Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6iY5k5eWlNFqFfHy2hT9mqZ6IEU.roa
File:                     6iY5k5eWlNFqFfHy2hT9mqZ6IEU.roa (raw, json)
Hash identifier:          yEGQd4HcyTrU3un+SCImuHdrXMRLksBUny+cu5tFOW0=
Subject key identifier:   EA:26:39:93:97:96:94:D1:6A:15:F1:F2:DA:14:FD:9A:A6:7A:20:45
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       27E8
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6iY5k5eWlNFqFfHy2hT9mqZ6IEU.roa
Signing time:             Fri 01 Sep 2023 10:04:42 +0000
ROA not before:           Fri 01 Sep 2023 10:04:42 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     38841
IP address blocks:        123.194.75.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10216 (0x27e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep  1 10:04:42 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=EA263993979694D16A15F1F2DA14FD9AA67A2045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9a:9b:3b:5a:5b:75:1a:2b:e6:c4:e1:92:34:
                    db:dd:db:18:8f:c3:0b:e2:35:83:78:8e:de:83:39:
                    08:f0:26:d6:34:fb:7b:b7:54:a3:3e:54:61:42:6e:
                    24:0d:37:7d:6a:20:49:bc:38:51:3b:2f:63:a4:ad:
                    dc:3e:de:a0:e7:d3:13:75:39:f2:ab:b0:d1:af:2c:
                    30:24:83:f9:5d:d2:9d:cc:90:55:77:55:8d:b9:c3:
                    03:c6:3e:3c:32:7d:cd:6d:0e:8d:3e:b3:35:0a:b6:
                    4f:a2:ba:08:97:80:6a:3c:ca:8d:1f:f2:59:03:00:
                    f2:07:0e:38:15:2c:89:e5:c9:6c:bf:48:c3:3a:af:
                    28:e0:a7:9f:b4:e6:4d:29:11:61:39:47:4f:35:59:
                    67:f6:5c:44:26:13:f9:17:de:92:1a:1b:cb:f4:ee:
                    bb:dd:db:63:5b:e0:86:ed:dd:c1:c3:2c:38:b2:83:
                    d7:aa:ff:da:66:dd:44:0d:01:9a:e2:a2:23:de:13:
                    8d:b5:81:25:21:c4:94:43:3b:a3:c1:ba:44:7a:95:
                    82:25:1f:ca:ec:d5:7d:23:5d:25:0f:98:45:c4:ae:
                    7c:4d:40:31:fa:fe:54:86:b3:03:ee:12:31:28:a5:
                    d8:6b:db:81:ae:5a:0f:b2:ec:40:d8:74:1c:5f:bc:
                    4a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:26:39:93:97:96:94:D1:6A:15:F1:F2:DA:14:FD:9A:A6:7A:20:45
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6iY5k5eWlNFqFfHy2hT9mqZ6IEU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:13:de:23:aa:d3:ea:b5:2c:bc:e3:e9:d3:9d:4f:5f:0a:c2:
         9d:03:b8:28:a6:c2:2c:dd:9b:07:60:47:2b:b5:52:28:d5:98:
         7d:ff:be:e7:fa:74:d6:f8:11:3c:7c:42:5a:97:5d:45:d5:e2:
         92:70:5a:e3:c5:df:10:4e:70:20:99:0b:84:03:c3:02:ef:44:
         6d:b6:61:2b:c8:56:b1:00:65:4e:cc:e1:36:03:20:46:63:72:
         d0:35:bf:95:ea:57:c0:4e:8f:65:1b:75:b2:57:00:64:c0:9a:
         e3:c5:69:f3:9c:32:ba:cc:95:94:f7:69:f3:9d:f3:4a:74:4f:
         9a:5a:01:64:97:9b:e3:c2:54:cf:4b:3d:a9:93:fa:b2:4d:a4:
         e8:bd:f7:c8:9a:d6:59:f5:83:22:91:ae:7f:0a:c7:78:9c:99:
         3b:75:dd:60:d6:a8:d6:6d:6a:6d:b5:a4:06:ea:d7:1b:3c:3d:
         e7:ed:f4:00:3d:25:56:cc:3c:5b:ee:0f:bb:38:5d:40:59:b2:
         12:00:5d:9d:da:3e:e7:ec:f4:f7:82:af:f4:4b:14:a7:e9:84:
         7b:11:d4:30:d0:3e:c3:e4:93:5e:7f:c3:07:f3:fd:61:81:89:
         5c:82:3e:8a:cc:44:9b:e5:37:18:2c:47:2b:95:ca:3a:4a:e4:
         d0:57:93:d6
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICJ+gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx
MDA0NDJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEVBMjYzOTkzOTc5Njk0
RDE2QTE1RjFGMkRBMTRGRDlBQTY3QTIwNDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDGmps7Wlt1GivmxOGSNNvd2xiPwwviNYN4jt6DOQjwJtY0+3u3
VKM+VGFCbiQNN31qIEm8OFE7L2Okrdw+3qDn0xN1OfKrsNGvLDAkg/ld0p3MkFV3
VY25wwPGPjwyfc1tDo0+szUKtk+iugiXgGo8yo0f8lkDAPIHDjgVLInlyWy/SMM6
ryjgp5+05k0pEWE5R081WWf2XEQmE/kX3pIaG8v07rvd22Nb4Ibt3cHDLDiyg9eq
/9pm3UQNAZrioiPeE421gSUhxJRDO6PBukR6lYIlH8rs1X0jXSUPmEXErnxNQDH6
/lSGswPuEjEopdhr24GuWg+y7EDYdBxfvEr/AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU6iY5k5eWlNFqFfHy2hT9mqZ6IEUwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzZpWTVrNWVXbE5GcUZmSHky
aFQ5bXFaNklFVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB7
wkswDQYJKoZIhvcNAQELBQADggEBAGgT3iOq0+q1LLzj6dOdT18Kwp0DuCimwizd
mwdgRyu1UijVmH3/vuf6dNb4ETx8QlqXXUXV4pJwWuPF3xBOcCCZC4QDwwLvRG22
YSvIVrEAZU7M4TYDIEZjctA1v5XqV8BOj2UbdbJXAGTAmuPFafOcMrrMlZT3afOd
80p0T5paAWSXm+PCVM9LPamT+rJNpOi998ia1ln1gyKRrn8Kx3icmTt13WDWqNZt
am21pAbq1xs8Peft9AA9JVbMPFvuD7s4XUBZshIAXZ3aPufs9PeCr/RLFKfphHsR
1DDQPsPkk15/wwfz/WGBiVyCPorMRJvlNxgsRyuVyjpK5NBXk9Y=
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:24 2024 by rpki-client on console-fra.rpki-client.org