Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4P8tk2Ba5Ts_FMwXFquPKokFEMU.roa
File:                     4P8tk2Ba5Ts_FMwXFquPKokFEMU.roa (raw, json)
Hash identifier:          TanvwGKHIPfgZwWe5rIw5M8EuRHYFxczf2sIYGqmG+I=
Subject key identifier:   E0:FF:2D:93:60:5A:E5:3B:3F:14:CC:17:16:AB:8F:2A:89:05:10:C5
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       29EE
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4P8tk2Ba5Ts_FMwXFquPKokFEMU.roa
Signing time:             Fri 01 Sep 2023 10:07:16 +0000
ROA not before:           Fri 01 Sep 2023 10:07:16 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     38841
IP address blocks:        118.232.0.0/15 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10734 (0x29ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep  1 10:07:16 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=E0FF2D93605AE53B3F14CC1716AB8F2A890510C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f9:f9:20:93:19:09:31:2d:0d:c8:6a:3f:84:
                    a7:ae:01:00:f6:23:90:51:8f:45:52:3a:0d:ed:7e:
                    86:c0:ab:8b:5b:db:cb:5f:44:8b:2f:18:05:c5:f9:
                    2c:d8:d3:dc:0a:a1:39:b0:7c:f6:56:b6:0b:ef:47:
                    a5:3d:3a:89:bf:eb:cd:24:89:a2:1a:53:d7:bd:00:
                    51:48:d3:b4:20:bb:2d:b1:74:9e:76:eb:3c:07:b4:
                    8d:2d:bc:b3:0d:c5:f0:0b:0c:ee:5e:2a:25:d2:24:
                    08:74:58:48:63:96:d1:bb:37:c8:95:c0:43:99:45:
                    06:4c:bd:4c:06:6a:5b:3b:d7:cf:75:19:3c:4d:31:
                    da:e5:60:23:57:05:7f:0f:56:ce:61:b0:6a:7d:ba:
                    d2:a8:d9:29:be:2c:9c:63:13:8c:d6:e3:97:71:b2:
                    d0:bf:c5:07:2d:9e:03:9d:c1:fb:f1:92:68:cb:25:
                    5d:7c:fb:54:6f:20:5f:69:77:55:60:0a:35:f8:0d:
                    92:b3:2a:04:95:35:b1:cd:9c:65:75:de:f7:18:28:
                    84:31:78:c2:ae:d9:ac:78:7a:03:88:08:f5:c4:35:
                    d5:0a:42:13:6b:d6:99:fb:d2:46:1c:c5:38:35:b9:
                    30:e6:e0:80:cc:15:1d:de:9f:35:c3:8b:09:09:3e:
                    f1:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:FF:2D:93:60:5A:E5:3B:3F:14:CC:17:16:AB:8F:2A:89:05:10:C5
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4P8tk2Ba5Ts_FMwXFquPKokFEMU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         04:74:8f:da:4f:57:b6:75:f3:76:0f:a1:1f:1d:77:0a:a4:ac:
         d0:22:30:73:00:6e:2b:67:2a:cb:ca:3f:4e:7b:f2:12:11:86:
         6f:0e:4e:b8:2b:42:7f:7f:58:09:6a:6a:ab:eb:27:ee:10:e3:
         45:42:8e:b6:9a:ba:a5:82:1b:b0:f0:cf:83:ed:3a:2e:cb:39:
         6e:8e:6b:84:3d:48:3c:ee:e5:0c:32:1a:07:4e:21:fb:7f:4a:
         9b:e7:78:ba:7a:07:60:db:b4:1a:fc:89:94:57:ce:af:15:44:
         17:37:e3:e6:94:74:48:8b:84:c6:a0:6b:2f:cb:d9:c1:0d:70:
         f9:97:b8:39:57:0b:72:95:9b:b6:76:2b:6b:31:a4:7c:0a:01:
         46:60:37:cd:56:ef:32:ab:c9:e4:8a:0f:56:a6:72:10:8e:d0:
         e2:fb:a5:a7:43:3e:f9:78:9f:d7:7c:d1:f0:7e:97:bb:04:07:
         9c:d3:b9:f0:eb:01:dc:95:61:1d:12:18:c3:42:3e:be:6e:af:
         ad:20:35:6d:0c:f6:9c:be:1d:89:b1:73:99:d3:52:24:55:e0:
         21:7d:0d:79:40:6c:f7:ad:e0:ec:9f:be:a1:24:9e:75:92:f9:
         cc:ec:06:23:b0:e4:10:ae:e6:95:c7:83:8e:44:c3:d9:94:55:
         aa:9f:46:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:24 2024 by rpki-client on console-fra.rpki-client.org