Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/z5X5dM3iTRbrHbJZlmecC5s3pFo.roa
File:                     z5X5dM3iTRbrHbJZlmecC5s3pFo.roa (raw, json)
Hash identifier:          mQaKDYc4stmQcp9C2BCge3Vt2tF8pUulJavoBzPQ4E8=
Subject key identifier:   CF:95:F9:74:CD:E2:4D:16:EB:1D:B2:59:96:67:9C:0B:9B:37:A4:5A
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/z5X5dM3iTRbrHbJZlmecC5s3pFo.roa
Signing time:             Thu 15 Sep 2022 02:45:59 +0000
ROA not before:           Thu 15 Sep 2022 02:45:59 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        123.192.180.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8096 (0x1fa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:45:59 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=CF95F974CDE24D16EB1DB25996679C0B9B37A45A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:7e:8f:4f:cf:a0:8b:f2:20:c8:e0:5c:82:e5:
                    10:7d:29:e0:3a:50:ae:9b:6a:a6:6f:b8:ee:e0:46:
                    34:4d:80:7a:c9:da:9c:ee:39:26:01:25:13:ef:fa:
                    77:47:7d:3b:0c:43:60:64:c0:04:76:3b:b3:75:cc:
                    1b:ef:c2:4f:1b:ef:31:fb:b7:30:c6:bf:10:82:2b:
                    c9:b5:64:70:19:e6:ef:f8:81:bc:d0:52:21:97:62:
                    00:c8:9e:43:a7:1b:a8:f4:81:5f:75:fc:28:3d:d7:
                    b3:e7:6d:a4:76:1c:da:37:a7:a2:a4:f8:de:22:62:
                    07:d0:93:a6:2a:9b:57:5b:73:e3:8b:cf:48:a3:95:
                    04:8c:db:43:b5:96:50:f6:8f:c7:8b:b9:56:ae:21:
                    8f:74:c8:10:d3:3b:48:9e:41:01:57:a1:0e:59:2b:
                    17:28:b3:ed:bc:e4:5c:1d:76:43:84:3a:3b:02:98:
                    c0:8f:e0:ba:29:17:94:80:b9:a5:18:83:0f:76:65:
                    3c:52:01:28:8a:73:10:2c:55:d7:89:58:20:b8:00:
                    82:39:46:48:07:ba:61:5e:cd:a9:e6:30:53:27:c0:
                    ad:f2:f4:6b:00:ba:72:dd:61:cd:7f:4a:d6:7b:53:
                    08:44:6b:f3:2f:a8:8d:e3:68:c3:f1:30:46:22:b8:
                    d3:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:95:F9:74:CD:E2:4D:16:EB:1D:B2:59:96:67:9C:0B:9B:37:A4:5A
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/z5X5dM3iTRbrHbJZlmecC5s3pFo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.192.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:17:d9:f7:50:c1:15:66:dc:b4:74:3d:ea:0a:b4:f2:71:d9:
         2b:e8:63:20:75:45:f9:a6:eb:1e:0a:b7:1e:df:ff:99:8c:ba:
         91:62:7d:35:93:72:8a:e2:70:06:1f:26:e3:7d:18:42:54:59:
         03:42:31:27:72:5e:aa:bc:9a:97:7d:bc:38:43:c0:57:c1:d5:
         de:79:b9:0c:a4:33:7a:67:9a:8e:a2:79:f9:41:5c:67:c1:b5:
         e1:ac:2c:db:03:25:6d:75:20:3c:1b:7b:e2:f7:75:0f:2d:e2:
         07:0f:e3:ca:9c:a2:5a:6a:4a:2d:0f:0e:21:40:95:d4:0d:fc:
         ea:b8:53:8c:6b:dc:cf:cb:bb:ec:6c:dd:cb:43:d4:92:5a:f6:
         8c:6e:6d:43:43:aa:1e:48:7a:0d:34:ba:e5:f7:fd:7f:59:1a:
         e1:6d:23:09:7a:3d:2a:4c:78:b7:a2:f3:cf:9e:80:ee:1a:e1:
         46:12:e3:e1:37:b1:26:2c:d8:eb:79:11:01:15:07:78:68:05:
         ea:c1:64:1c:11:95:01:c8:9d:cc:7c:88:7f:90:4c:7f:8f:06:
         3f:42:2e:b4:49:f2:a0:34:ac:2a:90:07:8f:a0:76:04:c9:45:
         13:21:c9:4c:13:9c:ed:a8:98:8f:af:b8:51:d8:e1:fa:43:58:
         bd:a4:2d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----