Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3SqSbPoAzeR7AoDXKWWFuDw6Nw0.roa
File:                     3SqSbPoAzeR7AoDXKWWFuDw6Nw0.roa (raw, json)
Hash identifier:          1A0NcrFDOEEWQPnHkL4io9SyULV3BrkBbkUJIz1HOJA=
Subject key identifier:   DD:2A:92:6C:FA:00:CD:E4:7B:02:80:D7:29:65:85:B8:3C:3A:37:0D
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       2A57
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3SqSbPoAzeR7AoDXKWWFuDw6Nw0.roa
Signing time:             Fri 01 Sep 2023 10:07:47 +0000
ROA not before:           Fri 01 Sep 2023 10:07:47 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     38841
IP address blocks:        118.233.50.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10839 (0x2a57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep  1 10:07:47 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=DD2A926CFA00CDE47B0280D7296585B83C3A370D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:65:aa:af:ca:c2:4a:af:28:b1:cf:02:55:c5:
                    7e:6a:4a:25:db:c6:ee:fd:2f:e0:39:6e:87:83:f2:
                    ff:02:2a:cc:ce:0f:00:40:e7:bd:1e:af:70:5b:b1:
                    e1:85:22:44:fe:c8:42:a0:81:34:55:12:71:1a:a4:
                    f0:81:12:83:e9:75:98:1a:32:11:ec:05:de:b5:3d:
                    ad:fe:28:c3:c6:a0:85:56:e5:5a:d6:76:fb:8c:8c:
                    99:cb:cb:eb:74:7a:b6:4c:c8:83:ee:5e:30:c7:b4:
                    d7:c5:41:65:ea:3c:a6:ad:d7:d5:99:72:e3:b7:ef:
                    e3:02:21:fe:3b:85:19:99:50:fe:1a:35:15:bb:08:
                    8e:c8:1a:64:8f:27:b0:9c:99:c4:ba:70:6e:a9:e1:
                    ab:a2:23:da:24:9f:66:2c:28:6b:3d:36:32:b1:18:
                    e7:6a:a0:bc:78:4a:11:22:79:30:9e:49:63:f8:c8:
                    8c:fa:64:2e:1b:24:9b:ba:4a:4c:c4:d1:e2:34:f4:
                    f6:2f:52:28:89:e4:e2:d2:3e:1c:1d:0f:4a:5c:8f:
                    23:37:49:69:1c:4c:ba:9f:a3:26:ac:14:f3:8f:1f:
                    61:22:e1:29:95:84:49:5f:77:bd:53:34:a2:53:e7:
                    44:8b:2e:d6:11:b5:4f:87:8e:de:64:ee:cb:45:2f:
                    b1:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:2A:92:6C:FA:00:CD:E4:7B:02:80:D7:29:65:85:B8:3C:3A:37:0D
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3SqSbPoAzeR7AoDXKWWFuDw6Nw0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.233.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:f8:8d:bd:27:d3:6a:c3:56:3a:85:2c:a9:7d:40:3d:28:55:
         a7:0b:72:d3:ad:64:77:1d:e4:91:ac:a8:e3:a9:56:6b:7c:86:
         fe:bb:24:3d:6b:4b:7f:98:5f:c5:bf:6e:8a:b2:cd:d2:2c:11:
         46:c4:73:c2:63:e6:3a:b8:dd:67:3f:be:90:9a:a9:0c:c6:c8:
         06:ee:12:ce:67:69:05:c3:f0:6a:9a:a6:bd:c0:92:50:86:5e:
         b8:e8:d2:3e:52:ea:19:2c:9b:1f:e5:5d:b0:10:c4:21:0b:7a:
         0d:97:38:1a:2f:a6:a1:04:3c:da:06:c4:65:59:d9:1e:27:a9:
         1c:d5:a9:eb:9b:13:39:0e:79:69:09:f0:78:be:d4:cd:d8:bf:
         bd:55:9e:97:71:37:b4:14:66:3c:12:e6:d3:7f:06:5e:9d:41:
         e8:0b:78:38:21:93:36:27:37:32:93:56:f0:86:3f:1e:41:fe:
         f2:2f:2b:7f:c6:f6:92:67:1b:a8:d0:76:78:92:f3:dc:01:d0:
         ef:fb:c0:73:ed:20:7b:ed:40:bf:5d:83:01:44:77:49:b7:55:
         dc:eb:d5:95:76:58:cb:16:f0:3a:0a:02:dc:99:09:16:00:b9:
         c7:4f:cb:1a:84:55:f1:ec:e4:63:f8:c0:ba:1a:17:0b:fc:4f:
         8e:77:ab:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:24 2024 by rpki-client on console-fra.rpki-client.org