Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EkVFj3nDLF-jNctcvCBg5Rebtyw.roa
File:                     EkVFj3nDLF-jNctcvCBg5Rebtyw.roa (raw, json)
Hash identifier:          FWJZMAZsKeJr2xlJTFek7Sjz3mzazNx62R9fRLwyq7g=
Subject key identifier:   12:45:45:8F:79:C3:2C:5F:A3:35:CB:5C:BC:20:60:E5:17:9B:B7:2C
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       2ABB
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EkVFj3nDLF-jNctcvCBg5Rebtyw.roa
Signing time:             Fri 01 Sep 2023 10:08:14 +0000
ROA not before:           Fri 01 Sep 2023 10:08:14 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     38841
IP address blocks:        106.1.54.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10939 (0x2abb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep  1 10:08:14 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=1245458F79C32C5FA335CB5CBC2060E5179BB72C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:5d:4a:69:b4:c6:92:2b:c3:9c:a4:43:49:6a:
                    66:67:54:d1:c1:b3:71:66:a9:d5:98:bc:ab:98:9d:
                    74:2b:6c:8c:82:89:4e:8e:e7:0f:3d:97:0c:c4:2c:
                    2d:04:7a:45:d0:e3:17:4a:5b:4f:7f:1d:ff:0e:1d:
                    db:1b:7b:50:8e:eb:3d:2b:1e:8b:b8:cf:6f:99:9e:
                    02:21:a8:e8:bb:6a:9c:ee:b1:71:32:82:36:ce:e2:
                    69:72:ce:4a:c1:66:ba:94:39:ce:08:80:18:e6:ff:
                    f3:3e:55:4c:74:59:2f:15:0d:50:0b:1c:b6:74:b5:
                    3c:27:57:ba:3e:8c:fb:ad:08:b7:65:0d:a6:9e:da:
                    b4:6a:68:d6:52:9e:af:f4:f1:36:71:9b:7c:f2:a5:
                    3e:53:3a:27:db:a5:5d:4e:f0:73:9f:be:93:84:8c:
                    a9:1e:b3:5d:ed:2e:33:7b:4b:60:26:0a:e0:8c:39:
                    04:22:6c:8d:ea:ff:83:93:18:05:f1:d1:9c:94:89:
                    04:c0:c3:16:c8:5d:41:ce:9c:53:b5:6b:30:6a:59:
                    23:41:c4:70:34:dc:35:20:ff:d9:ed:86:3e:cc:c1:
                    ff:ef:39:24:95:6b:fa:76:c9:9b:1c:af:b0:06:a5:
                    99:51:2f:cf:24:21:a9:13:dd:96:d5:76:c9:4d:1c:
                    ba:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:45:45:8F:79:C3:2C:5F:A3:35:CB:5C:BC:20:60:E5:17:9B:B7:2C
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EkVFj3nDLF-jNctcvCBg5Rebtyw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:13:de:56:dd:eb:82:b5:97:b0:ab:69:22:eb:7f:2c:c0:43:
         70:c0:f4:54:33:34:fb:65:55:27:80:d6:0a:60:37:79:8c:1e:
         4a:3b:0a:e6:8a:c4:fc:c9:ff:58:06:d2:8b:85:05:d3:23:b0:
         9a:c2:8e:5b:ae:24:71:bc:6b:6c:49:45:5d:64:d3:80:82:60:
         e8:40:1a:33:ff:3c:87:bf:83:ec:16:0d:c7:80:b0:85:39:6b:
         88:e1:22:73:11:88:05:9c:dd:84:dd:19:fa:7c:83:c5:ea:ab:
         82:ff:2b:05:cd:9a:01:ee:cd:8f:b1:8e:b9:b9:cb:d9:09:2b:
         63:2c:92:f7:56:d5:74:81:ec:6a:dc:ba:47:1f:ba:05:1a:19:
         db:b1:24:2a:4a:9c:a2:24:5f:15:dd:ff:9e:53:c9:7a:d2:04:
         d2:de:83:28:98:6a:35:98:69:14:0e:45:40:86:d7:38:2c:f1:
         8a:bd:c4:4d:16:15:30:11:45:1e:c7:9d:2a:d4:b3:2d:8e:b3:
         98:6f:95:0c:d0:69:3e:da:fe:a6:51:a6:e7:3c:d0:7f:b8:aa:
         b6:47:05:8b:d8:d7:47:4b:94:a7:f6:8e:97:12:66:3a:f6:e5:
         ea:4d:d6:55:98:19:85:6a:a4:f8:c6:c6:cf:94:0f:7f:c6:31:
         d0:77:4b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:24 2024 by rpki-client on console-fra.rpki-client.org