Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sukciwZBeS2D2qX63PLrHxUM8V8.roa
File:                     sukciwZBeS2D2qX63PLrHxUM8V8.roa (raw, json)
Hash identifier:          nsyrUFN/VKlyJQbdYrNR664Ze1YEXe45kiV/oG5QteQ=
Subject key identifier:   B2:E9:1C:8B:06:41:79:2D:83:DA:A5:FA:DC:F2:EB:1F:15:0C:F1:5F
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       2218
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sukciwZBeS2D2qX63PLrHxUM8V8.roa
Signing time:             Fri 25 Nov 2022 04:40:46 +0000
ROA not before:           Fri 25 Nov 2022 04:40:46 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        2407:4d00:ff06::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8728 (0x2218)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:40:46 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=B2E91C8B0641792D83DAA5FADCF2EB1F150CF15F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:39:77:91:21:c5:d0:e6:31:e8:af:fd:c3:a2:
                    54:90:2e:89:2b:6f:60:7d:0f:f6:67:32:9b:51:f3:
                    7e:33:8b:da:cf:c4:37:24:01:02:02:30:03:4a:53:
                    05:38:f7:81:5f:53:3f:34:48:6b:3a:89:33:67:ef:
                    76:af:d1:62:93:b7:af:92:a2:f9:21:7f:92:5a:a0:
                    6e:66:a6:b2:86:99:a6:e1:31:31:22:f0:b6:19:2f:
                    0c:b8:78:7a:48:94:c0:40:9e:a2:db:da:ca:35:06:
                    7f:e5:8f:a0:5a:38:2d:3a:06:41:91:ec:29:1f:69:
                    9c:da:fd:6c:b1:bf:59:82:36:7b:32:0d:4c:d1:0f:
                    08:7f:fe:6f:b1:36:cf:3f:dc:1a:f7:ad:f7:50:f6:
                    fe:94:81:c2:9f:1d:7c:f2:e3:d7:d4:ad:45:fc:ce:
                    ad:73:38:c1:d1:a0:3b:36:8a:c5:fe:7c:60:d9:84:
                    80:00:b5:62:0a:18:6c:f4:e3:f8:cc:0b:fe:31:22:
                    1b:86:d6:98:91:ce:4b:c4:f3:3a:2a:92:51:a3:66:
                    14:88:53:1d:4b:9a:ce:f4:e4:6a:d3:c9:e4:b1:df:
                    a4:cb:72:12:e2:e9:a1:20:a1:c0:94:68:4b:91:d6:
                    53:c2:88:33:70:ac:62:71:7b:ea:2c:2f:04:49:d5:
                    74:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:E9:1C:8B:06:41:79:2D:83:DA:A5:FA:DC:F2:EB:1F:15:0C:F1:5F
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sukciwZBeS2D2qX63PLrHxUM8V8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:4d00:ff06::/48

    Signature Algorithm: sha256WithRSAEncryption
         b9:89:ef:f1:7d:78:50:a9:2c:da:8d:cd:32:41:12:c9:4b:b5:
         40:80:e5:ed:91:15:05:f9:9d:e1:86:53:f2:97:4a:50:12:5d:
         0d:a6:69:42:0b:50:35:f3:e2:bf:5b:f6:bb:67:fc:2c:bb:bf:
         89:ea:51:d8:58:43:49:56:06:ba:af:21:46:9d:09:55:96:81:
         38:a5:df:96:f7:cf:42:b0:e6:c1:a2:54:4f:5b:3a:c3:a1:56:
         1f:64:37:ed:74:de:00:5f:da:5a:80:6b:35:b9:65:2e:ae:47:
         e7:65:14:09:76:8d:63:fe:77:fa:5a:6c:85:03:25:0c:ed:29:
         17:82:92:34:4b:d6:64:9c:ac:61:0a:85:ef:fe:14:ba:e4:a8:
         46:94:ed:30:8b:79:8f:2d:41:90:80:08:2c:8c:13:4a:6f:87:
         57:27:6a:79:cb:08:2c:9e:f5:3b:20:c7:b1:68:d6:69:8f:94:
         40:8f:b3:d4:02:d4:86:9f:61:06:8a:fe:8d:56:05:18:12:44:
         ae:eb:f5:80:5e:5d:eb:5f:00:72:c1:3a:fe:35:1f:47:94:24:
         10:32:a9:df:69:32:a5:0a:d5:fe:fc:70:28:4a:74:32:b0:fa:
         fc:52:25:24:ff:20:66:92:94:5d:ff:e2:86:e6:81:2e:96:f9:
         b9:7b:a3:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----