Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/y48FyCoIikoU-85b1YPj5lYQxi8.roa
File:                     y48FyCoIikoU-85b1YPj5lYQxi8.roa (raw, json)
Hash identifier:          uoZcqCxxSglM7mRtxwBH3ffJvn5aBwYOlZjnmfAS4sY=
Subject key identifier:   CB:8F:05:C8:2A:08:8A:4A:14:FB:CE:5B:D5:83:E3:E6:56:10:C6:2F
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/y48FyCoIikoU-85b1YPj5lYQxi8.roa
Signing time:             Thu 15 Sep 2022 02:52:57 +0000
ROA not before:           Thu 15 Sep 2022 02:52:57 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        123.195.237.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8098 (0x1fa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:52:57 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=CB8F05C82A088A4A14FBCE5BD583E3E65610C62F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:95:fe:84:3d:41:29:7c:73:68:49:e0:78:e5:
                    ea:4b:05:93:75:21:1c:63:8e:cb:c9:f0:32:c1:0f:
                    cb:d7:5f:f5:f4:da:46:75:36:64:8a:27:c9:23:fb:
                    53:29:27:6f:9d:e7:b4:4e:77:3c:be:26:27:a1:23:
                    2b:5a:4d:74:db:b4:43:84:cb:fa:05:5b:79:00:1c:
                    a5:bf:f2:2e:eb:63:04:34:00:56:a0:1e:58:03:c6:
                    d1:ea:da:1d:c7:4e:3c:9e:e9:b7:87:38:61:c9:7f:
                    2b:0f:dc:ba:76:e6:18:d2:81:4a:7b:d4:2b:28:55:
                    a4:79:80:be:96:17:73:68:1a:3f:5d:06:01:e2:a5:
                    11:77:9e:da:70:80:cd:a1:9d:f7:03:73:33:1e:55:
                    15:2c:7f:48:4b:73:42:1a:7b:98:64:79:e0:e3:fc:
                    c2:c2:58:9f:88:7f:24:87:fb:43:08:4d:57:ba:12:
                    9b:d6:c0:60:14:b6:dc:f8:bc:df:88:3b:65:b3:41:
                    d3:6a:15:cd:21:c4:43:20:bc:82:a9:c9:90:25:01:
                    28:1f:fc:de:af:5f:fc:8b:5d:27:18:2d:75:55:a0:
                    1d:77:72:b7:c2:bb:e4:b1:22:b0:ad:66:06:c9:81:
                    aa:ba:d4:13:7c:40:57:08:cd:0e:f3:8f:f5:61:9c:
                    4a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:8F:05:C8:2A:08:8A:4A:14:FB:CE:5B:D5:83:E3:E6:56:10:C6:2F
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/y48FyCoIikoU-85b1YPj5lYQxi8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:a6:71:cf:93:18:84:bf:bd:a6:ab:cb:c3:86:8c:c8:b7:1d:
         96:f3:04:3e:2b:9f:a4:ae:51:a9:8f:bc:66:4a:f0:32:84:4d:
         be:b5:db:c0:34:04:ee:00:8b:05:f1:62:27:ab:ff:17:d6:c5:
         17:5f:ea:20:f2:ec:77:2f:97:a5:c4:09:dc:40:07:50:c1:18:
         4c:05:cb:6f:36:cd:a2:1f:52:86:35:a7:68:2d:69:d8:77:21:
         23:c6:1a:6b:ba:94:1b:8b:d9:4a:1a:1d:fb:7c:9d:93:09:25:
         02:07:f8:f1:64:15:bc:fe:37:9f:b7:a3:64:70:d4:cb:e9:28:
         41:20:84:37:f9:40:d2:4d:ce:ed:0e:3c:24:c7:d7:88:c3:46:
         c5:cc:8a:d4:d6:ac:4a:22:52:f3:cd:8e:04:22:16:07:3b:8c:
         ba:e9:93:5d:7a:c0:ca:bc:85:15:8e:2c:68:87:e9:a3:d4:cf:
         b1:7f:dd:ad:89:d9:2e:cb:3e:c9:e0:b3:11:d4:3b:f1:4f:0e:
         ce:07:f3:5d:b5:e0:ba:17:e1:98:73:8d:3d:96:16:8a:26:28:
         67:33:2d:0a:f5:69:7e:ca:a3:83:cf:39:b7:9e:25:c1:eb:25:
         68:ce:f9:06:ff:04:60:a0:a6:d3:6c:d1:d7:3b:8d:32:5c:f0:
         be:8a:b0:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----