Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/D-GdokfIPcg4LBXLTMlTgkAY1To.roa
File:                     D-GdokfIPcg4LBXLTMlTgkAY1To.roa (raw, json)
Hash identifier:          sZEBFVrVlPeH4eJYKF7xgotECYWYXBwbKGeAFvFoVzU=
Subject key identifier:   0F:E1:9D:A2:47:C8:3D:C8:38:2C:15:CB:4C:C9:53:82:40:18:D5:3A
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       299D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/D-GdokfIPcg4LBXLTMlTgkAY1To.roa
Signing time:             Fri 01 Sep 2023 10:06:49 +0000
ROA not before:           Fri 01 Sep 2023 10:06:49 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     38841
IP address blocks:        106.1.50.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10653 (0x299d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep  1 10:06:49 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=0FE19DA247C83DC8382C15CB4CC953824018D53A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:4b:47:5c:d7:56:0e:a5:ac:b8:7e:e5:b3:e9:
                    5b:ae:df:db:d8:ab:45:59:44:03:d6:34:30:19:e1:
                    b4:53:ed:b8:77:ba:14:bd:27:0c:b3:a9:a3:7f:34:
                    6c:fe:e8:3c:b8:2d:35:99:70:96:d3:73:84:62:f8:
                    37:ce:c1:a9:09:c5:51:0f:7a:ec:9f:dc:5c:ee:56:
                    6b:6c:ea:25:77:d3:05:7b:f0:c0:28:1b:f9:75:90:
                    f4:37:d9:9a:3e:5f:4e:7a:26:7d:d1:19:a9:ea:fa:
                    e8:74:65:f5:00:6d:f3:a4:03:5d:2d:be:64:89:72:
                    2e:0b:f0:9b:51:0c:37:16:03:1c:e6:7a:cf:29:8e:
                    2d:e5:2b:d1:f8:08:0c:cd:e4:f0:0d:08:f0:5f:3a:
                    58:60:42:48:3c:89:10:08:a0:47:9c:be:b2:fe:64:
                    e6:c9:e5:28:e4:1a:3b:d7:08:c8:e6:b1:4c:e4:35:
                    8c:6b:93:7f:c8:a0:00:16:8b:ce:9b:34:76:19:61:
                    7e:54:48:ca:c8:1b:db:e4:dd:d9:86:3a:45:eb:94:
                    53:2a:1f:f3:a0:1c:65:5e:5a:8e:52:8c:44:2d:a8:
                    4a:f8:46:26:bf:a9:8e:8a:48:98:fc:42:ce:f5:cb:
                    78:ff:c4:2d:9b:61:8d:9e:c8:83:04:66:81:f2:fc:
                    c3:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:E1:9D:A2:47:C8:3D:C8:38:2C:15:CB:4C:C9:53:82:40:18:D5:3A
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/D-GdokfIPcg4LBXLTMlTgkAY1To.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4d:00:02:02:c4:11:ba:2d:db:df:df:df:f4:8f:40:90:39:95:
         4d:38:cb:13:8d:75:d5:97:da:e7:2b:da:53:39:b5:79:86:94:
         8d:be:7c:28:58:7f:ff:82:81:e7:94:88:6a:e0:98:73:53:00:
         dc:fd:0b:af:ac:00:45:66:00:36:ac:91:3c:d4:46:df:51:e1:
         e8:63:a9:c2:c1:bf:6f:92:a7:28:23:5d:b8:cf:a0:40:17:3e:
         50:fc:05:a2:bc:a3:ee:45:5d:76:d4:b3:83:70:88:3d:ce:33:
         8b:0d:8f:e9:38:da:e8:ba:d2:d1:f8:64:aa:e3:23:da:a8:16:
         3c:b6:46:75:96:7f:96:50:22:ce:ed:9b:6b:03:ec:1d:85:d3:
         b9:7a:b1:9f:45:4b:ec:48:5c:9f:01:52:13:2d:99:f3:f9:e2:
         da:d6:3c:93:2d:dd:a4:9e:fe:20:4d:aa:36:d8:2e:39:c9:77:
         d2:86:ad:42:58:67:fe:bd:5b:60:af:00:2d:79:7d:bd:5e:27:
         03:53:ee:ff:12:f5:b9:77:5a:b4:ba:05:02:47:b8:c1:9d:eb:
         e7:b1:e5:4a:42:af:87:ef:bb:44:c8:d4:0a:bd:51:9f:ef:80:
         79:82:f9:04:9b:48:c9:e0:c4:7c:bf:98:ae:ac:e2:a0:53:e7:
         e4:4f:79:4a
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICKZ0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx
MDA2NDlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDBGRTE5REEyNDdDODNE
QzgzODJDMTVDQjRDQzk1MzgyNDAxOEQ1M0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCjS0dc11YOpay4fuWz6Vuu39vYq0VZRAPWNDAZ4bRT7bh3uhS9
JwyzqaN/NGz+6Dy4LTWZcJbTc4Ri+DfOwakJxVEPeuyf3FzuVmts6iV30wV78MAo
G/l1kPQ32Zo+X056Jn3RGanq+uh0ZfUAbfOkA10tvmSJci4L8JtRDDcWAxzmes8p
ji3lK9H4CAzN5PANCPBfOlhgQkg8iRAIoEecvrL+ZObJ5SjkGjvXCMjmsUzkNYxr
k3/IoAAWi86bNHYZYX5USMrIG9vk3dmGOkXrlFMqH/OgHGVeWo5SjEQtqEr4Ria/
qY6KSJj8Qs71y3j/xC2bYY2eyIMEZoHy/MPDAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUD+GdokfIPcg4LBXLTMlTgkAY1TowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0QtR2Rva2ZJUGNnNExCWExU
TWxUZ2tBWTFUby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFq
ATIwDQYJKoZIhvcNAQELBQADggEBAE0AAgLEEbot29/f3/SPQJA5lU04yxONddWX
2ucr2lM5tXmGlI2+fChYf/+CgeeUiGrgmHNTANz9C6+sAEVmADaskTzURt9R4ehj
qcLBv2+SpygjXbjPoEAXPlD8BaK8o+5FXXbUs4NwiD3OM4sNj+k42ui60tH4ZKrj
I9qoFjy2RnWWf5ZQIs7tm2sD7B2F07l6sZ9FS+xIXJ8BUhMtmfP54trWPJMt3aSe
/iBNqjbYLjnJd9KGrUJYZ/69W2CvAC15fb1eJwNT7v8S9bl3WrS6BQJHuMGd6+ex
5UpCr4fvu0TI1Aq9UZ/vgHmC+QSbSMngxHy/mK6s4qBT5+RPeUo=
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:24 2024 by rpki-client on console-fra.rpki-client.org