Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zDJkVzA1b7HNw9cqqrVjxOtOFVI.roa
File:                     zDJkVzA1b7HNw9cqqrVjxOtOFVI.roa (raw, json)
Hash identifier:          Z1bQ+iJVkcukWK0a/knZwP4A5TiNsRBVKneVtOalFqc=
Subject key identifier:   CC:32:64:57:30:35:6F:B1:CD:C3:D7:2A:AA:B5:63:C4:EB:4E:15:52
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       235F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zDJkVzA1b7HNw9cqqrVjxOtOFVI.roa
Signing time:             Fri 25 Nov 2022 04:43:30 +0000
ROA not before:           Fri 25 Nov 2022 04:43:30 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        123.195.238.128/25 maxlen: 25

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9055 (0x235f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:43:30 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=CC32645730356FB1CDC3D72AAAB563C4EB4E1552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:68:c0:35:f8:9f:ac:96:3d:9f:f5:ab:6d:02:
                    ee:72:d4:6e:7c:69:31:50:5e:82:9d:08:99:59:22:
                    b5:35:c3:34:ee:73:ab:24:de:03:ee:c2:31:04:b4:
                    cf:92:45:66:e0:c7:ab:4b:9b:db:2c:f1:bc:c9:30:
                    d7:86:d6:aa:0a:d7:09:f8:cb:4b:09:7f:9b:c0:80:
                    e9:c2:1c:62:a0:ab:c3:46:4f:f3:94:57:2a:df:19:
                    c8:13:d4:66:09:3b:d9:d8:fb:1d:ab:4d:87:33:b1:
                    63:08:4b:75:b2:e9:4a:3d:9e:e2:d2:d0:f3:9f:f3:
                    2c:ac:df:c3:c2:58:02:52:b9:39:c5:8c:86:49:30:
                    8d:71:13:6c:93:96:60:ec:d9:d6:ab:85:0f:51:21:
                    8a:46:80:86:cd:82:5f:c7:86:ad:c6:c0:51:15:fd:
                    81:d2:c9:a1:d5:9d:0f:26:8a:22:0d:bd:38:de:e4:
                    84:c1:2c:0b:54:3d:7e:0a:90:3d:e8:29:91:f0:8a:
                    27:48:8e:81:29:7a:d1:f7:fd:7f:d9:0a:55:da:f1:
                    72:fe:e7:37:86:34:1c:60:f4:d9:d3:f6:a6:bc:ca:
                    f0:9e:59:91:bb:04:9e:8d:73:86:72:7c:37:44:de:
                    6c:ca:14:a9:e5:8a:b7:81:c9:a3:3e:2c:72:e0:5c:
                    76:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:32:64:57:30:35:6F:B1:CD:C3:D7:2A:AA:B5:63:C4:EB:4E:15:52
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zDJkVzA1b7HNw9cqqrVjxOtOFVI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.238.128/25

    Signature Algorithm: sha256WithRSAEncryption
         93:82:7a:e3:36:8a:bd:9c:f8:ae:8c:e9:2a:34:14:8d:80:e6:
         0c:7a:4d:58:e5:ce:7a:5c:ee:07:00:ab:48:e3:4b:67:bd:62:
         61:3f:d0:ad:3b:ec:4b:85:3d:1e:0c:f0:52:5b:c8:c9:19:28:
         d9:4d:b4:b8:f7:cb:27:78:0e:ef:dc:76:13:ab:ce:41:75:50:
         dd:97:95:97:dd:d9:5a:e4:a0:1d:d5:26:d5:02:5f:01:67:2c:
         cd:12:7b:e0:bc:90:cf:b4:c7:2b:c5:74:34:43:b3:c1:c9:85:
         a4:5f:f7:86:a6:2e:fd:57:34:b4:72:0f:4e:c5:60:4d:9c:59:
         44:54:82:ec:ab:b8:5e:0b:c7:84:96:b1:48:b4:2c:e2:f1:51:
         70:71:7d:91:d1:be:4d:8f:a7:bc:51:6c:d5:72:b8:1f:7c:f8:
         97:86:68:cf:a3:06:a2:fe:7c:8b:a8:3f:f1:5a:11:0c:b4:c9:
         19:3c:d9:9d:f7:6b:3e:34:6a:c0:98:fb:f8:65:46:91:5e:3f:
         08:2a:cb:de:50:8d:03:89:62:dc:e8:19:62:6b:8e:a5:78:d1:
         dd:ad:82:07:2c:fc:3b:2f:b3:eb:81:1d:2c:e1:d4:6d:18:2a:
         c4:a2:a6:b1:30:b4:3a:e8:e8:5e:41:05:0a:2f:aa:35:d4:af:
         75:d9:78:f4
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgICI18wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDQzMzBaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKENDMzI2NDU3MzAzNTZG
QjFDREMzRDcyQUFBQjU2M0M0RUI0RTE1NTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDSaMA1+J+slj2f9attAu5y1G58aTFQXoKdCJlZIrU1wzTuc6sk
3gPuwjEEtM+SRWbgx6tLm9ss8bzJMNeG1qoK1wn4y0sJf5vAgOnCHGKgq8NGT/OU
VyrfGcgT1GYJO9nY+x2rTYczsWMIS3Wy6Uo9nuLS0POf8yys38PCWAJSuTnFjIZJ
MI1xE2yTlmDs2darhQ9RIYpGgIbNgl/Hhq3GwFEV/YHSyaHVnQ8miiINvTje5ITB
LAtUPX4KkD3oKZHwiidIjoEpetH3/X/ZClXa8XL+5zeGNBxg9NnT9qa8yvCeWZG7
BJ6Nc4ZyfDdE3mzKFKnlireByaM+LHLgXHa9AgMBAAGjggHvMIIB6zAdBgNVHQ4E
FgQUzDJkVzA1b7HNw9cqqrVjxOtOFVIwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3pESmtWekExYjdITnc5Y3Fx
clZqeE90T0ZWSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQd7
w+6AMA0GCSqGSIb3DQEBCwUAA4IBAQCTgnrjNoq9nPiujOkqNBSNgOYMek1Y5c56
XO4HAKtI40tnvWJhP9CtO+xLhT0eDPBSW8jJGSjZTbS498sneA7v3HYTq85BdVDd
l5WX3dla5KAd1SbVAl8BZyzNEnvgvJDPtMcrxXQ0Q7PByYWkX/eGpi79VzS0cg9O
xWBNnFlEVILsq7heC8eElrFItCzi8VFwcX2R0b5Nj6e8UWzVcrgffPiXhmjPowai
/nyLqD/xWhEMtMkZPNmd92s+NGrAmPv4ZUaRXj8IKsveUI0DiWLc6Blia46leNHd
rYIHLPw7L7PrgR0s4dRtGCrEoqaxMLQ66OheQQUKL6o11K912Xj0
-----END CERTIFICATE-----