22:cd:d1:1c:
                    1a:b0:b8:43:5f:d9:51:9c:9c:20:45:bf:31:dc:fa:
                    6c:5c:f6:3f:09:f7:77:fe:e3:44:84:1b:60:e3:b2:
                    6b:93:b1:aa:97:fc:1a:8b:c4:be:a4:2f:40:a4:c1:
                    82:0f:6b:ab:04:fb:7d:25:b5:42:bf:6f:cd:e1:3f:
                    df:f1:2a:6d:75:36:65:af:a6:66:1c:53:12:36:eb:
                    90:18:b5:fb:81:85:39:62:f6:ba:6c:f3:cc:78:02:
                    e9:32:4f:c9:35:e6:f3:48:de:3f:67:97:4e:3f:fe:
                    87:03:50:b5:8a:76:42:68:d1:20:60:e8:6d:ae:4f:
                    08:d3:36:95:25:21:6d:ff:61:33:c1:f3:64:d5:c8:
                    91:09:d1:21:96:c9:f1:7f:89:c7:c5:fe:dd:a4:4a:
                    7f:87:fa:c0:34:70:b3:e0:04:9d:3d:6d:fa:8c:29:
                    ab:e1:69:53:8a:6e:f0:ac:e1:fe:73:49:32:c3:2e:
                    eb:ed:b1:f9:7f:55:3e:71:90:75:1a:06:2f:58:68:
                    3e:77:e2:6f:4d:ee:2d:6e:83:60:89:b4:f2:76:a1:
                    d1:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:4A:DF:4A:90:44:80:2D:31:8C:63:3B:BC:E3:C2:AB:A8:48:7C:84
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/n0rfSpBEgC0xjGM7vOPCq6hIfIQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         84:6f:1b:17:03:55:12:ea:e4:29:83:21:06:9a:4f:83:c8:04:
         8c:46:cf:02:e0:5e:ce:53:56:48:75:21:07:a4:88:88:d4:82:
         ea:f7:9f:8e:6d:ab:23:d1:52:94:7d:5e:eb:1d:cc:0c:b1:a5:
         f7:d4:c5:b2:a4:2c:77:d3:55:5a:1c:5e:d1:6a:b2:ee:eb:32:
         af:e8:80:1a:44:71:8b:b0:91:fd:cd:4b:a9:eb:b0:aa:5e:58:
         37:83:98:f7:79:ca:19:48:70:b5:34:96:9b:f1:fc:9e:ab:9c:
         f9:0f:e5:a8:97:cd:a4:fb:c3:3f:fb:33:5b:7a:86:66:43:ca:
         87:cd:05:f7:43:81:40:5f:61:93:f9:78:19:07:46:0f:63:ee:
         b3:48:e0:78:bc:02:b9:3d:a2:33:05:9a:de:57:8f:82:bf:35:
         5d:ea:2a:2e:66:9d:2c:04:47:9c:43:b8:07:6b:99:8e:47:24:
         a6:a2:f7:d6:bd:fc:5c:bb:67:16:31:47:98:3c:98:ee:e3:ed:
         78:de:43:78:6d:04:e0:d2:5d:78:89:27:3d:14:c2:a4:89:35:
         9b:e9:99:3f:6b:d8:17:db:b5:c2:a0:fe:e4:bf:7a:29:c8:60:
         bb:b2:cd:9f:20:1e:b8:d1:fb:fd:95:1a:0d:54:f6:65:40:ab:
         b4:94:4a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----