Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/x0xYArOade7en3qZnHtqq2g2Zu0.roa
File:                     x0xYArOade7en3qZnHtqq2g2Zu0.roa (raw, json)
Hash identifier:          0Z7LJClFsu8c1mNWlaT14h5xmhso3bXaSWOfWFP+gXg=
Subject key identifier:   C7:4C:58:02:B3:9A:75:EE:DE:9F:7A:99:9C:7B:6A:AB:68:36:66:ED
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/x0xYArOade7en3qZnHtqq2g2Zu0.roa
Signing time:             Thu 15 Sep 2022 02:53:15 +0000
ROA not before:           Thu 15 Sep 2022 02:53:15 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        118.233.24.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8098 (0x1fa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:53:15 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=C74C5802B39A75EEDE9F7A999C7B6AAB683666ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:eb:7e:68:4f:09:98:db:31:5f:b1:73:9c:75:
                    2b:00:6c:83:09:d8:aa:8b:68:62:24:6e:31:2f:32:
                    93:4e:99:ac:68:fc:a5:a3:9c:be:07:c3:4f:0e:8a:
                    5f:51:d3:e5:60:64:c4:53:cb:f4:bb:4d:3f:7a:73:
                    2a:b1:f6:bc:b6:6b:98:1c:7e:66:bf:bb:f0:6a:01:
                    18:b7:70:71:1e:e6:a1:26:d3:f5:de:78:b0:76:0b:
                    7f:f6:86:f8:49:cf:30:72:e9:08:df:eb:aa:10:bd:
                    df:4b:9f:14:b2:9f:4c:73:c7:28:06:7e:03:44:61:
                    f1:5e:a5:e3:bc:b1:2e:4b:cc:6c:05:c2:42:44:4a:
                    3e:79:67:72:69:a5:e4:1d:f7:a2:da:5c:c3:20:89:
                    89:48:c3:7b:6b:29:a1:2a:fa:08:39:28:81:bf:93:
                    f7:b2:64:d5:9b:04:9a:a2:6c:79:55:a3:9d:a7:d4:
                    44:0c:86:ed:39:46:c8:c2:da:94:6e:ec:90:ca:9a:
                    94:64:8a:fe:1c:e5:16:40:a6:9f:f0:b3:39:28:0e:
                    32:70:0c:95:69:61:e4:75:68:b5:bc:1e:32:64:65:
                    33:1c:d8:6d:e4:35:43:3f:d1:13:65:ea:38:3a:30:
                    78:07:4d:0f:bf:c6:d9:dc:45:c7:78:b0:3d:de:b4:
                    9a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:4C:58:02:B3:9A:75:EE:DE:9F:7A:99:9C:7B:6A:AB:68:36:66:ED
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/x0xYArOade7en3qZnHtqq2g2Zu0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.233.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:4d:50:c3:7e:19:ad:5d:60:32:5b:2f:1d:d4:39:87:a4:e8:
         27:d4:79:92:ea:19:89:5b:96:9c:00:e0:0e:9e:93:53:e0:c0:
         fb:b4:bf:c6:91:db:a3:df:14:32:f9:10:6e:8e:2e:00:5d:df:
         d2:7b:05:ae:d0:59:89:38:88:c1:db:34:35:25:90:48:2c:8a:
         1e:2b:db:d4:3d:a4:ec:48:b2:27:15:06:f5:e7:ab:2c:af:7b:
         97:5e:e8:24:7c:a4:fa:d5:e7:f9:ac:c3:42:ae:4e:aa:34:61:
         33:86:22:24:7e:72:98:b8:fc:c7:37:2d:8e:80:3a:88:9b:b5:
         50:87:ec:f2:39:fc:90:0b:92:24:de:59:bd:18:59:6e:2a:ac:
         67:f9:70:42:6d:3e:dc:1e:02:4f:09:47:e4:ca:9d:a2:8d:d8:
         01:58:fc:b1:18:0a:a2:16:1d:b8:4b:7a:63:0f:b6:8d:f9:8f:
         95:d8:92:1c:71:7f:f1:b7:56:85:de:01:31:a6:d1:c5:82:35:
         96:08:4c:f2:e4:94:b9:23:f2:6b:e6:b3:7e:ef:f1:19:d7:79:
         6b:97:8a:e1:80:c0:b4:3f:14:a7:62:47:68:5d:3f:7a:1e:1a:
         4d:71:b1:3b:e4:2e:df:36:b9:8e:aa:dc:8d:3d:98:e8:2e:c5:
         f9:e5:e2:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----