Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FvJvmCeyQ3At2qo20QWRYapdoMc.roa
File:                     FvJvmCeyQ3At2qo20QWRYapdoMc.roa (raw, json)
Hash identifier:          RBNrc2kzAAeQ1Pt5AjGsCBGa5lNvo+5mXFXKfilDkzc=
Subject key identifier:   16:F2:6F:98:27:B2:43:70:2D:DA:AA:36:D1:05:91:61:AA:5D:A0:C7
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       2891
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FvJvmCeyQ3At2qo20QWRYapdoMc.roa
Signing time:             Fri 01 Sep 2023 10:05:30 +0000
ROA not before:           Fri 01 Sep 2023 10:05:30 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     38841
IP address blocks:        123.194.240.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10385 (0x2891)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep  1 10:05:30 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=16F26F9827B243702DDAAA36D1059161AA5DA0C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9c:02:a6:14:33:d0:c8:8f:6a:d8:6d:5a:03:
                    7a:49:ed:e7:d3:5d:05:b0:71:0a:f0:14:ea:e0:0a:
                    dc:34:32:41:17:3b:5a:ff:c1:77:95:49:03:ed:ed:
                    39:59:39:44:55:b0:1a:4e:2f:a9:39:9d:81:ba:30:
                    08:5b:95:6c:9e:4e:d2:6a:c2:61:1c:5b:70:fe:5a:
                    44:75:da:eb:6b:71:88:36:de:d0:b2:26:29:29:07:
                    a6:a6:6d:2b:c5:3a:f3:58:da:71:bd:8c:32:71:6a:
                    83:95:64:4a:f0:3d:e7:69:6d:1b:89:f8:e2:8f:35:
                    e4:ab:49:fb:95:6c:e1:61:83:0d:1e:5e:ee:61:fd:
                    2d:c8:4f:ec:96:49:0b:5c:56:39:c3:b9:33:01:48:
                    44:d3:6c:46:e9:0d:90:21:43:3c:98:17:28:db:e8:
                    0a:c2:a1:aa:3e:e2:29:0d:30:7a:91:14:67:bc:c5:
                    85:8a:b3:ed:52:14:a6:8a:31:03:fa:b2:d4:16:bf:
                    11:bc:cb:9c:af:90:01:a5:eb:f4:b7:f5:5d:ab:0b:
                    b0:99:ec:68:ec:21:4e:96:3a:60:37:4f:bc:08:dc:
                    5e:4c:2c:fb:d1:21:3d:55:24:3c:14:bc:68:fa:68:
                    5f:7e:86:79:9a:8e:08:0e:c4:59:fb:1a:66:08:c6:
                    de:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:F2:6F:98:27:B2:43:70:2D:DA:AA:36:D1:05:91:61:AA:5D:A0:C7
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FvJvmCeyQ3At2qo20QWRYapdoMc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         47:39:49:66:14:6a:a9:89:b2:ce:b2:49:79:13:6a:14:dd:de:
         60:f1:c6:32:dd:3a:1d:38:0f:d5:48:60:d5:b4:8e:80:c1:b4:
         bb:ea:e6:e9:b6:f6:99:4b:a7:f6:e2:f8:f5:d2:be:c8:99:23:
         6b:fb:3d:01:18:c1:75:d4:ac:48:a7:c8:b6:ac:49:db:d4:48:
         b9:2e:ac:62:36:ab:4e:d8:9c:5f:42:d0:8c:12:a4:a9:1f:b8:
         ff:84:17:b2:a3:c8:f5:c8:fd:3b:0f:a5:f4:97:ab:f2:b3:d6:
         87:ea:58:d3:55:d3:4f:41:a9:8c:1c:29:87:e6:d8:29:39:f2:
         30:37:22:31:78:44:76:cb:3f:55:ab:9e:69:12:74:0d:f4:5f:
         e8:84:fc:68:0c:ec:4e:15:04:b3:3b:a4:21:d8:95:13:53:1c:
         74:95:06:3d:ef:a7:38:e5:dc:b7:1a:f5:5d:bc:94:86:70:48:
         bc:62:86:f4:0d:63:4e:9c:47:a7:52:f1:6f:7b:63:52:f9:74:
         af:b4:74:b2:70:13:c8:ac:c7:25:9a:68:8c:38:44:08:0c:6b:
         08:66:f0:bc:4e:39:cd:a3:d0:4c:64:03:9c:e4:cd:a4:76:d7:
         87:10:df:8f:aa:44:54:69:b9:a0:87:18:ca:0d:23:5b:29:f9:
         cc:27:27:1e
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICKJEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx
MDA1MzBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDE2RjI2Rjk4MjdCMjQz
NzAyRERBQUEzNkQxMDU5MTYxQUE1REEwQzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC3nAKmFDPQyI9q2G1aA3pJ7efTXQWwcQrwFOrgCtw0MkEXO1r/
wXeVSQPt7TlZOURVsBpOL6k5nYG6MAhblWyeTtJqwmEcW3D+WkR12utrcYg23tCy
JikpB6ambSvFOvNY2nG9jDJxaoOVZErwPedpbRuJ+OKPNeSrSfuVbOFhgw0eXu5h
/S3IT+yWSQtcVjnDuTMBSETTbEbpDZAhQzyYFyjb6ArCoao+4ikNMHqRFGe8xYWK
s+1SFKaKMQP6stQWvxG8y5yvkAGl6/S39V2rC7CZ7GjsIU6WOmA3T7wI3F5MLPvR
IT1VJDwUvGj6aF9+hnmajggOxFn7GmYIxt6PAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUFvJvmCeyQ3At2qo20QWRYapdoMcwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0Z2SnZtQ2V5UTNBdDJxbzIw
UVdSWWFwZG9NYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7
wvAwDQYJKoZIhvcNAQELBQADggEBAEc5SWYUaqmJss6ySXkTahTd3mDxxjLdOh04
D9VIYNW0joDBtLvq5um29plLp/bi+PXSvsiZI2v7PQEYwXXUrEinyLasSdvUSLku
rGI2q07YnF9C0IwSpKkfuP+EF7KjyPXI/TsPpfSXq/Kz1ofqWNNV009BqYwcKYfm
2Ck58jA3IjF4RHbLP1WrnmkSdA30X+iE/GgM7E4VBLM7pCHYlRNTHHSVBj3vpzjl
3Lca9V28lIZwSLxihvQNY06cR6dS8W97Y1L5dK+0dLJwE8isxyWaaIw4RAgMawhm
8LxOOc2j0ExkA5zkzaR214cQ34+qRFRpuaCHGMoNI1sp+cwnJx4=
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:24 2024 by rpki-client on console-fra.rpki-client.org