Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zvS7aU6wu7uo95ff32F-dJX_eZk.roa
File:                     zvS7aU6wu7uo95ff32F-dJX_eZk.roa (raw, json)
Hash identifier:          6hLhBTefvxZVfGwOenP+7QV641td61z+2Dvzg76WMSg=
Subject key identifier:   CE:F4:BB:69:4E:B0:BB:BB:A8:F7:97:DF:DF:61:7E:74:95:FF:79:99
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zvS7aU6wu7uo95ff32F-dJX_eZk.roa
Signing time:             Thu 15 Sep 2022 02:46:12 +0000
ROA not before:           Thu 15 Sep 2022 02:46:12 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        123.194.144.0/20 maxlen: 20

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8096 (0x1fa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:46:12 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=CEF4BB694EB0BBBBA8F797DFDF617E7495FF7999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3d:57:e6:00:36:fa:7a:e1:99:2f:67:98:7d:
                    d0:cc:5f:1a:4c:22:b5:d8:2f:c2:3f:14:09:92:74:
                    50:0c:10:0d:a9:e3:e8:d8:46:ef:55:b9:83:10:41:
                    64:19:05:3e:6f:10:96:88:38:38:e7:7e:62:1d:79:
                    60:66:b3:8c:a0:a6:82:03:6d:e2:a7:ae:cd:e2:61:
                    9f:c6:c3:4d:3d:34:e0:c8:ca:93:96:45:d5:2a:50:
                    f0:6a:cf:8b:aa:77:bb:7e:88:37:c1:3d:63:c6:92:
                    5a:69:41:96:c2:49:6e:d5:14:fe:eb:b8:ae:b3:bc:
                    a3:36:80:14:cf:06:03:44:9a:44:09:ef:83:f8:b3:
                    ef:48:7e:18:ae:4d:c5:f4:8b:e8:8b:ef:4c:07:a1:
                    8b:22:1c:f5:62:68:2d:e4:1c:56:50:2e:8c:51:2a:
                    ab:b5:63:2b:03:f2:a3:45:b6:5d:3e:d3:a2:d1:5f:
                    54:27:b8:5d:18:b8:a6:85:06:c4:16:d8:86:5c:ce:
                    3f:b4:47:17:53:0a:d1:92:68:e4:47:96:7b:e9:b8:
                    96:7c:ba:e0:2f:41:53:92:2e:9c:36:42:89:d9:20:
                    3b:30:ce:04:13:fb:d2:bc:28:9e:4b:f5:68:80:ca:
                    23:f3:54:d7:4c:9c:5a:44:c8:0b:0f:36:b9:cf:4c:
                    be:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:F4:BB:69:4E:B0:BB:BB:A8:F7:97:DF:DF:61:7E:74:95:FF:79:99
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zvS7aU6wu7uo95ff32F-dJX_eZk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         80:9c:db:b5:b6:31:58:cd:18:0e:db:ba:ef:7d:5d:62:57:af:
         1b:05:1c:89:bd:56:f0:15:37:5b:f8:b0:bc:e5:d3:be:f1:5e:
         00:e1:e8:4f:a7:73:19:4c:a3:61:35:f7:fc:32:b4:6c:b9:e9:
         61:1a:7c:82:c1:0d:42:7e:7b:58:d4:c4:a2:08:06:2e:6c:57:
         7e:14:cd:c4:79:4b:6c:32:59:6f:b6:d0:b3:c7:a9:9f:d3:21:
         c5:d8:22:b8:df:f9:bc:19:22:64:18:4a:9e:21:1a:c0:30:7d:
         e6:cc:96:00:bd:98:76:a0:c9:a1:c6:87:98:e1:cb:ca:ae:9d:
         9c:e2:b7:14:2d:89:58:21:84:c0:c4:09:61:04:28:33:8e:a0:
         67:72:7c:b5:57:91:c0:06:d6:71:21:e1:ef:25:3a:57:2c:6e:
         8d:63:7b:be:c1:6b:f2:db:14:cb:32:26:20:af:37:c6:06:21:
         37:f3:04:12:58:39:87:ff:00:a1:b1:07:f3:1f:32:40:94:42:
         b9:98:9e:41:ef:21:b5:15:f9:94:cc:91:49:e0:cb:b2:c4:88:
         78:ea:91:e7:e9:23:73:52:34:e6:5b:97:b0:5c:4d:cf:db:2f:
         7a:95:8a:78:06:f6:b8:cc:e8:f0:bd:4e:72:97:2b:99:69:0b:
         b5:e2:d6:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----