Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2SQsKvtpv6KaOwARyJ59cT265ns.roa
File:                     2SQsKvtpv6KaOwARyJ59cT265ns.roa (raw, json)
Hash identifier:          OWl42KprTXjgPn802y9CSB6f0xxAnnpZqcwqUOhvnnc=
Subject key identifier:   D9:24:2C:2A:FB:69:BF:A2:9A:3B:00:11:C8:9E:7D:71:3D:BA:E6:7B
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       2B02
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2SQsKvtpv6KaOwARyJ59cT265ns.roa
Signing time:             Fri 01 Sep 2023 10:09:45 +0000
ROA not before:           Fri 01 Sep 2023 10:09:45 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     38841
IP address blocks:        118.232.112.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11010 (0x2b02)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep  1 10:09:45 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=D9242C2AFB69BFA29A3B0011C89E7D713DBAE67B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:8a:91:75:86:95:f2:f2:2a:7d:8d:11:78:12:
                    6f:76:9e:32:98:32:13:ae:fa:cc:55:82:40:bd:93:
                    26:a7:bd:23:b7:0c:0f:3b:12:3d:4a:e0:93:a7:02:
                    d4:7b:cf:af:6c:4e:ef:e2:40:f3:fa:b6:76:1d:c6:
                    ea:ba:f9:d8:b5:f2:a9:10:47:08:26:53:b1:51:f3:
                    2e:c8:7b:a9:56:60:8b:af:0d:49:72:b7:06:51:9c:
                    2b:dc:4e:12:9e:35:a9:7f:5d:0f:dc:61:38:63:b6:
                    13:c2:7d:73:49:14:20:db:2c:39:44:bd:65:c8:f9:
                    06:73:d1:08:64:dc:d2:14:a2:a7:00:b6:22:6e:26:
                    76:1a:63:d3:d8:b8:48:34:ae:ca:a2:f3:2b:a0:35:
                    ef:df:7c:7e:e2:22:f7:48:90:d9:9c:47:5d:7f:1e:
                    77:bd:93:60:ff:b1:d7:93:6c:ff:49:b4:7f:30:be:
                    12:65:63:72:da:26:f2:1d:93:0b:34:8f:ee:c8:9c:
                    1e:ff:30:56:92:74:bc:b2:96:72:4e:f6:93:3b:b2:
                    29:63:96:11:ce:e1:85:7c:a1:72:91:55:b2:1d:24:
                    5e:d7:d8:b2:a4:94:b0:b0:ab:b2:a3:0c:c7:41:ad:
                    79:b4:78:d3:dc:1a:e1:84:85:bb:c8:1e:ac:f1:b7:
                    96:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:24:2C:2A:FB:69:BF:A2:9A:3B:00:11:C8:9E:7D:71:3D:BA:E6:7B
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2SQsKvtpv6KaOwARyJ59cT265ns.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:28:8a:99:45:e5:4e:a4:70:02:c2:ea:7f:f5:b3:c9:b1:be:
         36:ae:33:32:64:81:6c:25:1f:f3:77:fd:29:95:84:20:c1:cd:
         52:9c:71:98:7a:68:fc:5a:ea:3e:c9:97:cc:c1:28:12:a8:bb:
         7b:ad:07:29:54:96:e2:46:7e:e8:fc:68:f6:aa:a9:bb:ed:dc:
         c7:ce:52:65:41:42:32:5b:a9:78:cc:26:92:1e:ef:11:33:5e:
         63:d9:9d:cb:1f:3b:d7:89:5c:88:af:2e:03:00:ae:06:5d:db:
         f7:62:94:bd:b2:15:1f:f6:25:56:cf:6a:b0:5d:56:c8:e8:06:
         18:a6:a5:c5:d6:d5:e9:79:8c:e8:48:13:ed:3b:e7:01:5f:be:
         a1:27:ee:fd:28:27:18:f8:2d:b1:5a:fa:ee:c6:b6:70:87:fc:
         63:4f:e1:d7:b7:61:36:f8:27:f6:3a:a0:5d:11:55:7c:4b:a3:
         bf:d3:9e:e4:65:24:4f:c7:2f:77:17:d1:f3:3b:5f:ec:ce:ac:
         1a:bc:1b:2a:4f:9f:c0:c4:98:86:78:bd:e6:4f:b2:77:88:86:
         9c:df:d7:65:28:d0:9a:ce:b8:fd:f0:c2:b2:62:f6:43:45:d2:
         04:44:9f:69:bf:15:0b:f9:15:bb:50:3d:88:ea:74:e7:04:ea:
         44:8d:43:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:17 2024 by rpki-client on console-ams.rpki-client.org