Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xDtDci1NaN5JynHBhnucuLpnAA4.roa
File:                     xDtDci1NaN5JynHBhnucuLpnAA4.roa (raw, json)
Hash identifier:          Yamx74Yq0/w00WjpPmE5iKYdDp/jYLN4lwwbDlM8o4I=
Subject key identifier:   C4:3B:43:72:2D:4D:68:DE:49:CA:71:C1:86:7B:9C:B8:BA:67:00:0E
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA4
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xDtDci1NaN5JynHBhnucuLpnAA4.roa
Signing time:             Thu 15 Sep 2022 02:56:07 +0000
ROA not before:           Thu 15 Sep 2022 02:56:07 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        2407:4d00:ff09::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8100 (0x1fa4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:56:07 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=C43B43722D4D68DE49CA71C1867B9CB8BA67000E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:86:69:b2:09:84:61:62:53:47:fc:f3:48:ef:
                    07:04:04:8e:e7:cd:a7:bc:fd:78:9d:3a:ef:f4:1d:
                    f2:54:3f:7b:5c:a4:e5:b6:f5:85:98:3a:e9:77:66:
                    63:80:06:5c:e9:2e:ce:9e:44:2c:8b:c6:fc:44:c3:
                    ad:4a:ff:04:95:e9:97:ae:b4:26:42:a0:5d:38:12:
                    60:f1:1b:19:44:d1:1b:7c:b0:f9:b2:f0:97:51:20:
                    ec:13:a8:47:b0:96:3c:f6:49:eb:59:84:c8:8c:9b:
                    7c:60:20:76:ea:47:15:14:3c:b7:cd:33:ae:0d:a1:
                    a0:03:9f:e5:d9:1e:13:56:50:cb:ba:c4:3a:57:3c:
                    3a:e3:e4:27:88:0e:a1:13:64:29:45:11:a7:a1:41:
                    86:9e:c0:b1:05:10:36:4c:8a:bc:dd:47:7c:99:f0:
                    26:ca:17:17:f4:42:fa:1b:50:53:8f:b0:1a:a1:df:
                    c9:1b:23:b6:5b:06:b8:cd:70:e9:ef:75:60:d2:cd:
                    10:22:80:ff:91:2d:07:ed:e7:a7:fa:c3:cb:4d:4b:
                    11:98:4b:56:7c:91:67:35:81:7e:5a:cc:b7:88:f4:
                    ca:71:3a:36:5e:c3:f4:2e:0f:0e:2c:b3:04:9c:18:
                    a0:88:09:59:ed:c6:53:0c:58:76:72:15:c8:4a:f0:
                    8c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:3B:43:72:2D:4D:68:DE:49:CA:71:C1:86:7B:9C:B8:BA:67:00:0E
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xDtDci1NaN5JynHBhnucuLpnAA4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:4d00:ff09::/48

    Signature Algorithm: sha256WithRSAEncryption
         47:c9:0b:d1:48:ea:a2:ab:6b:fc:2b:76:c2:7c:d7:42:9c:2a:
         89:25:b6:c8:04:58:10:b3:a5:9c:ec:f5:a0:42:4c:00:6c:fc:
         10:b1:36:33:bc:32:0e:a9:dd:bd:38:e0:e1:b3:9b:42:8e:8a:
         d5:7f:22:d4:c1:57:9e:47:20:07:31:e2:46:4a:95:f4:86:e4:
         cc:5e:49:a8:bf:8b:d6:14:ea:a1:ff:f8:80:f3:14:0d:94:5e:
         d8:64:af:83:23:81:8d:74:44:a5:5a:32:3e:5c:8a:ba:84:80:
         9b:fb:0b:c2:7a:26:28:51:aa:7b:f2:f9:ab:a6:cf:5a:d9:3c:
         b1:09:8b:68:53:75:ff:12:c2:71:d9:ca:1a:17:17:02:72:1c:
         91:5d:91:49:1d:1c:e3:e4:e7:21:e8:4b:b8:f3:49:38:ca:cd:
         5f:f7:8a:b4:95:ac:37:52:ab:8d:32:d8:a1:c8:3a:e2:d6:27:
         bc:4a:d6:ac:38:b0:f4:d0:59:a9:2a:1a:ec:60:e8:0d:1e:db:
         6b:e6:90:a6:94:c4:59:1f:55:09:d8:29:86:ec:9c:5e:38:5a:
         b2:92:c0:1c:4d:06:3d:89:a4:a4:18:12:00:fd:f6:04:10:45:
         6f:34:05:9f:ed:62:05:d9:f1:25:7e:2c:08:e1:c4:a7:65:12:
         31:7f:64:e7
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICH6QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MTUw
MjU2MDdaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEM0M0I0MzcyMkQ0RDY4
REU0OUNBNzFDMTg2N0I5Q0I4QkE2NzAwMEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQChhmmyCYRhYlNH/PNI7wcEBI7nzae8/XidOu/0HfJUP3tcpOW2
9YWYOul3ZmOABlzpLs6eRCyLxvxEw61K/wSV6ZeutCZCoF04EmDxGxlE0Rt8sPmy
8JdRIOwTqEewljz2SetZhMiMm3xgIHbqRxUUPLfNM64NoaADn+XZHhNWUMu6xDpX
PDrj5CeIDqETZClFEaehQYaewLEFEDZMirzdR3yZ8CbKFxf0QvobUFOPsBqh38kb
I7ZbBrjNcOnvdWDSzRAigP+RLQft56f6w8tNSxGYS1Z8kWc1gX5azLeI9MpxOjZe
w/QuDw4sswScGKCICVntxlMMWHZyFchK8IwTAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUxDtDci1NaN5JynHBhnucuLpnAA4wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3hEdERjaTFOYU41SnluSEJo
bnVjdUxwbkFBNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk
B00A/wkwDQYJKoZIhvcNAQELBQADggEBAEfJC9FI6qKra/wrdsJ810KcKokltsgE
WBCzpZzs9aBCTABs/BCxNjO8Mg6p3b044OGzm0KOitV/ItTBV55HIAcx4kZKlfSG
5MxeSai/i9YU6qH/+IDzFA2UXthkr4MjgY10RKVaMj5cirqEgJv7C8J6JihRqnvy
+aumz1rZPLEJi2hTdf8SwnHZyhoXFwJyHJFdkUkdHOPk5yHoS7jzSTjKzV/3irSV
rDdSq40y2KHIOuLWJ7xK1qw4sPTQWakqGuxg6A0e22vmkKaUxFkfVQnYKYbsnF44
WrKSwBxNBj2JpKQYEgD99gQQRW80BZ/tYgXZ8SV+LAjhxKdlEjF/ZOc=
-----END CERTIFICATE-----