Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/x2GT8RBDFHJUDeBFyr90B-e-MkI.roa
File:                     x2GT8RBDFHJUDeBFyr90B-e-MkI.roa (raw, json)
Hash identifier:          Pf5no1ONeSaJsmNjB6lFW6a/kHOBRdEzcaB1Ig+2b1s=
Subject key identifier:   C7:61:93:F1:10:43:14:72:54:0D:E0:45:CA:BF:74:07:E7:BE:32:42
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/x2GT8RBDFHJUDeBFyr90B-e-MkI.roa
Signing time:             Thu 15 Sep 2022 02:53:02 +0000
ROA not before:           Thu 15 Sep 2022 02:53:02 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        106.1.88.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8098 (0x1fa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:53:02 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=C76193F110431472540DE045CABF7407E7BE3242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:47:3a:b7:53:65:a8:9c:ca:f6:b9:07:6a:41:
                    5d:e8:a9:82:92:24:a4:e9:80:8e:5f:e2:f7:d0:1b:
                    44:b3:9f:c0:30:5c:38:45:d5:98:2e:84:74:e5:a0:
                    13:1d:9d:ef:91:49:21:75:f1:ef:7b:5c:9c:9c:1d:
                    48:f4:2f:e9:f8:54:a4:31:c9:06:71:a5:b1:11:2b:
                    1c:88:89:03:06:a2:6e:06:d3:09:3b:b8:78:02:48:
                    23:ea:c9:91:21:ef:66:07:c9:70:65:84:e7:b6:7c:
                    31:fd:66:0d:36:2d:55:5c:46:e2:fd:cd:dc:f8:b0:
                    e3:c3:4f:b7:5e:9f:a8:03:9f:62:a9:bd:e3:ca:35:
                    ec:45:2e:f1:d8:46:f3:f5:0c:e2:83:08:27:27:32:
                    57:e2:f6:85:6a:e7:bd:8f:b6:e3:00:43:29:89:77:
                    2a:0d:8d:53:f4:f0:39:c5:88:c7:8a:e6:35:2d:c6:
                    3e:0a:d5:1a:4e:2c:c7:b6:6b:52:36:26:fc:d9:eb:
                    ef:e6:00:31:cc:13:a7:62:72:e6:59:8d:4d:02:15:
                    f5:6d:fd:f4:36:54:00:54:86:6c:02:25:18:d0:6d:
                    f3:8b:fa:45:75:4b:c7:0f:53:66:5f:69:35:bf:14:
                    c3:6f:e6:7c:13:ec:a8:5a:98:b1:04:52:81:63:f3:
                    20:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:61:93:F1:10:43:14:72:54:0D:E0:45:CA:BF:74:07:E7:BE:32:42
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/x2GT8RBDFHJUDeBFyr90B-e-MkI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:02:e8:a7:5d:3f:31:af:31:d3:a8:7b:37:a9:c7:d7:9e:6d:
         fe:21:ed:03:05:ba:56:9f:67:fb:3c:5b:b8:c0:ed:5e:8e:e2:
         76:31:ea:f7:f6:b4:96:e9:e6:ed:c3:0f:ff:57:17:41:41:9b:
         1c:cc:aa:ea:c8:38:3c:10:8d:64:30:2e:4a:f4:3d:b5:4b:d0:
         c4:c1:ac:9e:09:a3:17:81:30:14:a1:72:b2:ea:e3:d3:9b:a3:
         4c:5a:6a:e9:d7:b3:03:1c:78:7c:e2:44:f7:96:fa:a1:bb:f7:
         a6:aa:e6:44:62:f8:be:19:38:58:2b:88:b2:45:62:ad:99:c5:
         29:69:c4:d0:4c:93:6c:e3:e1:f8:32:06:7a:48:fe:44:96:09:
         88:73:05:12:1e:28:e0:89:5a:1c:78:c5:fb:66:99:f1:f8:d8:
         a5:8f:b9:5e:51:30:13:ea:7d:38:43:ae:86:49:8d:43:bb:ba:
         f6:6b:07:7c:69:16:5f:5d:01:33:be:54:52:89:56:cc:d0:fe:
         1a:83:a9:f2:4d:70:b7:1f:25:62:55:6b:81:df:5a:7e:c8:4e:
         9f:54:79:9d:57:d2:5b:f5:5d:d0:16:3b:7d:5b:68:57:7f:33:
         74:6d:c8:c5:40:ae:ef:0d:3d:e5:e0:9c:cb:d8:8c:60:a5:d6:
         ec:da:3e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----