Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GZPzzxn0tWeOr17F4B39ULIKEhU.roa
File:                     GZPzzxn0tWeOr17F4B39ULIKEhU.roa (raw, json)
Hash identifier:          qRSi2d0TTBOzZAKcZZug+9qNOB2nDCTjb1jaJXhjBQg=
Subject key identifier:   19:93:F3:CF:19:F4:B5:67:8E:AF:5E:C5:E0:1D:FD:50:B2:0A:12:15
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       2A8F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GZPzzxn0tWeOr17F4B39ULIKEhU.roa
Signing time:             Fri 01 Sep 2023 10:08:03 +0000
ROA not before:           Fri 01 Sep 2023 10:08:03 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     38841
IP address blocks:        123.193.48.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10895 (0x2a8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep  1 10:08:03 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=1993F3CF19F4B5678EAF5EC5E01DFD50B20A1215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:28:1b:24:f3:fe:16:90:4d:62:33:ed:ba:70:
                    54:ea:e7:41:26:0f:9e:2b:14:6c:98:98:42:dc:23:
                    6a:50:73:73:53:27:6b:83:1c:9f:74:16:8f:d5:28:
                    c4:ab:08:cd:be:6d:a2:07:5f:69:40:df:4b:96:2a:
                    a5:48:07:24:17:94:f4:cb:03:41:8c:a3:a4:10:25:
                    20:77:a4:56:38:a7:dc:fe:1c:51:46:b8:ef:0a:2c:
                    a3:26:13:52:1d:e8:f4:0a:99:6d:6a:58:d4:d7:2f:
                    d4:30:f0:b0:fa:cc:fc:3c:c1:75:5a:ce:99:fb:44:
                    bc:86:41:09:9c:1e:9b:d4:0b:b4:d5:5d:0b:49:a6:
                    4f:c8:78:68:9b:dd:0a:7d:80:e8:bf:6e:f8:77:a7:
                    b1:77:04:c0:ad:09:db:a3:92:79:3d:e2:44:be:b7:
                    21:01:cf:5f:03:6c:a8:93:bf:53:1d:a0:9e:7f:c5:
                    06:c4:33:96:fd:f6:0e:32:dd:62:b8:de:e7:35:36:
                    34:75:7f:33:a5:7f:2c:97:54:3b:93:68:4a:48:b5:
                    6d:cc:18:85:18:5b:08:8a:7b:a8:94:f4:27:4a:88:
                    1c:8f:6b:f9:ee:20:bc:78:59:69:f6:6e:f1:79:88:
                    fc:2f:b4:b8:fb:f2:77:0b:2d:ee:6a:95:e1:44:4a:
                    f9:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:93:F3:CF:19:F4:B5:67:8E:AF:5E:C5:E0:1D:FD:50:B2:0A:12:15
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GZPzzxn0tWeOr17F4B39ULIKEhU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b1:0e:f6:37:ad:27:8b:0b:3b:f2:a0:6c:00:cc:57:75:f5:88:
         c9:20:31:70:8b:20:98:fc:68:52:64:c1:71:c7:b3:2d:80:06:
         3c:f1:4b:b0:ad:7a:66:b8:b7:c6:31:48:1c:ba:fa:52:f3:66:
         9f:4e:1f:e7:82:0a:18:5a:23:e6:c2:3d:56:3e:bc:3c:eb:ff:
         d1:1f:a0:47:22:ad:7d:d8:34:42:c2:b2:a1:7e:3c:fe:62:d6:
         6b:55:da:92:88:0b:22:ca:8a:fc:59:bd:35:dc:79:1d:ae:05:
         ab:87:21:8d:a9:9a:5e:61:63:97:34:1a:10:87:c4:17:18:09:
         ac:21:da:24:5f:20:71:e8:c9:dc:3d:e9:20:31:ab:67:b2:27:
         0c:c4:80:f9:48:23:ff:c9:b7:6f:53:41:47:c3:3a:c9:11:50:
         98:d9:a6:a7:74:80:b1:62:15:bb:35:3b:d7:f2:ed:48:3c:d6:
         8c:c8:b7:3a:01:ae:fe:ee:20:04:5e:79:5b:45:14:56:17:c5:
         24:7e:57:2d:e8:36:8f:b9:43:19:f8:dd:1e:57:39:4d:f6:41:
         59:92:67:77:f6:78:de:6b:32:63:c5:59:4e:34:c5:bf:17:c5:
         c9:32:07:3f:55:81:81:32:7b:a6:45:38:14:7c:d3:76:56:30:
         9a:a4:b2:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:18 2024 by rpki-client on console-ams.rpki-client.org