Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LCeX586iCgBy396v-Qa5lxMIKRE.roa
File:                     LCeX586iCgBy396v-Qa5lxMIKRE.roa (raw, json)
Hash identifier:          DTLZwOU/fhiqZ6GDtUh8S03dqMO6DT/kdhsajJQZG7I=
Subject key identifier:   2C:27:97:E7:CE:A2:0A:00:72:DF:DE:AF:F9:06:B9:97:13:08:29:11
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       29F7
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LCeX586iCgBy396v-Qa5lxMIKRE.roa
Signing time:             Fri 01 Sep 2023 10:07:20 +0000
ROA not before:           Fri 01 Sep 2023 10:07:20 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     38841
IP address blocks:        106.1.69.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10743 (0x29f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep  1 10:07:20 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=2C2797E7CEA20A0072DFDEAFF906B99713082911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:31:5c:7f:9a:f7:2f:5f:b4:48:77:51:7e:0d:
                    95:17:32:5c:89:d8:21:03:6d:0b:1d:8a:7c:46:8b:
                    e1:dd:77:d0:28:77:43:a5:32:23:67:dd:83:46:30:
                    f5:9b:93:ba:6e:94:72:24:62:ed:74:2b:d4:3e:b0:
                    8c:67:8e:8d:b9:bb:80:e2:1e:c4:df:cc:8e:50:4f:
                    01:05:fd:0f:b8:a7:48:a1:73:03:32:31:4d:43:1c:
                    b8:79:0d:f4:53:c8:6e:cc:e2:f4:41:1b:b6:04:c8:
                    a7:73:d2:d2:dd:86:0d:8d:aa:9c:a4:54:fc:3d:89:
                    f4:c4:3a:ef:da:ec:56:1c:88:b4:18:3a:f8:95:9c:
                    e9:43:e4:17:10:14:89:e2:69:d6:57:70:e6:d0:b4:
                    29:63:66:cf:7e:be:7a:1c:c5:9b:ac:8a:bb:df:2f:
                    1e:77:1f:22:42:a4:37:74:d8:93:b6:f6:91:73:ca:
                    cb:72:bb:ed:1a:37:ff:93:e8:15:28:08:a2:9e:e1:
                    35:8e:b8:2b:34:d0:41:ad:b8:02:9c:36:8a:63:22:
                    0c:e6:07:44:1e:fd:3b:aa:6e:1e:8c:8d:bb:f9:b8:
                    8d:f9:da:4a:e6:86:87:93:fa:80:11:c8:fc:3d:d0:
                    87:57:d9:f8:b9:66:bf:d8:75:ef:86:0b:7f:a0:84:
                    94:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:27:97:E7:CE:A2:0A:00:72:DF:DE:AF:F9:06:B9:97:13:08:29:11
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LCeX586iCgBy396v-Qa5lxMIKRE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:6e:28:f7:4e:a2:19:d5:d0:0b:de:05:a2:8b:8f:92:b1:a9:
         23:b4:fd:30:a3:f1:b3:52:d5:e0:c5:88:73:f9:e0:ac:3f:cf:
         af:f7:56:ee:c7:f5:7a:0f:c8:f5:ea:5d:02:c7:4a:ae:78:9e:
         7b:68:78:08:e1:d3:a9:f9:3d:06:b9:0b:61:c2:42:12:d2:b7:
         d7:ff:37:96:8d:bb:c0:1b:c4:eb:79:b1:5c:ab:2d:8d:c1:36:
         11:08:34:7d:0a:50:66:c0:65:15:20:67:82:88:e6:10:f8:a5:
         cf:43:e1:65:6b:34:3e:46:85:4d:78:5e:2c:59:db:72:f3:72:
         44:e7:34:50:92:4c:45:9b:aa:6e:64:84:b8:9a:e1:d3:29:e8:
         f8:fe:8a:70:bb:25:0b:fe:a7:05:51:2f:bf:39:e7:3e:5e:d0:
         3d:a7:90:29:48:22:86:8e:04:9e:45:3c:af:6f:58:b7:c0:15:
         e7:fd:1c:29:0b:c7:1a:5c:6f:e2:49:09:7e:78:b4:0e:fc:54:
         04:d0:e3:01:f3:62:d0:7f:5a:62:b9:2f:91:38:ba:90:c1:97:
         b2:c6:66:50:51:c6:7b:39:bc:75:b4:7d:d5:27:b7:c2:11:98:
         13:8c:e2:5a:68:cb:4f:c5:66:6a:15:a0:a4:65:99:eb:fa:58:
         8f:00:8d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:24 2024 by rpki-client on console-fra.rpki-client.org