Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sabiDxuGxfgYlXqh2Zl0xehc4eM.roa
File:                     sabiDxuGxfgYlXqh2Zl0xehc4eM.roa (raw, json)
Hash identifier:          ixj4Mq+zY3IF4mK0yuz4waeZsoJoL8Kh25eY2MbF2Kg=
Subject key identifier:   B1:A6:E2:0F:1B:86:C5:F8:18:95:7A:A1:D9:99:74:C5:E8:5C:E1:E3
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       21BD
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sabiDxuGxfgYlXqh2Zl0xehc4eM.roa
Signing time:             Fri 25 Nov 2022 04:40:21 +0000
ROA not before:           Fri 25 Nov 2022 04:40:21 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        180.176.152.0/21 maxlen: 21

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8637 (0x21bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:40:21 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=B1A6E20F1B86C5F818957AA1D99974C5E85CE1E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7f:e1:38:cc:19:2a:e1:35:cf:55:d1:5d:09:
                    7f:ac:57:cf:09:23:d8:1d:0c:ac:68:e6:5e:58:eb:
                    07:34:c0:ca:04:6e:43:09:bc:33:cf:34:ed:6b:f8:
                    de:5d:e9:03:3c:84:da:9c:21:a0:19:fc:71:0f:32:
                    42:3d:ca:7a:45:52:5a:55:54:9c:a2:35:ad:5f:c7:
                    0d:41:1e:52:5c:12:3a:1e:19:0e:fe:90:a6:c4:b0:
                    0a:7b:8e:97:df:fe:3b:31:d7:8d:4c:55:fc:cd:28:
                    24:93:2a:75:17:dd:2c:4a:cf:29:15:98:b4:08:b2:
                    7b:09:ca:a7:94:20:7d:11:f8:f9:b6:17:96:fa:96:
                    62:17:52:7a:b8:2f:05:b9:71:3e:20:bb:74:3c:17:
                    de:d6:73:e1:1d:c8:68:85:14:fd:1b:be:b6:29:28:
                    ba:11:18:71:43:bd:28:99:77:55:b1:f0:9b:25:2c:
                    8a:8e:aa:fe:06:36:be:0c:83:ce:de:63:ed:91:f9:
                    5a:b7:0f:64:38:2a:cd:d1:8e:7a:cc:31:c2:b6:0c:
                    35:7f:fb:e0:64:ad:15:d0:74:3f:aa:d5:a5:41:5d:
                    f6:49:c0:66:ec:88:f4:f6:3b:5f:c2:77:6d:e9:04:
                    04:dd:44:3c:b4:9a:c1:62:24:1d:27:37:06:f7:67:
                    b5:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:A6:E2:0F:1B:86:C5:F8:18:95:7A:A1:D9:99:74:C5:E8:5C:E1:E3
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sabiDxuGxfgYlXqh2Zl0xehc4eM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         35:ae:95:fd:3c:46:8d:e7:58:92:49:31:0d:10:cd:cb:db:15:
         88:e5:de:56:9e:e6:83:2d:f7:61:99:e4:fa:79:29:dc:04:a5:
         b7:f3:a6:20:f6:dd:de:85:93:34:1f:55:71:e5:f1:50:1c:59:
         1f:9b:9b:92:c5:7a:aa:6c:cc:93:17:41:d3:9d:47:5d:b0:d1:
         37:3d:05:18:47:4b:9f:e6:dc:3e:59:ca:00:68:95:b9:53:0b:
         9f:0e:32:ba:26:b3:84:99:41:08:7a:dd:8f:f5:6a:36:51:4d:
         d6:50:b5:f5:6c:b2:e7:c6:b2:67:18:74:bf:40:32:bf:d1:85:
         ed:4b:f1:03:a9:fe:18:c9:1f:98:f6:36:c4:32:f8:a8:97:5c:
         40:24:cf:fb:01:01:c0:06:f5:ab:de:d6:27:35:8b:05:11:15:
         e9:d9:9c:dd:d2:ea:34:a5:31:18:fe:71:00:be:29:0d:aa:ab:
         6c:e9:7c:3f:7f:b8:3b:6a:2a:78:43:ff:d7:48:ba:63:a8:b9:
         92:6c:10:58:27:61:40:c8:94:96:cd:69:b6:74:da:ec:40:65:
         6c:13:6d:70:f6:b3:d2:db:ad:32:73:ab:d5:77:ef:98:07:e2:
         c7:2e:75:80:bb:10:9f:04:f2:0b:c1:33:80:d2:69:4e:06:2c:
         be:4d:1f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----