Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/78Olfd8YNiA20x4uBLAgJV2YMWs.roa
File:                     78Olfd8YNiA20x4uBLAgJV2YMWs.roa (raw, json)
Hash identifier:          dGuhtM08QXE1Rp4sjPam158b6OSPXfLAN/+wqQcD3h4=
Subject key identifier:   EF:C3:A5:7D:DF:18:36:20:36:D3:1E:2E:04:B0:20:25:5D:98:31:6B
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       2954
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/78Olfd8YNiA20x4uBLAgJV2YMWs.roa
Signing time:             Fri 01 Sep 2023 10:06:23 +0000
ROA not before:           Fri 01 Sep 2023 10:06:23 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     38841
IP address blocks:        106.1.120.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10580 (0x2954)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep  1 10:06:23 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=EFC3A57DDF18362036D31E2E04B020255D98316B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f7:35:48:1d:3d:35:39:e5:37:ab:c6:db:f3:
                    e7:8b:95:c4:16:5c:66:67:12:3c:5f:ac:00:ec:30:
                    b8:70:6a:2c:ca:60:99:0e:54:74:8b:1d:50:3d:70:
                    79:c6:1a:6a:2f:cb:c7:1a:1a:25:59:40:8c:c8:af:
                    ad:f5:63:ce:c5:7f:af:dc:c8:b1:f3:eb:52:de:65:
                    af:bb:d0:16:b2:f9:39:43:45:00:d0:16:63:a5:cd:
                    f8:58:c2:8c:b6:f7:15:5b:14:8b:7c:30:05:04:e6:
                    ab:49:52:41:db:8e:43:b4:08:d4:89:ab:63:f6:7b:
                    7e:88:98:5f:8c:e8:4f:2b:44:59:43:21:05:56:ba:
                    78:ea:c3:fc:62:2d:6c:6c:fd:01:d1:6b:f7:46:04:
                    7e:4c:de:4f:1b:63:1b:2d:38:24:44:75:c4:e3:27:
                    88:87:12:f3:ea:5f:fa:1c:a1:2c:d5:f9:e5:bc:9f:
                    f2:53:5a:4d:53:a2:4c:87:15:a0:7c:e7:7f:7d:0b:
                    5b:ef:77:be:a3:3b:a3:b8:47:8a:46:64:88:36:23:
                    ad:19:27:ef:12:92:b4:b9:98:26:4b:42:11:37:b3:
                    ac:01:13:f5:6f:50:86:ab:3a:fb:f1:43:de:94:d0:
                    76:d1:4f:61:12:7a:8f:b2:9e:83:52:18:97:f0:9d:
                    b2:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:C3:A5:7D:DF:18:36:20:36:D3:1E:2E:04:B0:20:25:5D:98:31:6B
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/78Olfd8YNiA20x4uBLAgJV2YMWs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:b7:d8:1c:4d:f1:17:19:ae:0d:2a:bb:24:7e:e2:f6:3f:ea:
         d4:ba:f8:f4:88:89:42:73:de:5b:dd:4e:8b:e6:0d:94:44:d1:
         30:8e:b2:6b:e9:26:68:0e:e9:52:0f:85:4a:ac:78:59:e1:23:
         b8:d8:9f:b7:e8:2a:be:fd:7a:60:f4:9c:91:7d:4d:50:d4:76:
         be:57:68:44:0a:78:78:1f:73:3e:42:5e:d3:f6:52:af:fe:3e:
         57:54:8c:3f:c6:46:39:21:78:49:13:1c:60:5d:3c:c5:fd:0c:
         fa:b4:2a:f2:fc:00:f1:c9:6f:38:f4:53:e8:93:45:68:81:ba:
         ef:20:88:32:de:14:b3:3f:45:bf:c4:4d:a7:98:ea:9b:c0:72:
         a3:99:61:27:52:19:fc:e1:41:d1:9f:46:d4:47:b3:60:46:8b:
         84:2d:c9:82:91:5c:a7:a7:a9:95:60:e3:26:04:20:4d:69:a0:
         9c:0c:48:33:6b:16:e4:3f:a8:47:ff:c0:ee:73:95:77:27:34:
         7c:58:8e:12:f0:6e:4b:f1:ff:74:59:36:a0:8d:fc:6a:04:38:
         69:14:78:e6:b0:87:7b:87:b1:d6:0f:9e:da:70:80:d3:ff:f6:
         c7:16:60:41:e6:3e:e1:8a:c3:19:d7:4a:55:91:e4:9c:84:09:
         d0:00:94:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:24 2024 by rpki-client on console-fra.rpki-client.org