Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/00w9tyA-7zZ-YLyhl0xalq1aRKE.roa
File:                     00w9tyA-7zZ-YLyhl0xalq1aRKE.roa (raw, json)
Hash identifier:          U3sNKwpAoBIrBnY3U6jKIOikcFNMce2Qw6tgFGI6gCI=
Subject key identifier:   D3:4C:3D:B7:20:3E:EF:36:7E:60:BC:A1:97:4C:5A:96:AD:5A:44:A1
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       28F7
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/00w9tyA-7zZ-YLyhl0xalq1aRKE.roa
Signing time:             Fri 01 Sep 2023 10:05:59 +0000
ROA not before:           Fri 01 Sep 2023 10:05:59 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     38841
IP address blocks:        2407:4d00:ff01::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10487 (0x28f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep  1 10:05:59 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=D34C3DB7203EEF367E60BCA1974C5A96AD5A44A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:50:60:14:6f:9c:21:bb:e3:26:48:b8:29:aa:
                    cd:d9:d7:e5:53:bd:a2:5a:d2:00:fa:17:ac:33:cc:
                    c2:96:54:37:21:c2:3e:0f:bb:2f:a8:d2:6d:ed:7d:
                    e3:ca:fb:4b:8c:52:8d:d4:5a:04:c8:8c:12:df:47:
                    5a:18:74:7f:8a:0e:db:29:08:da:d6:3d:a2:43:c8:
                    8e:39:67:84:1d:40:77:89:b5:ce:d5:89:22:0d:cb:
                    4a:64:37:70:96:fc:d3:ed:80:58:4d:4b:bc:1c:c6:
                    4b:a1:09:89:10:a3:9f:87:1b:a3:4d:c1:72:4e:44:
                    b3:d3:88:b1:d3:78:7b:29:86:e9:7b:4e:0a:eb:5c:
                    97:fa:f5:bf:1e:77:d6:b9:af:ca:9d:f7:23:53:c2:
                    1c:9d:ac:e2:1d:e8:18:c5:29:9f:67:c0:92:dd:dc:
                    2c:9d:2d:ed:ac:8b:47:26:79:c6:a9:40:c0:3f:a6:
                    fd:99:1a:18:64:87:b4:4c:ac:27:d6:43:ea:70:b1:
                    14:27:22:2c:78:66:7e:81:fe:5d:5d:4a:0d:a4:f5:
                    06:f3:95:70:4e:d2:16:7f:4b:68:89:6d:92:e7:80:
                    32:55:6c:d1:e3:da:4b:61:55:f0:03:05:ac:a6:ae:
                    b4:fc:d2:52:83:7a:8a:e5:7c:20:bd:0b:58:23:30:
                    5b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:4C:3D:B7:20:3E:EF:36:7E:60:BC:A1:97:4C:5A:96:AD:5A:44:A1
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/00w9tyA-7zZ-YLyhl0xalq1aRKE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:4d00:ff01::/48

    Signature Algorithm: sha256WithRSAEncryption
         13:08:2f:12:c2:b7:ee:d2:0a:e1:31:8b:b9:c5:13:85:7e:c7:
         44:45:e8:32:6d:d6:41:d7:34:50:b0:6a:c9:73:47:e3:4e:df:
         66:05:ec:3b:0a:a7:53:7b:4e:43:ad:51:eb:ad:49:14:14:86:
         87:15:ad:b2:d4:ae:80:67:c1:18:1b:23:23:e8:79:1e:ba:0b:
         bb:8b:56:9a:c4:f4:f6:35:78:59:b5:75:1d:a6:e2:0e:44:4a:
         33:5c:7f:91:df:50:e2:d8:16:c7:09:54:53:37:c4:1b:a0:35:
         87:22:a0:1a:43:39:bd:78:f5:b3:04:79:cf:ce:2c:06:47:6c:
         03:86:c4:0e:17:3a:65:63:50:fa:76:4d:de:4e:86:db:e8:40:
         1b:f6:11:4e:19:78:bc:de:a8:d9:11:c4:e9:e4:6b:d5:18:85:
         7d:6d:ce:be:13:f0:a6:56:8f:99:02:9b:ce:a9:47:27:47:66:
         c2:7a:26:16:6f:94:4a:38:e5:8b:8b:a9:38:19:3c:2d:29:07:
         00:25:cf:cd:71:09:b2:b5:2c:ba:51:0a:17:30:af:96:7e:00:
         ff:4f:d0:46:20:1e:d1:6b:15:46:dc:92:61:5a:ac:cf:47:37:
         c3:10:f1:85:e7:66:8c:5a:09:43:24:9f:c8:37:85:56:5f:57:
         ad:65:6f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:17 2024 by rpki-client on console-ams.rpki-client.org