Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7_RTPVRpBwiO0rUO7sUSBxeNboY.roa
File:                     7_RTPVRpBwiO0rUO7sUSBxeNboY.roa (raw, json)
Hash identifier:          xeDaRDMP1QGTh0RXgHiLS9mPAP87ji+NLYbLplCGoJY=
Subject key identifier:   EF:F4:53:3D:54:69:07:08:8E:D2:B5:0E:EE:C5:12:07:17:8D:6E:86
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       29E4
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7_RTPVRpBwiO0rUO7sUSBxeNboY.roa
Signing time:             Fri 01 Sep 2023 10:07:13 +0000
ROA not before:           Fri 01 Sep 2023 10:07:13 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     38841
IP address blocks:        118.232.100.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10724 (0x29e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep  1 10:07:13 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=EFF4533D546907088ED2B50EEEC51207178D6E86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:cb:34:bd:67:85:a2:8b:87:35:db:2e:e8:ff:
                    cf:e4:98:ea:b8:c6:07:f6:5b:2c:c6:76:9d:c6:c6:
                    42:e3:62:59:80:30:4d:79:9b:bc:48:59:85:f3:39:
                    92:0a:48:e3:cf:31:23:54:c1:f1:4c:dc:76:58:1b:
                    d9:60:62:cb:04:db:d4:f1:fe:96:1e:e8:3f:a5:3a:
                    43:97:8d:9c:49:23:32:17:52:bd:e7:23:90:a0:1e:
                    42:41:be:88:79:95:82:df:86:a7:ea:65:9f:a8:1b:
                    d2:cf:a2:cb:f3:76:9a:d8:f6:33:7e:82:55:ee:d2:
                    b5:83:4e:80:e7:31:3d:96:04:96:0f:b3:99:fd:a6:
                    19:c2:02:f9:77:ec:68:ad:d3:c5:0b:3e:1c:47:51:
                    bb:3b:2a:93:77:0e:3d:01:60:98:c9:a2:b1:c3:b8:
                    9a:72:01:b1:53:de:0e:1f:e8:6d:af:58:2c:bd:f5:
                    67:1e:4c:2c:7f:aa:07:72:18:a0:4a:8f:08:72:b7:
                    2a:2e:08:d7:4f:ea:eb:33:bb:4f:62:a0:ba:e3:0e:
                    fb:ad:5b:ca:fb:30:64:8c:e5:95:01:9b:7b:3a:ed:
                    2d:a6:b6:d8:d8:be:77:3c:ce:9c:dc:af:da:66:7b:
                    8b:3b:ed:65:07:13:00:e3:44:88:8c:91:20:33:3b:
                    e5:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:F4:53:3D:54:69:07:08:8E:D2:B5:0E:EE:C5:12:07:17:8D:6E:86
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7_RTPVRpBwiO0rUO7sUSBxeNboY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:1b:b0:25:cb:90:e5:a4:2b:01:72:76:50:c3:24:e4:c5:90:
         6e:7a:4f:af:b5:3f:36:45:9e:38:3d:3c:07:75:f9:6b:e4:8c:
         81:08:51:93:77:d1:9b:84:3e:94:18:bd:8a:78:79:23:39:9a:
         8d:43:32:4c:00:ef:c5:0f:a3:65:f2:71:b2:c0:8f:1e:b2:4c:
         77:1a:a2:ae:82:14:c3:1d:51:c1:1f:0f:3d:76:45:77:33:fe:
         f9:48:c9:c3:54:4c:02:40:a9:38:d5:cc:6b:28:2a:f5:0a:c4:
         e9:7d:f6:5d:12:c4:d0:c8:f7:e8:9b:69:84:d9:02:e6:a0:78:
         b4:5d:ee:75:86:9c:78:64:9d:95:f0:60:d4:81:ef:c1:7c:3d:
         eb:3d:26:a2:43:e6:21:04:e6:b4:89:25:28:9f:71:58:47:97:
         20:bc:68:4b:f4:a6:6b:2c:11:36:c7:68:de:a2:6d:c2:7e:66:
         9f:d5:ab:69:01:aa:72:5c:75:34:f3:f5:c1:85:ab:fe:25:78:
         de:e4:55:06:b5:72:7a:ce:6f:96:02:ac:bb:b6:57:5e:b2:21:
         44:dd:59:f9:b5:f8:28:4e:7b:08:7f:9e:4e:b6:96:84:75:43:
         3b:bf:1b:e4:35:5d:54:c8:6e:e1:67:25:45:56:8d:9a:9b:02:
         47:62:25:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:24 2024 by rpki-client on console-fra.rpki-client.org