Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ECQWNE4oJLuN1W5QkXjFPQuORxw.roa
File:                     ECQWNE4oJLuN1W5QkXjFPQuORxw.roa (raw, json)
Hash identifier:          QgKjIgS1YYcDVNmrzZeiKh5R9nEUL5okl338db1TCsg=
Subject key identifier:   10:24:16:34:4E:28:24:BB:8D:D5:6E:50:91:78:C5:3D:0B:8E:47:1C
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       29A8
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ECQWNE4oJLuN1W5QkXjFPQuORxw.roa
Signing time:             Fri 01 Sep 2023 10:06:53 +0000
ROA not before:           Fri 01 Sep 2023 10:06:53 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     38841
IP address blocks:        180.177.108.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10664 (0x29a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep  1 10:06:53 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=102416344E2824BB8DD56E509178C53D0B8E471C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:81:63:f0:3e:c9:5b:90:7c:5b:50:9b:d7:9e:
                    53:d5:8a:66:2c:90:e4:97:00:70:cf:ed:fc:98:39:
                    ca:ca:11:b6:52:0a:ad:db:40:67:1f:a0:03:b9:79:
                    2f:fe:d7:8d:15:42:c2:b7:4c:68:4b:c8:5b:b3:6b:
                    81:62:37:4a:18:04:26:7d:e3:50:73:74:37:6b:f4:
                    1c:a6:38:5d:ba:8f:6c:b6:f4:9d:41:3f:ee:19:17:
                    2c:fb:bd:cc:05:a0:0f:60:65:97:7e:c3:5d:13:07:
                    47:c1:0f:f3:11:35:52:e6:cd:51:f2:2f:78:32:49:
                    bb:e3:ee:ca:64:92:26:74:8f:2d:12:77:2c:bf:7d:
                    f9:e6:da:a2:a6:e2:7a:93:a9:52:99:7b:d9:4c:16:
                    cd:99:38:7d:cf:36:94:33:b4:46:89:85:1a:47:66:
                    b3:e6:f7:d9:20:07:98:e1:a8:bf:16:1c:d2:58:c3:
                    0e:b5:0c:fa:c7:72:68:10:6e:15:83:4d:22:cd:85:
                    38:dc:f8:fd:d9:ce:15:5b:d0:3d:ba:2f:a5:2a:ce:
                    54:cd:0d:8b:99:66:d4:dc:84:84:4e:9d:9f:df:82:
                    38:bb:58:f2:26:72:d0:d3:d7:84:f1:9b:ad:df:3d:
                    af:19:5b:b1:0c:d3:35:fb:6d:66:26:bc:ec:de:bf:
                    e7:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:24:16:34:4E:28:24:BB:8D:D5:6E:50:91:78:C5:3D:0B:8E:47:1C
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ECQWNE4oJLuN1W5QkXjFPQuORxw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:46:8a:91:a1:09:3f:ef:a9:ec:db:cc:67:e5:6d:7f:c3:9a:
         bf:10:8b:46:69:2f:de:d1:5f:c7:8b:85:ee:90:7a:28:8a:d3:
         2b:1b:61:ef:56:aa:be:84:3a:db:30:cb:86:63:5f:b8:92:5f:
         86:1b:bf:ab:ac:15:df:5c:9a:ed:3d:dc:5f:8c:22:dd:bd:5a:
         df:ec:de:e7:10:65:f5:ff:3f:f1:fb:8f:0c:2f:03:28:8d:85:
         1d:81:e2:41:ab:05:32:89:7d:60:45:e1:07:33:61:7e:63:bf:
         11:76:af:60:1e:d8:14:69:64:80:05:e2:88:e9:3e:d1:ef:35:
         77:66:d8:c8:02:a0:61:3e:99:60:f3:68:b4:93:7e:f4:42:8e:
         6c:22:ee:c4:15:2a:68:57:ad:8d:0e:8e:49:68:d1:b9:bf:b7:
         41:e9:1c:aa:8b:22:1a:07:d7:d0:84:0d:e2:cc:74:10:b3:69:
         ef:09:fc:a0:d7:d3:95:06:d0:fb:6a:2b:cf:c1:e4:06:7c:62:
         24:3b:96:62:00:f0:48:cf:1e:a5:19:56:4d:7d:3e:ab:25:72:
         de:7c:59:94:7d:b4:23:9a:0c:55:bc:03:4e:31:d0:af:ab:df:
         6f:6e:d1:8b:3f:4f:f4:7c:4e:31:52:0d:5d:c1:3b:5d:91:05:
         a5:28:eb:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:24 2024 by rpki-client on console-fra.rpki-client.org