Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pTKfhPZcUVfxQXznD9VMWi6Mjgw.roa
File:                     pTKfhPZcUVfxQXznD9VMWi6Mjgw.roa (raw, json)
Hash identifier:          TucWdN1UBP1TkOY/KqHgkg0uIjzhdZtILe/Dd9/eIgQ=
Subject key identifier:   A5:32:9F:84:F6:5C:51:57:F1:41:7C:E7:0F:D5:4C:5A:2E:8C:8E:0C
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       2222
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pTKfhPZcUVfxQXznD9VMWi6Mjgw.roa
Signing time:             Fri 25 Nov 2022 04:40:49 +0000
ROA not before:           Fri 25 Nov 2022 04:40:49 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        180.177.4.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8738 (0x2222)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:40:49 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=A5329F84F65C5157F1417CE70FD54C5A2E8C8E0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c3:c2:fb:e9:66:ff:92:7f:9c:41:00:ea:db:
                    4d:3f:59:5d:11:db:6d:83:51:bd:d7:d2:bf:60:90:
                    94:04:2c:ef:9a:56:1e:f0:50:09:9a:a4:bb:e3:ec:
                    1d:aa:5a:0a:ff:3b:8a:6d:0a:bc:b7:c5:ed:51:73:
                    c4:ce:1d:64:fb:ca:95:5b:a5:d6:8e:cc:6d:93:0c:
                    f5:ba:87:a0:47:ee:17:cf:b8:d2:fb:f2:3c:c3:84:
                    c6:46:ff:95:c1:50:87:5b:49:2e:d0:f4:f7:50:59:
                    8e:a4:18:0a:6d:f3:9d:be:9b:26:76:80:ea:e9:73:
                    2f:e2:cb:b5:b2:0e:3e:6b:46:f0:bf:73:d9:f5:72:
                    46:3b:8c:18:35:58:ea:7a:1f:47:1b:f6:72:d1:6a:
                    1c:3a:dc:6d:a4:08:77:75:22:10:eb:93:7c:0d:0a:
                    cf:d0:5e:61:d5:53:f1:72:67:7a:e2:fd:c9:5a:a7:
                    bf:00:89:9f:5a:41:fb:17:f8:70:a6:02:54:c3:2a:
                    ea:39:74:da:d4:a7:71:db:26:4c:e8:bc:44:f7:51:
                    6a:c8:f0:62:46:8a:b6:ae:3c:91:b9:94:cc:16:62:
                    1f:d1:8b:06:98:bc:0d:cc:c1:30:25:82:02:b9:94:
                    0e:2f:38:1f:a4:1e:a8:04:84:eb:63:a0:e4:82:a4:
                    3b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:32:9F:84:F6:5C:51:57:F1:41:7C:E7:0F:D5:4C:5A:2E:8C:8E:0C
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pTKfhPZcUVfxQXznD9VMWi6Mjgw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         17:15:91:9a:41:f6:0d:11:0c:30:31:c3:1c:16:eb:c1:00:0d:
         db:b6:f3:ef:fa:16:ca:26:c8:52:e6:da:24:a6:ea:ed:29:be:
         54:75:1f:94:22:26:e7:35:3c:3f:05:0b:d6:22:f2:63:df:b5:
         7e:36:34:e7:3a:cd:1b:b5:81:eb:15:b7:aa:b6:4a:d0:75:2b:
         14:c6:14:a6:c2:10:96:3f:99:a3:a9:f9:12:8c:58:e1:01:a5:
         1f:7d:6e:77:ae:3e:6e:73:dd:15:31:c3:d1:67:89:5b:81:5a:
         0a:7d:22:73:73:25:ef:46:65:61:a8:75:06:40:d7:5b:9d:f0:
         f0:f5:f3:10:82:13:6d:30:b2:45:a2:a1:aa:9d:16:94:58:9b:
         8d:a7:60:b1:22:55:f8:a7:b5:b5:9c:8c:58:c8:c4:34:4f:c0:
         0e:e8:93:89:fb:a1:c4:e4:d1:b9:2f:54:e1:9d:35:e9:18:56:
         5e:25:63:47:e4:c0:42:28:05:2a:f0:6a:b7:d9:18:78:fe:67:
         ce:ad:5f:46:b4:fc:1f:d8:4c:c4:58:95:b9:de:5b:e8:01:6d:
         cb:83:44:43:19:7d:48:6d:b8:04:60:06:25:d8:eb:af:e7:da:
         4e:40:48:05:b5:9c:19:17:27:64:72:79:e7:df:b9:b4:34:f6:
         d6:3c:71:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----