Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MiKI93OwlOsO9OGWlGtEiV0Jah4.roa
File:                     MiKI93OwlOsO9OGWlGtEiV0Jah4.roa (raw, json)
Hash identifier:          A9hS0KG5a4ZHR6Ytvy12sjP8wj9grmCcvhp/SawqSGg=
Subject key identifier:   32:22:88:F7:73:B0:94:EB:0E:F4:E1:96:94:6B:44:89:5D:09:6A:1E
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       295E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MiKI93OwlOsO9OGWlGtEiV0Jah4.roa
Signing time:             Fri 01 Sep 2023 10:06:26 +0000
ROA not before:           Fri 01 Sep 2023 10:06:26 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     38841
IP address blocks:        123.195.179.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10590 (0x295e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep  1 10:06:26 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=322288F773B094EB0EF4E196946B44895D096A1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:4f:28:d3:de:05:83:24:33:5c:01:f3:d2:ee:
                    c2:71:a9:2e:5a:d3:f4:7c:a6:ab:0a:03:9d:ea:c1:
                    b0:0e:e0:fd:bd:16:c9:c9:cf:61:e6:f5:c8:c5:6a:
                    b1:da:95:53:db:21:83:90:8a:0e:d7:8f:7b:93:45:
                    c6:51:ba:cd:e0:22:11:b0:47:e1:eb:8a:4a:e6:fc:
                    ac:ec:bc:19:fd:e8:65:4b:93:18:49:dc:0b:58:a6:
                    5c:b0:65:79:b1:16:8f:7f:ca:b4:a2:5d:fc:fd:e8:
                    8c:4d:24:ab:50:ac:33:9a:cd:0d:f3:fc:15:c6:b1:
                    03:32:f5:f7:cd:58:03:f6:90:56:5a:96:16:64:d4:
                    1c:bc:c4:4f:6b:e0:86:b1:47:d1:7a:67:ae:bd:3f:
                    9d:8f:99:27:86:d0:d0:b9:1c:a7:db:56:33:c0:32:
                    04:57:dc:be:75:84:e8:83:c7:5d:2a:99:33:fd:79:
                    41:df:ee:48:e1:d2:85:72:06:81:a5:bf:bb:65:3b:
                    db:6d:ae:f5:14:9f:e5:57:bc:c5:a4:d5:ac:bc:c5:
                    73:90:55:62:4c:3a:8b:e9:34:0c:58:41:cc:ce:0b:
                    73:fb:4c:14:b0:3d:3e:7f:b9:e2:25:e2:a7:41:37:
                    fb:77:15:16:54:e2:6d:e3:1d:9a:a1:2a:d6:65:e2:
                    74:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:22:88:F7:73:B0:94:EB:0E:F4:E1:96:94:6B:44:89:5D:09:6A:1E
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MiKI93OwlOsO9OGWlGtEiV0Jah4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:53:bd:14:b5:1f:a8:f3:20:13:7c:1c:5d:6e:54:c4:de:e3:
         4b:93:66:1f:73:82:a0:a9:fd:58:da:70:8c:16:f7:c7:28:fa:
         4c:29:ff:6e:43:f3:a2:13:c5:d0:f2:16:25:91:7a:88:da:1c:
         71:e2:39:f6:5f:17:8d:ae:e1:e9:48:42:39:d7:78:41:14:fa:
         8f:44:80:1f:97:93:7b:1b:a7:13:51:5f:b3:92:04:78:d5:1f:
         49:1a:f6:30:02:1a:99:9e:63:d8:e5:85:45:17:84:fc:86:8b:
         7b:3f:99:57:85:d9:38:01:5c:f7:07:34:96:9b:86:cb:5f:35:
         3c:3d:1a:4e:d0:05:0c:ed:f3:5e:d6:7f:8c:ca:e8:98:92:ef:
         4b:e2:9c:e9:2e:25:52:15:f4:72:46:b3:c3:25:52:ea:ae:f7:
         d8:31:d5:9a:20:b6:f0:1d:79:20:dd:63:00:7a:42:12:d4:3e:
         6b:cc:3a:43:e9:1f:47:43:b6:8c:09:c4:77:fb:ad:ec:44:06:
         c2:c2:07:fb:16:84:7f:f7:28:36:f1:90:e5:05:ea:f0:6e:18:
         f4:17:3b:bc:1e:c1:95:00:fd:31:ab:18:26:e3:41:af:af:39:
         55:9b:24:d2:ff:ed:87:3d:23:7a:f0:f5:58:96:30:f4:f1:cc:
         e1:c3:13:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:24 2024 by rpki-client on console-fra.rpki-client.org