Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-t9Vq8OjyUTCFiDgp0Nod6wg4-8.roa
File:                     -t9Vq8OjyUTCFiDgp0Nod6wg4-8.roa (raw, json)
Hash identifier:          XQ5vCCSkvejkNMss4yg+obmTUXOLK8RaNTyWfe7ulRg=
Subject key identifier:   FA:DF:55:AB:C3:A3:C9:44:C2:16:20:E0:A7:43:68:77:AC:20:E3:EF
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       28F1
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-t9Vq8OjyUTCFiDgp0Nod6wg4-8.roa
Signing time:             Fri 01 Sep 2023 10:05:57 +0000
ROA not before:           Fri 01 Sep 2023 10:05:57 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     38841
IP address blocks:        118.232.56.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10481 (0x28f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep  1 10:05:57 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=FADF55ABC3A3C944C21620E0A7436877AC20E3EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:19:52:47:ac:1a:18:fb:b0:50:87:b4:5c:e3:
                    cc:db:34:df:35:09:7b:a2:b9:b7:f0:6e:87:13:e3:
                    80:71:8d:8f:5c:b1:cd:09:36:10:82:77:35:5a:55:
                    26:95:8d:59:90:31:1a:72:6c:de:30:51:98:2c:87:
                    81:99:fe:5b:03:31:07:b1:c8:38:17:75:65:b2:08:
                    8c:02:ea:53:b7:2e:8a:a5:0f:07:35:87:42:1e:76:
                    41:9c:c9:32:6a:28:43:9a:8a:46:d5:6d:b2:5b:ea:
                    98:26:72:2c:06:17:f5:15:a6:b0:ce:4a:1a:8d:26:
                    70:c1:31:06:af:aa:22:af:7e:ea:00:c1:cd:84:22:
                    b4:95:97:4d:f0:17:12:47:ee:82:93:c0:e4:80:94:
                    1a:70:d0:85:d0:53:3e:3e:af:6b:a0:17:d2:67:8b:
                    84:de:0c:db:30:13:e5:0b:25:1f:9c:a8:ac:50:ae:
                    b8:56:2c:64:83:f1:a0:fe:bc:e3:7e:4f:6b:6a:a4:
                    ac:48:fc:e0:4e:d2:8d:e1:f3:a1:45:14:23:cb:a0:
                    c7:b2:09:8d:b4:e0:09:08:55:e1:24:65:d4:d7:6e:
                    c1:67:83:e7:42:00:5c:42:47:6e:fa:e9:ee:3b:ef:
                    5f:d8:62:f4:cf:d2:f5:23:62:20:ac:5d:48:61:35:
                    9f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:DF:55:AB:C3:A3:C9:44:C2:16:20:E0:A7:43:68:77:AC:20:E3:EF
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-t9Vq8OjyUTCFiDgp0Nod6wg4-8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4d:8f:09:99:e9:b4:57:42:71:bd:d4:f6:0c:5d:3b:aa:62:41:
         48:cb:0f:9d:4f:b4:63:6d:79:ae:be:5b:3c:a4:ff:06:f9:3a:
         e3:a3:1d:85:ad:72:01:fc:6f:2a:5c:e7:bd:f2:be:04:68:cb:
         6a:4a:e0:28:13:c5:60:32:29:94:10:d5:4f:94:38:af:24:d8:
         94:54:62:2b:f9:ff:ac:46:e4:f1:72:8b:7b:eb:3f:2d:3a:bd:
         98:71:5e:cc:b3:8a:93:fa:3f:24:48:bc:2c:59:b3:27:6c:42:
         f1:99:07:5c:52:b0:77:f9:bd:1f:04:bc:fe:9e:ec:97:eb:eb:
         38:bc:91:1f:83:26:c2:f1:0e:b8:c9:bc:ad:da:4e:6e:49:ee:
         ad:6e:96:6a:8e:c8:20:15:db:41:b2:70:c2:92:dd:17:25:0e:
         54:58:7c:84:b2:e1:0a:9f:07:de:8a:1b:f7:9b:10:de:8f:ed:
         74:6c:5c:68:d2:43:a0:56:44:9d:73:b6:50:59:0f:4e:92:59:
         30:f3:0a:51:82:3c:7c:ee:25:1b:92:c3:f6:10:9f:73:4f:d1:
         3a:d7:e0:fb:94:80:98:00:89:a5:37:4c:66:47:9e:29:7f:4d:
         03:63:42:1e:47:92:7a:33:46:43:8c:56:5a:80:97:37:9a:5c:
         9c:00:bb:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:17 2024 by rpki-client on console-ams.rpki-client.org