Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/u5BRYiDZyRfsE7jHAR6uDBh5bAQ.roa
File:                     u5BRYiDZyRfsE7jHAR6uDBh5bAQ.roa (raw, json)
Hash identifier:          mcCJg2t8rEkmDqV3q0rQ8cD7HByOU9qQl/PWG6NaIiU=
Subject key identifier:   BB:90:51:62:20:D9:C9:17:EC:13:B8:C7:01:1E:AE:0C:18:79:6C:04
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/u5BRYiDZyRfsE7jHAR6uDBh5bAQ.roa
Signing time:             Thu 15 Sep 2022 02:53:33 +0000
ROA not before:           Thu 15 Sep 2022 02:53:33 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        123.194.205.16/28 maxlen: 28

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8098 (0x1fa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:53:33 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=BB90516220D9C917EC13B8C7011EAE0C18796C04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f3:09:64:27:96:ff:70:82:f3:52:61:d7:1f:
                    30:41:ed:88:69:2f:aa:a0:84:63:33:86:73:53:7b:
                    6d:28:b5:6d:b9:4a:15:0b:60:73:27:02:9c:1b:aa:
                    96:bc:9e:90:d2:18:44:13:dc:4a:1c:5e:57:f2:4c:
                    7e:3a:e9:f6:24:d0:6e:c8:44:38:28:f8:69:03:4d:
                    bb:1b:36:b2:1b:e3:62:69:97:04:da:a3:b7:71:07:
                    b5:c1:e1:8b:01:78:26:f8:4e:04:d5:a6:21:70:22:
                    79:f7:43:61:c0:b1:92:9e:7d:d5:da:d9:55:51:02:
                    52:db:36:e6:05:c2:ec:77:91:79:96:4d:8d:24:52:
                    87:ee:00:15:ed:cb:74:41:e4:7b:79:f4:89:70:15:
                    0f:64:53:24:d2:1a:0d:75:32:bb:cf:20:f0:53:db:
                    ef:9e:47:af:be:28:04:3b:51:a8:42:a3:7e:a5:58:
                    46:ce:35:30:16:2f:58:fe:af:dc:95:26:3b:f2:79:
                    cb:87:a4:d4:ba:af:98:c6:8c:79:b3:5f:92:cd:58:
                    ac:ac:e4:45:44:88:a0:38:61:90:ef:fb:6b:f9:a7:
                    30:7d:4d:a9:42:12:e5:1d:08:12:ae:11:5f:cc:d4:
                    e7:a8:ff:98:60:e0:96:e5:05:6f:4e:f3:c3:40:19:
                    83:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:90:51:62:20:D9:C9:17:EC:13:B8:C7:01:1E:AE:0C:18:79:6C:04
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/u5BRYiDZyRfsE7jHAR6uDBh5bAQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.205.16/28

    Signature Algorithm: sha256WithRSAEncryption
         0d:55:0e:36:e4:b2:80:fb:84:8d:75:8b:48:cb:15:8a:f8:a2:
         4f:57:8f:fb:9f:88:80:31:8b:cd:5f:ec:45:65:fb:ec:75:5e:
         2a:5e:2f:db:dd:d3:a0:56:1e:e8:9b:ba:e5:b9:54:59:76:10:
         5f:55:91:cb:98:03:53:d9:a2:97:f4:94:a3:bc:0b:69:ff:30:
         ec:ef:74:c3:be:4f:59:a8:5f:6d:76:80:0d:bc:e9:db:f8:dd:
         2b:bd:0b:d2:fc:ef:c5:1b:ca:6d:7f:39:d9:a6:48:78:53:4f:
         67:d1:7f:51:ca:19:c2:00:44:7e:12:46:59:9f:22:70:8f:a7:
         9e:5e:b1:47:d7:23:72:ae:d6:d4:fe:2c:fc:14:b3:74:4e:eb:
         dc:eb:f1:84:db:e1:4b:5b:fc:28:ab:0d:a7:eb:4d:ef:a2:e3:
         cd:76:5d:37:94:6e:32:5d:f2:d0:f1:1f:f8:f3:ec:9e:2c:ee:
         5c:93:e6:17:36:65:2a:96:33:15:bc:e9:57:a0:bc:05:6b:0a:
         54:81:b5:2b:ac:18:a3:f3:c6:f1:b4:bb:c5:b1:7b:19:f0:4a:
         25:6c:13:bd:83:69:de:5d:36:d1:d2:7f:19:44:cc:1d:f4:01:
         a2:cc:75:30:04:84:23:65:e3:ea:30:3c:a2:2f:78:fa:b0:97:
         75:0f:9c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----