Blockchain oracles are essential for enabling smart contracts to access and interact with off-chain data, where its security and trustworthiness are crucial for preserving the overall reliability and integrity of blockchain-based systems. However, existing reputation-based blockchain oracles are vulnerable to Sybil and collusion attacks. To address these issues, trusted execution environments (TEEs) have been leveraged to construct blockchain oracles. While these TEE-enabled oracles provide resistance against the above attacks, they typically depend on a centralized Root of Trust (RoT), which introduces risks such as root key pre-provision risks and single points of failure. Moreover, they often struggle to maintain trust over time, making them unsuitable for application scenarios that require long-term guaranteed trust. In this paper, we propose EnduraTrust, a highly secure blockchain oracle network empowered by a decentralized Root of Trust (DRoT), which can overcome single points of failure, offer trust sustainability, minimize the security risk of root key pre-provision, and provide essential participation incentive. Concretely, it adopts Physically Unclonable Functions (PUFs) to generate device-specific root keys, eliminating the risks associated with centralized key pre-provision. To confront mobile attacks and ensure sustained trust, it employs an off-chain process to generate attestation reports, which are then verified onchain through a non-interactive protocol. This protocol ensures robust integrity verification for Individual Root of Trust (IRoT) nodes while minimizing latency and overhead. In addition, we design a fair and secure IRoT node selection algorithm to form a trustworthy oracle committee to offer oracle services, protecting against Sybil and collusion attacks to which existing oracles are prone. Particularly, we apply an incentive mechanism to encourage oracle node participation and reliable behavior. We validate EnduraTrust through formal security analysis and performance evaluation based on prototype implementation. Our results show that EnduraTrust enhances root key security, realizes decentralization, offers fair oracle node selection, ensures sustained trust, exhibits strong robustness, and provides participation incentive. It surpasses existing decentralized attestation schemes in multiple dimensions, including security, contract execution efficiency, attestation protocol performance, and scalability. Besides, its performance regarding oracle response aggregation and aggregated response verification confirming its effectiveness.