Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6jo8hJ1Sdpke-RX_Hv921NXa7uY.roa
File:                     6jo8hJ1Sdpke-RX_Hv921NXa7uY.roa (raw, json)
Hash identifier:          Gkc3bpTuS03OudcMEthC/hp+m5XxYdPsKMZJIQiwuPE=
Subject key identifier:   EA:3A:3C:84:9D:52:76:99:1E:F9:15:FF:1E:FF:76:D4:D5:DA:EE:E6
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       2907
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6jo8hJ1Sdpke-RX_Hv921NXa7uY.roa
Signing time:             Fri 01 Sep 2023 10:06:04 +0000
ROA not before:           Fri 01 Sep 2023 10:06:04 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     38841
IP address blocks:        180.176.0.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10503 (0x2907)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep  1 10:06:04 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=EA3A3C849D5276991EF915FF1EFF76D4D5DAEEE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:39:54:2b:d7:67:0c:ad:54:a4:dc:7a:e1:9f:
                    e8:79:a4:d7:17:bd:11:c9:f8:8d:b1:91:ac:ce:d1:
                    d8:48:f8:cb:b5:67:ae:48:a6:09:02:2c:0e:7f:d0:
                    f2:02:5a:dc:14:4b:0f:a1:97:12:42:af:fe:5c:72:
                    a0:87:f6:94:65:6d:9c:ff:0e:52:f9:af:f0:a3:98:
                    ee:0c:59:05:2d:00:1e:69:17:ba:c5:99:3a:df:8c:
                    01:32:17:b5:1f:e6:b9:52:70:ca:b0:b1:d7:7e:9e:
                    7a:5f:f1:46:ab:84:52:15:51:27:4f:ec:41:0f:f6:
                    03:98:51:be:f8:86:9e:33:0e:2f:37:7c:af:ab:d9:
                    83:f8:01:4c:9c:85:7b:66:94:66:40:bf:03:1f:f2:
                    da:f2:be:7f:01:81:91:3a:44:3d:fc:6c:34:d4:03:
                    8f:91:17:22:16:40:d9:e7:7b:41:2b:e7:2f:52:49:
                    03:a3:7e:68:4b:c0:7c:ac:c0:11:91:d9:52:f0:4c:
                    d0:0d:71:01:48:57:ff:eb:d3:0a:7b:fd:6a:c9:b6:
                    e0:b9:27:e2:39:d2:71:0c:ca:30:3b:73:5c:5c:a7:
                    b1:16:16:fb:97:d6:e7:06:5e:77:2f:2e:a0:fc:f2:
                    6a:75:59:9d:ca:0c:1e:59:58:6a:54:97:6b:00:d1:
                    04:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:3A:3C:84:9D:52:76:99:1E:F9:15:FF:1E:FF:76:D4:D5:DA:EE:E6
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6jo8hJ1Sdpke-RX_Hv921NXa7uY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:8e:95:aa:50:c4:09:6d:12:69:0d:7d:a3:67:64:b7:6b:02:
         92:9a:8d:af:b0:c6:80:3e:4e:3c:1f:f2:d8:1b:46:ca:c6:0e:
         07:dc:e2:74:47:a1:f8:81:ed:95:48:11:1e:14:57:19:3b:94:
         46:81:7e:cd:a3:02:2a:b6:8e:5f:d3:94:27:22:7f:60:17:41:
         c7:36:05:4a:7d:a7:d8:70:39:89:67:7b:31:55:70:4b:21:1f:
         a3:bc:7d:03:a7:c2:b2:28:04:eb:1e:96:8e:f4:51:9c:5f:01:
         df:5a:3a:b8:8b:ed:a9:55:05:07:ee:68:e2:89:30:bd:0f:9d:
         38:be:8e:f6:c8:6a:bc:06:02:b7:0c:69:cd:5f:c1:0a:cb:02:
         96:5e:c1:62:1c:47:5b:79:f3:31:a3:bf:09:d9:2d:fc:f0:57:
         09:4a:e7:a8:6b:61:39:73:67:f0:8f:aa:d4:4b:2b:8e:4e:ef:
         79:ee:78:ea:18:d8:f5:f9:ba:c7:f0:32:58:ae:26:b2:d7:5e:
         28:97:d4:c1:9e:35:2a:58:ad:aa:e9:40:aa:13:27:42:df:f4:
         a3:d9:f7:72:33:b3:10:93:73:5f:4f:6e:06:88:d9:2f:f8:40:
         cf:ff:fe:fe:7c:27:2d:b7:a8:27:e0:63:ea:6a:dd:1f:d4:ed:
         11:1b:c1:a5
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICKQcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx
MDA2MDRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEVBM0EzQzg0OUQ1Mjc2
OTkxRUY5MTVGRjFFRkY3NkQ0RDVEQUVFRTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD2OVQr12cMrVSk3Hrhn+h5pNcXvRHJ+I2xkazO0dhI+Mu1Z65I
pgkCLA5/0PICWtwUSw+hlxJCr/5ccqCH9pRlbZz/DlL5r/CjmO4MWQUtAB5pF7rF
mTrfjAEyF7Uf5rlScMqwsdd+nnpf8UarhFIVUSdP7EEP9gOYUb74hp4zDi83fK+r
2YP4AUychXtmlGZAvwMf8tryvn8BgZE6RD38bDTUA4+RFyIWQNnne0Er5y9SSQOj
fmhLwHyswBGR2VLwTNANcQFIV//r0wp7/WrJtuC5J+I50nEMyjA7c1xcp7EWFvuX
1ucGXncvLqD88mp1WZ3KDB5ZWGpUl2sA0QRfAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU6jo8hJ1Sdpke+RX/Hv921NXa7uYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzZqbzhoSjFTZHBrZS1SWF9I
djkyMU5YYTd1WS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0
sAAwDQYJKoZIhvcNAQELBQADggEBAD+OlapQxAltEmkNfaNnZLdrApKaja+wxoA+
Tjwf8tgbRsrGDgfc4nRHofiB7ZVIER4UVxk7lEaBfs2jAiq2jl/TlCcif2AXQcc2
BUp9p9hwOYlnezFVcEshH6O8fQOnwrIoBOselo70UZxfAd9aOriL7alVBQfuaOKJ
ML0PnTi+jvbIarwGArcMac1fwQrLApZewWIcR1t58zGjvwnZLfzwVwlK56hrYTlz
Z/CPqtRLK45O73nueOoY2PX5usfwMliuJrLXXiiX1MGeNSpYrarpQKoTJ0Lf9KPZ
93IzsxCTc19PbgaI2S/4QM///v58Jy23qCfgY+pq3R/U7REbwaU=
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:24 2024 by rpki-client on console-fra.rpki-client.org