Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/20Xj8-yJiRZwy4kHhU7pcD0MKPc.roa
File:                     20Xj8-yJiRZwy4kHhU7pcD0MKPc.roa (raw, json)
Hash identifier:          qJiLsS+eaizhFF6rxkINUr5AattDe1UIdD4YNoo0KRA=
Subject key identifier:   DB:45:E3:F3:EC:89:89:16:70:CB:89:07:85:4E:E9:70:3D:0C:28:F7
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       2AAE
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/20Xj8-yJiRZwy4kHhU7pcD0MKPc.roa
Signing time:             Fri 01 Sep 2023 10:08:10 +0000
ROA not before:           Fri 01 Sep 2023 10:08:10 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     38841
IP address blocks:        123.192.160.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10926 (0x2aae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep  1 10:08:10 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=DB45E3F3EC89891670CB8907854EE9703D0C28F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c9:95:a8:f7:9a:84:78:2d:78:af:63:4f:ef:
                    f0:d6:1c:3b:13:ee:37:4a:25:5a:56:16:fd:fb:19:
                    b4:56:6e:e8:95:dc:0e:0b:5c:b3:f8:99:88:7b:f3:
                    27:11:c7:ee:1f:8c:fd:35:3a:70:34:20:ca:6c:42:
                    55:ad:d4:90:ce:f3:6e:e1:a8:ac:9e:6f:d0:cd:11:
                    40:2e:85:70:8f:fe:0b:04:cf:b8:c2:1f:d1:99:2f:
                    2b:06:11:27:d3:04:f3:14:42:22:c0:93:6f:5d:45:
                    cb:3c:df:ef:78:e0:ea:72:70:18:b0:74:21:cf:b9:
                    43:05:b7:f9:cc:7d:69:d1:4a:7e:05:4b:c9:ef:10:
                    8c:df:9e:aa:62:5b:f4:47:46:81:82:d2:5a:49:c2:
                    79:0f:c8:e3:50:00:9e:f0:1f:f7:e7:08:47:42:f1:
                    02:47:39:b0:6f:5c:23:f9:c6:f5:5a:2e:11:c8:ac:
                    70:15:3c:17:45:ca:8d:07:24:fb:97:a1:45:3b:a8:
                    c3:1f:84:a2:17:89:d1:57:cf:1b:03:78:03:ce:c9:
                    a5:19:f0:53:d9:57:83:b6:b5:5e:22:c5:32:fe:81:
                    06:c6:85:b7:6a:ca:8b:ec:5d:b2:80:84:a3:52:82:
                    b0:f9:63:66:e1:f7:50:91:d7:a3:f7:a2:f2:fb:45:
                    36:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:45:E3:F3:EC:89:89:16:70:CB:89:07:85:4E:E9:70:3D:0C:28:F7
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/20Xj8-yJiRZwy4kHhU7pcD0MKPc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.192.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1b:88:ee:ce:f8:c1:b3:d0:70:ae:1d:0c:64:a3:d1:f4:bc:d4:
         c7:1b:a5:2e:b5:0e:66:98:32:b9:3e:be:e4:39:9c:ea:f1:34:
         9b:fd:4e:a0:5d:bd:83:db:06:b5:ca:70:73:cd:3b:bb:8f:1a:
         d6:9f:32:76:9a:d1:33:f4:a3:2c:ad:fd:40:1a:25:d9:92:31:
         a0:d8:53:68:e5:fa:58:7c:12:c6:95:f5:31:29:19:8e:5e:27:
         04:d8:b5:04:8a:42:0d:82:2d:b7:0f:6f:f0:c7:76:58:8a:52:
         5c:2e:62:2a:1b:89:66:2c:0f:ce:c8:9e:6a:91:aa:2f:a4:1e:
         c4:0f:52:db:ab:59:6d:06:81:54:bb:2a:c1:02:51:e0:2c:ac:
         e7:29:6d:3d:ec:2d:82:a0:06:27:e8:5a:c2:b1:7e:1b:b1:53:
         af:e3:a2:b7:6f:12:27:3e:72:d3:a0:e5:88:cb:a7:51:84:8c:
         31:93:d9:54:f0:58:b7:b4:66:af:c5:06:f9:e1:d1:fa:aa:14:
         2b:90:52:37:ad:b4:1c:b4:d5:c8:6f:57:be:79:ab:3a:86:db:
         c9:28:8b:48:b2:0b:26:bd:74:04:91:ea:75:ba:c8:97:2e:e8:
         a2:c7:0a:37:c7:5f:0b:e7:0e:e0:fe:23:dd:6c:7a:53:b5:b2:
         fa:21:ee:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:24 2024 by rpki-client on console-fra.rpki-client.org