Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yT4bXwJZfA9GtKDz5kis8xKp5vo.roa
File:                     yT4bXwJZfA9GtKDz5kis8xKp5vo.roa (raw, json)
Hash identifier:          V2EMYny/VLSk3E9+Ao5GBGNtnDz/tG2/kOr9g2FKPZ4=
Subject key identifier:   C9:3E:1B:5F:02:59:7C:0F:46:B4:A0:F3:E6:48:AC:F3:12:A9:E6:FA
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yT4bXwJZfA9GtKDz5kis8xKp5vo.roa
Signing time:             Thu 15 Sep 2022 02:45:01 +0000
ROA not before:           Thu 15 Sep 2022 02:45:01 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     9924
IP address blocks:        123.193.192.0/19 maxlen: 19

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8096 (0x1fa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:45:01 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=C93E1B5F02597C0F46B4A0F3E648ACF312A9E6FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0a:7f:1d:da:1c:77:95:68:b4:aa:c1:b1:5d:
                    b7:62:10:5a:04:e5:e8:a9:b0:31:36:a1:92:7a:ac:
                    f5:b7:8c:a4:f5:a4:cf:3c:7e:ec:c0:89:8e:6b:7b:
                    09:f8:d9:53:9c:c7:8f:24:61:45:b3:29:eb:1f:ca:
                    6b:c9:f0:6c:59:31:55:00:60:80:14:22:56:94:63:
                    e3:0a:b4:c8:b4:f3:5a:32:8f:17:61:6b:a2:36:70:
                    ad:bf:2a:fb:c4:79:d3:a3:e9:00:1b:30:b0:a3:c9:
                    0a:ea:5b:63:52:cc:16:a9:05:f5:02:d7:2a:d5:96:
                    6a:a3:af:19:12:86:78:d0:ef:5d:05:63:47:ac:f6:
                    02:c6:71:e0:36:e8:34:80:23:27:f3:43:3c:ca:12:
                    32:4d:66:b3:d3:d9:e6:75:4f:60:e0:4b:85:7a:a4:
                    77:85:24:9d:cc:ee:9a:d9:74:30:c3:7d:e0:41:76:
                    33:05:80:d7:50:42:5b:6e:c6:bd:9e:d6:ef:0f:c1:
                    35:ca:4d:63:e1:e1:ce:a8:1c:b8:5e:6b:3f:30:5a:
                    4f:94:7a:8f:c1:e3:15:bf:24:e6:54:01:eb:d8:1b:
                    69:25:7c:da:0d:b9:64:6e:b8:26:7d:75:6b:5a:92:
                    80:4e:08:62:5a:76:9f:b9:dc:18:bd:f2:1e:2c:04:
                    ce:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:3E:1B:5F:02:59:7C:0F:46:B4:A0:F3:E6:48:AC:F3:12:A9:E6:FA
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yT4bXwJZfA9GtKDz5kis8xKp5vo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         80:da:b2:51:71:9c:63:f3:3e:59:27:88:64:e4:42:cf:6a:87:
         37:af:28:40:77:3f:16:f3:54:76:a6:a0:97:22:2a:ed:29:dd:
         d2:83:29:2c:d6:4e:30:6c:fb:3d:d3:71:35:9d:e1:3e:d6:d1:
         6f:e5:ce:19:b5:a2:85:af:9c:95:db:48:5d:cf:95:42:6a:87:
         7e:37:c4:53:75:90:e1:39:73:ae:c8:43:96:43:2b:4c:5a:6b:
         66:ea:13:94:f2:bc:58:a8:c2:ee:65:58:2b:ef:97:c0:8d:ad:
         41:88:72:54:9c:f6:37:c0:33:c2:76:ea:57:f5:53:c8:02:d2:
         ea:38:9c:ee:97:47:a1:9c:13:4f:56:a6:34:c3:e9:84:68:07:
         85:44:90:eb:cd:b2:37:6e:ba:93:67:ec:5e:f1:fc:db:7d:9d:
         50:9b:1c:0a:dc:12:79:f0:1f:97:2d:30:28:99:01:95:78:56:
         87:ed:47:e8:a4:6a:82:38:1b:06:1b:9a:f5:b6:51:e6:73:7d:
         3d:34:60:d8:94:24:45:30:8c:be:c3:5c:bc:0f:ef:9f:1b:36:
         ae:43:47:b0:3e:da:dc:78:1f:37:72:20:a4:a0:48:4a:ff:52:
         93:41:17:7e:d0:97:7e:5b:7b:50:59:7b:c5:cd:2f:56:7b:e1:
         27:55:94:7a
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH6AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MTUw
MjQ1MDFaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEM5M0UxQjVGMDI1OTdD
MEY0NkI0QTBGM0U2NDhBQ0YzMTJBOUU2RkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCvCn8d2hx3lWi0qsGxXbdiEFoE5eipsDE2oZJ6rPW3jKT1pM88
fuzAiY5rewn42VOcx48kYUWzKesfymvJ8GxZMVUAYIAUIlaUY+MKtMi081oyjxdh
a6I2cK2/KvvEedOj6QAbMLCjyQrqW2NSzBapBfUC1yrVlmqjrxkShnjQ710FY0es
9gLGceA26DSAIyfzQzzKEjJNZrPT2eZ1T2DgS4V6pHeFJJ3M7prZdDDDfeBBdjMF
gNdQQltuxr2e1u8PwTXKTWPh4c6oHLheaz8wWk+Ueo/B4xW/JOZUAevYG2klfNoN
uWRuuCZ9dWtakoBOCGJadp+53Bi98h4sBM6DAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUyT4bXwJZfA9GtKDz5kis8xKp5vowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3lUNGJYd0paZkE5R3RLRHo1
a2lzOHhLcDV2by5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAV7
wcAwDQYJKoZIhvcNAQELBQADggEBAIDaslFxnGPzPlkniGTkQs9qhzevKEB3Pxbz
VHamoJciKu0p3dKDKSzWTjBs+z3TcTWd4T7W0W/lzhm1ooWvnJXbSF3PlUJqh343
xFN1kOE5c67IQ5ZDK0xaa2bqE5TyvFiowu5lWCvvl8CNrUGIclSc9jfAM8J26lf1
U8gC0uo4nO6XR6GcE09WpjTD6YRoB4VEkOvNsjduupNn7F7x/Nt9nVCbHArcEnnw
H5ctMCiZAZV4VoftR+ikaoI4GwYbmvW2UeZzfT00YNiUJEUwjL7DXLwP758bNq5D
R7A+2tx4HzdyIKSgSEr/UpNBF37Ql35be1BZe8XNL1Z74SdVlHo=
-----END CERTIFICATE-----