Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xDqka4mE-pHyFxGwOoiht0Z9Tfg.roa
File:                     xDqka4mE-pHyFxGwOoiht0Z9Tfg.roa (raw, json)
Hash identifier:          PXUrNnx64gh+evYON5VgMZTk1MPmowMWOkyt0D0zaJc=
Subject key identifier:   C4:3A:A4:6B:89:84:FA:91:F2:17:11:B0:3A:88:A1:B7:46:7D:4D:F8
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       204D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xDqka4mE-pHyFxGwOoiht0Z9Tfg.roa
Signing time:             Fri 25 Nov 2022 04:38:33 +0000
ROA not before:           Fri 25 Nov 2022 04:38:33 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        106.1.106.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8269 (0x204d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:38:33 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=C43AA46B8984FA91F21711B03A88A1B7467D4DF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:dc:d5:00:30:f6:74:8a:3d:04:16:f5:98:b3:
                    ff:73:14:ab:a3:2a:55:c3:80:6b:15:0e:63:2c:f4:
                    82:a1:25:3e:18:0b:c6:fa:1a:df:16:2e:26:6b:ae:
                    57:96:3b:2b:b5:d9:c2:d9:ef:45:c8:8b:2a:38:b5:
                    28:f5:0b:28:c1:81:c4:33:3a:2b:9d:ff:6a:b2:ae:
                    e9:b9:ab:e2:54:de:e6:66:7e:fa:14:1b:6c:cf:f2:
                    c8:ca:28:e3:50:05:10:e0:8b:49:99:70:ea:c9:40:
                    ed:b6:db:3d:f1:da:75:5f:78:72:48:68:e1:60:74:
                    36:29:89:0b:78:fb:57:71:a8:ee:ae:63:28:76:ff:
                    a4:e9:f6:b4:93:8e:fb:11:1b:b0:b9:75:15:6c:fe:
                    14:19:4a:4c:dd:a6:1f:16:f0:9d:7a:3d:aa:39:9e:
                    35:cc:fc:85:53:81:9a:64:a3:02:6a:0b:9c:c2:e8:
                    b1:f4:12:c6:98:60:db:3c:4b:fc:1e:fa:c5:56:68:
                    d3:a5:58:9f:1d:bd:19:a6:25:39:52:de:53:ec:1d:
                    50:dc:0e:fc:bd:d3:d1:82:f8:74:59:eb:de:29:75:
                    90:00:eb:e5:81:66:fd:be:37:eb:ab:6b:ce:67:99:
                    2b:c7:f9:01:cf:ae:e8:2b:d8:6c:67:64:e5:3b:bc:
                    0c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:3A:A4:6B:89:84:FA:91:F2:17:11:B0:3A:88:A1:B7:46:7D:4D:F8
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xDqka4mE-pHyFxGwOoiht0Z9Tfg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:52:43:f1:97:80:d6:05:c4:3b:83:74:6e:64:ce:d6:f7:44:
         df:a9:77:86:9b:44:9e:f8:7a:f3:f3:3a:7f:f7:12:32:fd:7e:
         6e:21:7f:bc:d5:8a:94:4e:57:05:6f:39:e9:cb:a3:4c:86:d8:
         bf:c4:d3:6a:25:d7:2c:cd:52:b1:cc:3e:34:ba:d5:ea:2e:8c:
         a2:d8:01:55:ce:48:91:7d:20:be:18:95:23:70:d1:a1:41:36:
         72:b6:92:fd:6c:e2:b3:25:1a:07:7b:05:3f:fc:d4:67:7c:82:
         f4:16:d9:6a:d0:99:be:57:bf:b2:c3:4a:af:24:e4:6f:9e:13:
         8a:9f:08:ac:e8:a4:13:d0:62:a6:79:96:60:90:f8:d0:df:98:
         90:6f:31:ec:43:2d:ee:1a:42:06:f4:2a:62:23:65:5a:57:32:
         8b:34:f5:03:bc:c4:9d:18:00:c5:98:af:eb:5e:6f:42:2e:52:
         85:64:91:f2:69:e1:c4:0d:0c:64:b3:ce:c8:05:19:e0:e4:9e:
         12:fe:c2:33:ca:81:77:f0:88:53:aa:f8:04:70:d4:09:6f:f9:
         45:db:33:b2:94:10:bd:1d:b4:88:73:f6:66:de:99:77:d9:5b:
         14:a3:61:4f:d4:49:f3:d3:5d:f4:7a:29:ba:f2:41:a0:ff:71:
         f2:0b:d2:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----