Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EJOPvmEB0ns0AO2hXbvACzfroaI.roa
File:                     EJOPvmEB0ns0AO2hXbvACzfroaI.roa (raw, json)
Hash identifier:          je6VSIjn+A2VWJIGSmxsPCtZw+fUIdx9l3lcPBZX5s0=
Subject key identifier:   10:93:8F:BE:61:01:D2:7B:34:00:ED:A1:5D:BB:C0:0B:37:EB:A1:A2
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       2ADF
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EJOPvmEB0ns0AO2hXbvACzfroaI.roa
Signing time:             Fri 01 Sep 2023 10:08:23 +0000
ROA not before:           Fri 01 Sep 2023 10:08:23 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     38841
IP address blocks:        103.224.192.0/22 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10975 (0x2adf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep  1 10:08:23 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=10938FBE6101D27B3400EDA15DBBC00B37EBA1A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:84:0e:70:f2:02:50:b6:12:d3:5a:0a:e1:db:
                    b1:e8:fb:fa:38:b7:aa:61:a0:e4:67:6e:6b:47:89:
                    77:fa:11:d9:42:16:fd:00:17:91:7b:cf:cd:30:32:
                    1b:c7:58:e0:71:d4:46:97:33:42:6e:56:33:89:85:
                    a4:98:fe:2c:c7:74:c5:6b:b4:e3:ab:72:bd:eb:ad:
                    4c:1f:97:58:1e:36:db:d1:13:80:bc:36:5d:6e:38:
                    2c:d1:d4:cb:91:9c:4b:ca:46:56:44:7e:98:3b:fb:
                    d3:12:7d:17:6c:3d:86:02:73:6e:83:7e:94:90:ff:
                    30:e2:ee:e1:61:71:9f:8e:68:fb:cf:d0:0b:3a:34:
                    44:a0:fc:24:78:8d:6c:ae:14:32:d3:70:cc:1d:2e:
                    44:8c:e8:2e:13:b0:d7:dd:4a:60:7d:dd:75:58:b6:
                    e7:f1:5a:4e:a0:9d:1a:1f:94:a3:2d:1e:ed:c7:33:
                    ba:25:cd:9d:f1:98:5f:f5:78:46:ab:91:9c:92:ec:
                    65:6f:20:76:90:63:20:b8:0f:e5:3e:31:c8:d1:75:
                    33:55:21:58:f1:35:34:f8:c3:eb:5c:91:b2:0c:51:
                    f7:41:be:da:21:c5:c7:bc:93:32:a6:61:d0:b1:4e:
                    a1:c8:6a:99:a7:09:d8:bf:11:35:b0:d4:ea:90:74:
                    c3:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:93:8F:BE:61:01:D2:7B:34:00:ED:A1:5D:BB:C0:0B:37:EB:A1:A2
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EJOPvmEB0ns0AO2hXbvACzfroaI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.224.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:e0:66:50:a9:d1:fc:cd:a5:ab:8d:6f:9c:f1:14:da:fc:2b:
         04:b3:a7:c9:f5:15:a8:c2:0b:c1:79:1b:8a:9e:52:21:ce:85:
         94:c0:5b:0a:3a:e8:49:e0:0d:80:55:e0:b1:67:c2:11:a7:c5:
         b1:d4:35:1c:86:35:d1:45:b1:1d:46:d5:1a:b7:6f:c8:f8:43:
         65:34:07:d8:49:2a:3b:9e:1e:1a:2a:87:85:95:a0:47:6b:88:
         c8:63:dd:c1:28:90:77:77:cd:90:d4:a3:50:7e:02:3c:81:9b:
         3d:ba:8b:09:52:1a:d5:b1:70:af:9e:8f:a8:10:81:6a:c4:0e:
         27:90:b6:70:6b:00:33:ec:96:c8:2e:d6:3d:76:c9:aa:b2:0d:
         d7:ec:8e:59:21:ad:97:49:a3:f6:07:a7:18:d9:78:cd:60:5e:
         26:a1:cd:b1:0d:68:ce:63:f7:06:42:6e:6e:55:00:2a:47:2a:
         3c:f5:aa:9a:72:e6:ac:51:83:9c:f5:dc:5e:e9:fd:e0:be:ad:
         e5:ab:26:13:79:17:d7:4d:29:ce:c5:fb:d2:2d:f6:2b:29:6c:
         cd:30:12:0a:21:a6:10:b8:c8:f9:76:8b:86:6d:4f:74:6f:8f:
         ec:33:4b:df:21:c8:b3:31:12:cd:81:87:2c:c7:67:66:55:a2:
         e5:60:92:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:17 2024 by rpki-client on console-ams.rpki-client.org