Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0GC_SYx7GZfL5hc_vpO7YlPDTBQ.roa
File:                     0GC_SYx7GZfL5hc_vpO7YlPDTBQ.roa (raw, json)
Hash identifier:          8ouTZ3rLFxQfHMCcGAgDLlv7/h7RbjdHTEmbntL018E=
Subject key identifier:   D0:60:BF:49:8C:7B:19:97:CB:E6:17:3F:BE:93:BB:62:53:C3:4C:14
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       29CD
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0GC_SYx7GZfL5hc_vpO7YlPDTBQ.roa
Signing time:             Fri 01 Sep 2023 10:07:05 +0000
ROA not before:           Fri 01 Sep 2023 10:07:05 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     38841
IP address blocks:        180.176.232.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10701 (0x29cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep  1 10:07:05 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=D060BF498C7B1997CBE6173FBE93BB6253C34C14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:6d:7d:e9:a7:83:71:b9:27:08:94:d7:25:fb:
                    ff:9a:8c:96:1d:06:df:21:e8:24:5f:87:05:ce:04:
                    31:e5:64:5e:91:f8:f9:3a:e5:2e:2f:35:72:83:96:
                    f1:c4:38:bb:41:59:04:0c:19:18:55:54:fb:0c:9e:
                    cd:78:42:45:ec:f2:2d:95:7d:a6:e5:1a:4b:0d:45:
                    49:a4:05:ba:a3:5b:dc:59:10:36:28:15:90:d4:47:
                    f5:e0:d1:29:f6:09:d3:c6:18:66:13:b3:b2:ea:ed:
                    a8:f1:de:59:99:93:36:0d:c5:86:bb:e0:0f:b7:2d:
                    67:17:66:95:b5:a1:75:33:21:c7:1a:bb:f3:ee:35:
                    53:2e:49:63:58:a7:7c:b8:0c:98:18:02:cc:bf:ef:
                    2b:18:b9:80:de:07:eb:6c:97:8a:85:a7:6b:13:59:
                    ca:75:7f:c1:0c:97:16:fb:39:10:55:89:a7:df:26:
                    9e:fb:47:f9:8a:0b:79:a4:0b:ea:83:f9:b2:18:d0:
                    65:5e:87:86:80:ee:f6:f2:47:a6:d0:7b:45:37:a0:
                    c2:f5:8c:c6:74:84:f1:e6:09:cc:0a:d4:4d:03:3f:
                    29:9d:43:59:8e:10:66:aa:e4:94:4f:f9:61:5c:23:
                    f6:c5:cb:4b:1e:c0:6a:f2:c0:ef:77:59:81:3c:a2:
                    88:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:60:BF:49:8C:7B:19:97:CB:E6:17:3F:BE:93:BB:62:53:C3:4C:14
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0GC_SYx7GZfL5hc_vpO7YlPDTBQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:87:bb:d0:31:fc:7a:6b:7f:e0:53:5f:f6:de:a4:91:b6:11:
         2d:d9:90:ab:e8:1c:01:32:5b:35:fc:62:39:3c:2d:98:3b:c1:
         88:d3:cf:9b:96:0f:cf:7f:80:fd:74:7b:fb:94:0f:e7:bd:6a:
         9d:e7:bf:62:4a:4b:82:b8:36:c0:dc:73:6d:62:c0:18:5c:ea:
         53:2c:cb:07:04:95:81:cb:73:d5:51:80:61:3b:b7:8d:01:5a:
         64:21:70:55:f1:02:ca:ee:fb:f1:61:bf:cb:18:a8:6d:56:fd:
         4c:ff:fd:61:84:ef:66:87:59:b9:0e:13:1a:03:25:3b:bc:22:
         a7:ee:cb:13:64:09:8d:9c:0a:89:7e:ef:0b:df:e4:5c:e2:ac:
         cd:39:b7:41:6c:e7:4e:a3:1a:e4:95:ed:44:20:42:32:d4:d9:
         78:8a:9d:38:df:2f:48:dd:93:b2:cf:4b:e0:68:bc:c5:14:a1:
         0c:c5:64:55:c1:aa:12:35:4b:28:d9:5c:b1:b0:3f:ca:79:3b:
         97:45:3f:e1:f3:55:6c:62:1e:05:6d:8a:de:bb:c8:96:ba:15:
         b2:f6:48:60:e4:d3:ac:02:25:77:4d:37:c3:31:12:53:ee:ca:
         09:51:b5:21:27:be:96:c4:81:a4:b7:66:2d:cb:c0:67:e8:16:
         93:66:24:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:23 2024 by rpki-client on console-fra.rpki-client.org