Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pJBvI7wUpdlXkYrU9Oh_7tScZ-s.roa
File:                     pJBvI7wUpdlXkYrU9Oh_7tScZ-s.roa (raw, json)
Hash identifier:          pUpcnecCL5iY97qCujStK34KFdoS081jQblOsZ+ApeE=
Subject key identifier:   A4:90:6F:23:BC:14:A5:D9:57:91:8A:D4:F4:E8:7F:EE:D4:9C:67:EB
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       21F5
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pJBvI7wUpdlXkYrU9Oh_7tScZ-s.roa
Signing time:             Fri 25 Nov 2022 04:40:36 +0000
ROA not before:           Fri 25 Nov 2022 04:40:36 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        123.194.176.0/21 maxlen: 21

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8693 (0x21f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:40:36 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=A4906F23BC14A5D957918AD4F4E87FEED49C67EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ff:d8:42:e8:73:8c:d6:7c:ae:e4:e6:20:9c:
                    74:ce:df:9f:3e:05:4a:ef:2d:c0:77:15:f1:ea:7d:
                    93:d5:b0:aa:2e:8f:21:e5:c6:03:82:0e:17:c8:b3:
                    89:50:e5:ac:0f:66:4e:79:ba:7a:8b:9e:c3:d2:73:
                    c6:ba:1b:e7:66:f2:11:cc:41:de:dc:01:df:7c:ad:
                    b6:ec:22:8b:10:f3:b4:07:83:bb:fd:70:f9:2d:87:
                    5e:d0:c8:54:df:98:8e:61:17:1d:9d:fd:df:1f:cf:
                    2b:91:c9:1e:42:d6:06:c6:3b:6a:f9:31:33:5c:04:
                    38:7e:38:a5:21:dd:47:d1:70:6e:1f:47:49:8d:f3:
                    39:c4:62:68:74:b1:18:b4:80:d5:c0:aa:62:1b:d2:
                    3c:29:0d:28:f8:c5:87:d7:14:14:a9:e2:1a:a0:bf:
                    73:dd:5e:a5:99:65:43:73:44:3a:fe:93:05:af:f0:
                    82:7e:e6:c2:29:e4:db:77:dc:be:12:0d:33:88:bc:
                    70:95:68:d0:30:a9:24:18:42:2d:97:78:e0:bf:54:
                    61:81:b5:e8:9d:8c:9e:e0:77:b1:e9:89:4f:8a:ea:
                    f0:05:85:52:c9:b4:cf:7d:3e:57:e7:c9:7b:1e:6c:
                    e1:74:ba:17:39:a0:7e:82:31:20:b9:f4:62:d7:c4:
                    25:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:90:6F:23:BC:14:A5:D9:57:91:8A:D4:F4:E8:7F:EE:D4:9C:67:EB
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pJBvI7wUpdlXkYrU9Oh_7tScZ-s.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b1:38:d1:4c:22:7b:a1:65:66:04:48:7f:ab:34:3e:d8:5b:f4:
         38:5b:91:63:4f:93:02:43:6d:f7:87:93:ba:77:65:cc:f5:0c:
         e4:83:fa:51:fb:38:d6:6a:6a:ba:11:15:04:5e:37:eb:bf:3b:
         ba:d0:bd:37:af:d0:37:0b:cc:53:bb:7e:b4:1b:c8:dd:00:25:
         e1:84:d5:88:2a:da:47:7c:68:93:0e:b3:12:0c:d4:03:17:ec:
         f1:03:39:ba:bf:8a:19:c4:5e:b9:c4:b4:40:10:6e:50:ac:76:
         05:06:4c:75:37:11:36:d7:04:3f:3c:e5:b5:df:bc:de:8e:3b:
         e1:c2:0b:fa:b3:f0:bb:52:0b:2d:b7:dc:5e:f8:83:41:41:df:
         ae:eb:4e:dc:f6:93:b5:0b:a1:36:c4:be:6d:52:fe:4a:bb:7e:
         1c:4c:f4:c6:60:36:4c:75:69:9f:95:42:24:ea:c4:86:2c:8f:
         b2:d4:8b:25:8b:aa:be:9e:36:7e:fd:ee:35:f8:82:8b:0d:4d:
         75:cb:2d:23:2b:df:ba:bd:c6:c2:ee:2e:92:2b:08:a9:0e:2c:
         bf:59:ec:ad:06:f3:2e:bd:c4:f5:fe:96:25:84:78:bb:33:5e:
         eb:01:12:c1:db:0e:49:47:80:33:bc:2f:bc:ef:8d:5c:7f:f4:
         79:01:81:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----