Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zPsSLrs6f-cb7yEMsgc7AuhV3gY.roa
File:                     zPsSLrs6f-cb7yEMsgc7AuhV3gY.roa (raw, json)
Hash identifier:          VyHIIyJvnN9V2xm276I99D7svr0dfCi2XZmjhCFujew=
Subject key identifier:   CC:FB:12:2E:BB:3A:7F:E7:1B:EF:21:0C:B2:07:3B:02:E8:55:DE:06
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zPsSLrs6f-cb7yEMsgc7AuhV3gY.roa
Signing time:             Thu 15 Sep 2022 02:53:21 +0000
ROA not before:           Thu 15 Sep 2022 02:53:21 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        118.233.60.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8098 (0x1fa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:53:21 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=CCFB122EBB3A7FE71BEF210CB2073B02E855DE06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:99:17:39:bc:63:73:67:99:dd:9a:70:fd:c2:
                    cd:7b:18:7f:40:e4:99:14:78:35:ab:4b:c1:d2:8c:
                    d8:ad:fd:64:f6:9e:37:43:3f:7d:1a:00:c9:88:fe:
                    d1:c8:56:e6:00:47:8d:98:10:80:4c:91:8f:fd:b8:
                    02:b0:9a:50:ed:44:e0:d0:6a:86:60:2b:d8:93:11:
                    88:a0:2e:01:23:e0:8d:d4:da:bc:2a:e1:5a:9e:e8:
                    a8:be:d8:17:f0:c1:c2:5f:1e:a4:c6:4f:50:b1:c2:
                    c1:df:a3:a5:be:d8:f6:6a:77:f3:88:44:05:be:22:
                    ad:3d:63:07:20:05:23:0e:68:13:08:1d:e3:c0:cf:
                    66:90:e4:d2:99:5c:1c:a6:1b:c3:21:5a:b2:7d:5e:
                    66:bd:00:ee:76:4b:f8:e4:17:4e:18:c3:5e:cf:56:
                    c9:81:93:16:aa:59:db:ec:ce:1a:ab:d0:b6:22:d7:
                    b4:3b:9a:4f:08:0f:6a:23:75:50:db:d9:ba:0d:57:
                    2f:5a:62:0e:a6:ef:1a:e5:40:6d:b8:68:90:8c:dc:
                    25:78:7b:de:5c:f6:5b:c8:be:6e:29:f0:31:b9:aa:
                    91:ba:86:d3:6a:42:6e:f0:51:89:7b:03:8a:2e:93:
                    e4:27:18:08:ca:b1:ff:23:8a:1c:36:e1:f9:18:13:
                    8e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:FB:12:2E:BB:3A:7F:E7:1B:EF:21:0C:B2:07:3B:02:E8:55:DE:06
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zPsSLrs6f-cb7yEMsgc7AuhV3gY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.233.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:2b:0f:63:a1:b7:30:31:52:e5:fc:56:01:ba:66:33:a2:0d:
         45:dd:78:19:25:aa:72:47:3f:a7:a6:dd:9a:ca:b1:ab:cb:9c:
         5e:69:6d:a3:2e:b4:ac:cf:7d:55:10:bd:27:dd:da:76:e1:fc:
         e2:77:27:c7:b2:0b:bd:79:94:4f:8a:d3:2d:cb:d3:d8:88:b8:
         5e:e2:12:63:fd:5d:e3:ac:b0:a0:1c:c9:61:c8:b2:e2:3e:f6:
         ab:c0:55:f6:bd:63:5d:a2:42:37:86:2d:c7:81:e8:44:9e:ee:
         10:c2:fe:cb:1e:52:cc:e6:de:37:3e:51:4a:cf:21:35:43:49:
         70:78:ab:dc:e8:f8:2e:66:c8:de:a9:6c:b8:9e:86:09:a1:02:
         5b:df:87:1e:e8:ba:06:cc:6d:f9:fd:92:c2:be:33:4b:fd:18:
         7f:e4:44:df:a7:34:d7:79:14:9b:97:55:bd:58:44:5c:f5:0e:
         12:dd:11:31:1b:47:3f:2c:1c:bd:aa:bf:2a:b7:8b:8b:03:00:
         90:2a:70:19:8d:73:29:26:df:bb:99:d4:46:d5:61:c5:18:0d:
         97:17:08:96:04:09:18:35:fe:41:c3:67:4d:df:5c:50:1a:f1:
         06:21:cc:5a:21:f8:74:60:71:47:d9:8f:7e:42:de:6e:22:6d:
         99:80:b2:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----