Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/48OE8j9HlVq9iBTPdZV3BxiXIPo.roa
File:                     48OE8j9HlVq9iBTPdZV3BxiXIPo.roa (raw, json)
Hash identifier:          8hpYuudLqmSnFX0dcIiBmYS3FOg60LHCZnhx1LZtGT0=
Subject key identifier:   E3:C3:84:F2:3F:47:95:5A:BD:88:14:CF:75:95:77:07:18:97:20:FA
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       29DE
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/48OE8j9HlVq9iBTPdZV3BxiXIPo.roa
Signing time:             Fri 01 Sep 2023 10:07:11 +0000
ROA not before:           Fri 01 Sep 2023 10:07:11 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     38841
IP address blocks:        118.233.196.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10718 (0x29de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep  1 10:07:11 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=E3C384F23F47955ABD8814CF75957707189720FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:09:ed:0c:05:22:3e:83:c7:94:46:95:0b:8c:
                    de:64:d8:a6:77:e8:3e:74:8f:ca:a5:f1:76:01:53:
                    e4:ba:23:b8:7b:df:08:94:d0:4b:08:b5:c6:71:86:
                    7c:77:5f:f1:e1:09:46:9a:23:b3:65:5e:3c:46:3e:
                    85:52:a0:7a:27:93:43:bd:c7:e9:79:30:65:01:48:
                    69:9e:60:b9:f3:b2:85:f9:8c:fe:2a:17:f1:66:2f:
                    1c:34:6d:17:79:8e:6a:0b:fa:d5:6b:7a:89:30:f4:
                    d9:00:65:7e:75:f3:1c:28:52:ed:44:24:c4:94:ae:
                    3d:f6:a4:0f:57:fa:c8:de:5e:2e:be:42:11:1e:8a:
                    2b:90:9b:1c:3b:34:d9:61:d0:64:04:d1:26:a3:60:
                    e4:88:9a:1a:b5:85:79:49:66:88:81:4b:a8:25:a4:
                    89:c7:1c:fb:25:a8:d3:e5:97:69:57:b0:a0:81:cb:
                    bf:4c:cd:f6:b5:a8:f4:af:33:c0:29:0b:68:8e:de:
                    83:ea:df:c3:36:07:60:81:0d:82:fb:f6:01:2b:4d:
                    a7:db:81:67:36:7f:15:00:54:f4:cf:e3:0b:40:36:
                    51:12:d3:ed:29:c0:cd:9d:2d:3e:fa:2c:62:66:be:
                    ce:91:1a:06:80:67:f0:9a:eb:a2:95:21:f3:64:58:
                    63:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:C3:84:F2:3F:47:95:5A:BD:88:14:CF:75:95:77:07:18:97:20:FA
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/48OE8j9HlVq9iBTPdZV3BxiXIPo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.233.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:6b:cf:d9:aa:f8:0f:b2:cf:e9:51:79:f4:a9:51:cf:ea:8c:
         5c:46:f1:a7:6a:1f:0e:a2:39:61:59:2a:33:36:03:ef:b0:2d:
         15:a5:a6:76:f4:f2:aa:d8:97:45:ac:ba:54:99:50:2a:5b:cb:
         d2:0a:42:c0:2f:53:d4:3f:6e:43:6e:56:0c:91:d3:27:38:2f:
         7a:42:d7:0b:9f:07:85:1a:9d:bb:f8:a7:61:94:4e:f8:a7:d4:
         a2:44:4c:61:5b:cf:ae:6e:58:1a:bd:b0:ee:8e:a3:86:f1:19:
         3e:c0:3b:47:2d:4b:70:a8:59:b9:74:51:ac:e1:e5:9c:85:2a:
         f1:3b:10:27:4b:1e:5a:ab:c2:1f:10:c1:91:ef:b1:9f:d3:4b:
         98:33:04:7c:96:54:b8:f0:a7:7a:00:4f:ee:8d:7d:51:54:7c:
         8c:05:5e:3b:c3:5f:60:f7:33:dc:e8:c5:51:40:67:cc:c8:99:
         44:8e:f2:d5:3b:9e:57:91:72:5a:c3:cf:10:e3:95:78:61:68:
         46:48:d5:b8:8d:6b:38:c6:1d:9c:8d:01:48:f3:53:d6:84:68:
         16:75:8a:c2:45:6c:cc:ca:bd:1f:58:54:90:35:2b:a5:a2:9b:
         fb:ff:a4:7d:be:f8:18:f5:c3:1b:14:32:48:b9:4c:a1:f3:8c:
         40:41:ca:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:24 2024 by rpki-client on console-fra.rpki-client.org