Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6pYANZiFunuMuwOHH5A3bmdik60.roa
File:                     6pYANZiFunuMuwOHH5A3bmdik60.roa (raw, json)
Hash identifier:          GBMmiP1R7KLpZ83CVfbrDt3GOmtZFrTU08VUiVywkqM=
Subject key identifier:   EA:96:00:35:98:85:BA:7B:8C:BB:03:87:1F:90:37:6E:67:62:93:AD
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       28F2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6pYANZiFunuMuwOHH5A3bmdik60.roa
Signing time:             Fri 01 Sep 2023 10:05:57 +0000
ROA not before:           Fri 01 Sep 2023 10:05:57 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     38841
IP address blocks:        123.194.205.128/28 maxlen: 28

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10482 (0x28f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep  1 10:05:57 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=EA9600359885BA7B8CBB03871F90376E676293AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:96:65:81:26:ca:88:64:71:49:05:1b:30:88:
                    82:9e:af:b9:67:b2:09:16:c0:94:88:0a:94:53:83:
                    da:1c:d6:36:30:08:ba:49:bb:35:f3:bd:1a:f6:5b:
                    c7:79:39:ce:5e:28:4a:41:f0:28:de:6d:65:f3:63:
                    3d:ee:69:50:ae:7e:d1:2f:84:0a:8b:51:56:ea:4b:
                    60:ff:d5:da:c3:45:fa:b4:95:3e:b7:25:92:af:6f:
                    c3:00:ad:41:0d:d5:79:db:9d:1b:63:82:bf:a9:e0:
                    6e:22:c3:76:58:62:72:29:06:35:60:ca:79:75:bc:
                    cf:0a:ca:7a:63:6a:cb:27:1c:4f:6c:56:c3:ad:79:
                    1b:b4:a2:ff:2d:97:e8:68:d4:b7:6a:15:c3:dd:08:
                    81:08:f6:ec:28:9b:a6:83:a7:25:69:77:f9:e6:0e:
                    28:99:a9:4f:c2:cc:6c:ab:d6:af:61:fa:9f:2e:ed:
                    cd:f0:e3:e9:3e:20:a2:bf:e3:02:9d:f8:2f:c4:00:
                    68:43:a0:49:87:c2:ff:2e:43:d5:22:5f:c8:ab:6a:
                    b8:7e:99:44:fc:a5:db:bb:0b:41:1e:ca:c8:df:3d:
                    75:b0:b4:6d:6f:94:29:71:e1:98:70:b7:83:df:43:
                    cc:60:f3:c7:21:2a:93:b4:dd:85:6d:15:5e:0a:61:
                    a8:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:96:00:35:98:85:BA:7B:8C:BB:03:87:1F:90:37:6E:67:62:93:AD
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6pYANZiFunuMuwOHH5A3bmdik60.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.205.128/28

    Signature Algorithm: sha256WithRSAEncryption
         2a:c6:f1:37:f4:13:81:42:1c:41:d7:b0:76:5d:3e:1b:44:41:
         73:c1:56:02:c0:29:3b:b1:51:a6:36:f5:c9:ae:8d:de:d6:2e:
         ba:c0:06:68:98:1e:9b:31:12:a5:d2:4c:e7:83:1f:d5:c6:c6:
         ae:c0:8b:b5:4e:a2:e0:61:fd:d2:39:d2:1d:b5:ed:9a:65:7c:
         1a:f3:df:8a:75:be:6e:bf:13:54:b0:b6:6d:fc:8e:04:8c:52:
         5f:c7:29:00:ff:c6:8d:1e:3e:e6:50:95:99:b2:60:9e:6d:73:
         8b:76:b8:f8:6b:fc:98:f0:21:39:7e:e1:79:05:fb:f3:3c:aa:
         98:ff:a8:82:12:ad:85:14:c3:ec:fa:91:98:67:b4:b8:f0:2e:
         ac:7b:e3:44:ca:04:43:4b:5c:2c:c0:c2:0c:fc:c4:8b:a2:59:
         c4:0f:39:91:35:d9:0c:71:46:b6:a5:be:00:75:61:5a:0d:6b:
         7d:7f:2e:00:62:69:c1:9e:d7:2a:35:39:3e:dc:88:e9:cd:ee:
         2f:a4:fe:31:26:0a:a2:fa:ee:fb:b1:40:0f:cb:69:4e:b5:9d:
         dc:8d:f2:e0:59:1e:07:fb:8b:c2:94:90:3b:f3:01:ae:fa:9b:
         99:d5:48:5e:2e:a1:0b:8f:b0:59:c4:01:0d:bd:33:23:67:f5:
         56:bc:46:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:17 2024 by rpki-client on console-ams.rpki-client.org