Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wsLtXdEUvIAYkg7pdq9X2lnT6LE.roa
File:                     wsLtXdEUvIAYkg7pdq9X2lnT6LE.roa (raw, json)
Hash identifier:          hOjJAd8UxAAoPhbOR2qk8mYeceIvtD38xBf1j5Gv1gU=
Subject key identifier:   C2:C2:ED:5D:D1:14:BC:80:18:92:0E:E9:76:AF:57:DA:59:D3:E8:B1
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wsLtXdEUvIAYkg7pdq9X2lnT6LE.roa
Signing time:             Thu 15 Sep 2022 02:46:25 +0000
ROA not before:           Thu 15 Sep 2022 02:46:25 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        2407:4d00:ff03::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8096 (0x1fa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:46:25 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=C2C2ED5DD114BC8018920EE976AF57DA59D3E8B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:37:b7:c6:7a:ee:7b:23:ab:a1:79:49:fb:01:
                    88:1a:b0:22:67:21:08:e8:de:6e:e7:fe:e6:b9:22:
                    61:62:b9:1c:a3:c2:f9:f9:cc:9f:ab:8d:3a:0e:fb:
                    78:e4:c7:0b:5d:ad:c1:81:5b:2c:dd:73:f2:f2:9f:
                    9f:47:10:37:bb:71:83:5c:3f:5c:50:c1:d6:68:35:
                    1e:34:19:c5:19:f2:f1:70:38:c4:ef:60:ab:c5:da:
                    8c:60:1b:c7:65:3f:cc:81:d7:ef:f4:aa:de:e1:ee:
                    78:77:8b:d5:fc:81:9b:17:50:48:67:62:1c:1c:47:
                    50:f8:0a:4f:83:d4:63:fe:95:12:86:1c:7c:dc:0d:
                    5c:ed:4e:4c:0d:90:76:81:f2:6c:40:2b:c5:a0:97:
                    37:bb:7c:50:70:c2:74:dd:68:46:21:76:c5:75:99:
                    a8:b2:e7:e7:6a:1b:a8:96:a2:fe:0e:21:ea:37:01:
                    01:75:e9:59:f8:27:39:75:5c:39:e1:1f:33:07:c3:
                    4f:a2:77:a6:4f:24:87:ee:98:34:28:d4:89:5d:79:
                    4f:ee:a7:09:86:b7:7a:59:62:5c:47:a2:2a:0a:f0:
                    40:68:07:61:88:72:e2:34:6f:2f:61:ba:6c:89:12:
                    b6:f6:18:6e:e7:44:48:a5:56:95:6c:54:cc:a0:dc:
                    fd:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:C2:ED:5D:D1:14:BC:80:18:92:0E:E9:76:AF:57:DA:59:D3:E8:B1
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wsLtXdEUvIAYkg7pdq9X2lnT6LE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:4d00:ff03::/48

    Signature Algorithm: sha256WithRSAEncryption
         46:2e:6d:22:d0:f4:19:16:bd:e6:0a:11:32:af:81:2d:72:fe:
         18:bb:06:4a:34:03:17:59:26:00:97:94:d2:45:a5:b2:6e:33:
         97:90:c7:4f:f4:65:19:13:ec:ed:16:06:cb:b4:cc:5f:f2:1f:
         1b:40:83:a5:b1:3f:7c:c3:55:75:0b:52:fc:0d:92:1f:d2:6d:
         65:a4:ff:b5:7d:57:a7:bd:ef:5f:b0:16:43:d2:8f:9a:dc:37:
         70:5d:69:a5:72:27:07:ec:04:38:b6:68:6b:86:59:3d:26:4f:
         5c:5b:66:a7:ab:15:30:13:68:cf:b4:83:1a:50:90:69:d6:3a:
         bf:26:53:90:d4:c6:ef:21:89:4c:20:54:77:37:15:8f:ec:12:
         9c:fa:d2:06:60:30:72:27:5f:d6:0a:07:ef:a6:f5:ac:1f:a7:
         03:94:f8:29:b6:11:4d:06:a8:e7:6f:58:28:7a:d3:ac:b7:36:
         f7:f3:b6:8f:b4:35:85:91:62:b5:54:4d:b6:b3:33:f9:e5:00:
         a6:b9:31:df:8d:b7:76:0d:20:23:18:ae:59:0d:eb:a6:52:0c:
         02:75:a3:45:24:e3:df:04:c0:dd:01:17:9d:24:37:69:cf:ad:
         20:5b:4d:ca:c4:3e:ac:1a:56:c9:e6:d1:7f:c3:56:c7:93:d4:
         d1:9c:8e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----