Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1TUm3dtO1I6-UJT61XUeCReha4U.roa
File:                     1TUm3dtO1I6-UJT61XUeCReha4U.roa (raw, json)
Hash identifier:          PxJwgwQFo5Zs049SvimMIJYubU+vlbJhtgfQBXw5ipY=
Subject key identifier:   D5:35:26:DD:DB:4E:D4:8E:BE:50:94:FA:D5:75:1E:09:17:A1:6B:85
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       2981
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1TUm3dtO1I6-UJT61XUeCReha4U.roa
Signing time:             Fri 01 Sep 2023 10:06:41 +0000
ROA not before:           Fri 01 Sep 2023 10:06:41 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     38841
IP address blocks:        106.1.108.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10625 (0x2981)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep  1 10:06:41 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=D53526DDDB4ED48EBE5094FAD5751E0917A16B85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ca:ad:1f:80:16:06:e9:c6:81:84:46:78:f2:
                    d4:12:58:6c:22:91:6b:60:be:65:5f:99:fa:5a:c8:
                    a1:aa:00:30:21:17:b1:9d:43:b6:9f:19:91:0a:85:
                    a4:a6:45:c9:d5:fe:19:82:0a:ca:8a:9b:d7:46:4d:
                    ee:da:10:d4:66:52:d4:cd:5e:da:b7:4f:ad:cc:8f:
                    89:98:88:e3:29:37:1f:c1:53:38:38:21:dc:be:4a:
                    0a:bb:b5:f5:21:55:ba:8f:2b:c3:1e:f9:f3:8b:ed:
                    2c:91:1c:70:6d:be:b8:4e:16:69:bd:b8:90:bb:a8:
                    72:45:49:92:44:3c:78:51:a1:a1:da:f6:05:d5:f5:
                    35:97:0c:13:db:6f:47:e7:ad:d9:8b:5f:5f:87:d2:
                    07:12:91:d8:80:b3:37:db:45:33:a7:35:3a:03:94:
                    0f:d7:99:b2:de:a1:1f:39:39:87:75:15:a6:2b:95:
                    ba:e7:8f:3c:ff:19:6e:75:1f:8d:eb:9d:2f:49:41:
                    cb:64:ae:9c:63:ac:7e:e5:68:d7:91:79:0e:cf:7a:
                    2b:58:d9:a8:24:a8:84:e2:0c:44:47:b2:8a:ac:68:
                    34:69:50:28:d8:c7:7d:56:b6:c6:ad:1e:21:c4:b7:
                    b1:c8:15:69:81:8d:c7:52:b3:91:61:e2:6f:38:76:
                    13:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:35:26:DD:DB:4E:D4:8E:BE:50:94:FA:D5:75:1E:09:17:A1:6B:85
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1TUm3dtO1I6-UJT61XUeCReha4U.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ab:7c:f3:e9:79:f7:d4:04:67:17:2a:f2:40:3d:68:78:54:89:
         4d:9e:2a:7f:eb:7b:3b:3a:75:c9:6d:6e:ef:38:ae:00:30:de:
         28:2f:b7:f7:2c:0c:cc:25:44:86:92:a7:03:99:29:a2:f1:3a:
         f0:0a:1c:cd:84:69:5b:bc:ee:81:79:a3:8a:ea:68:6a:f3:b9:
         c2:5d:34:53:5c:db:fc:86:69:5f:ec:40:b2:02:94:c2:38:fb:
         24:ae:59:9a:ff:ce:51:6b:9f:6c:6e:07:84:d8:e2:66:82:81:
         35:fb:fe:0b:9d:3d:cc:55:56:f6:17:c7:1b:92:f7:00:6e:8e:
         8c:6c:4f:b2:67:ca:2c:57:f2:ad:ad:d1:dc:38:6b:27:1f:5f:
         4d:ac:5d:da:93:a1:8a:60:0d:48:ad:d7:e4:6e:3c:b6:45:2f:
         dd:46:e9:3d:0f:d2:de:61:f8:e2:a3:b4:ec:23:d0:49:9e:85:
         2c:af:37:c4:6a:60:1c:2d:77:8a:6a:bf:67:2d:46:ca:6d:6c:
         0e:89:d4:bf:d6:cb:20:8e:cc:10:0c:f6:40:4c:42:84:46:ea:
         f3:16:37:25:db:7c:0d:43:c4:a9:45:82:fe:69:aa:f7:81:96:
         5b:5d:f7:b3:93:e2:76:96:2f:b1:f7:b7:2a:17:e3:03:fe:55:
         6e:ed:f1:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:24 2024 by rpki-client on console-fra.rpki-client.org