Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PMd-rp3th-WocwcJEnx1QddIKkE.roa
File:                     PMd-rp3th-WocwcJEnx1QddIKkE.roa (raw, json)
Hash identifier:          Etc6ysAd+c2uePyzhbsirqHc/id33iy1xaTFUntJ3gw=
Subject key identifier:   3C:C7:7E:AE:9D:ED:87:E5:A8:73:07:09:12:7C:75:41:D7:48:2A:41
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       291F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PMd-rp3th-WocwcJEnx1QddIKkE.roa
Signing time:             Fri 01 Sep 2023 10:06:10 +0000
ROA not before:           Fri 01 Sep 2023 10:06:10 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     38841
IP address blocks:        180.177.228.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10527 (0x291f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep  1 10:06:10 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=3CC77EAE9DED87E5A8730709127C7541D7482A41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c3:c0:68:8e:b8:78:60:2e:6d:88:1c:22:04:
                    43:e2:96:b1:9f:6b:b0:a8:0b:3e:c7:55:7e:f1:e0:
                    f0:af:d6:cb:4d:82:08:45:c9:37:6d:c0:14:98:b9:
                    89:b3:61:7d:3f:5c:2a:fa:7f:13:34:7f:b4:81:1a:
                    ae:ad:da:d5:b2:bf:82:93:a6:56:94:01:09:4e:78:
                    00:2c:79:6f:67:e5:fd:25:bf:27:fb:7d:a9:5b:6c:
                    50:11:cb:03:5a:8b:d5:4b:f1:40:75:b3:52:8c:61:
                    27:a4:e8:8f:38:5d:6b:42:a7:f4:c6:84:cc:c7:02:
                    1b:34:26:59:86:72:2f:6b:84:7f:f4:ff:c0:96:7f:
                    4b:22:ed:82:9d:9a:52:5b:a6:ae:23:75:b0:04:30:
                    4d:54:2d:54:3b:bf:7a:5b:1d:5d:10:4d:71:e7:6d:
                    32:0c:08:47:17:59:24:a5:fc:8a:80:b7:9a:74:a9:
                    4c:56:1c:62:83:dc:dc:dd:f3:ef:d0:35:8f:4d:e5:
                    bd:17:fb:70:13:5c:c7:8c:6c:88:a5:b9:c5:25:63:
                    8b:b6:d9:04:ee:f3:7e:dc:27:fa:19:f3:dd:09:59:
                    32:2d:21:63:64:9f:76:fe:fc:00:89:5e:70:11:53:
                    4f:c2:e2:75:f8:8e:d5:19:c5:df:09:70:03:40:ce:
                    c9:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:C7:7E:AE:9D:ED:87:E5:A8:73:07:09:12:7C:75:41:D7:48:2A:41
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PMd-rp3th-WocwcJEnx1QddIKkE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:e6:9f:ce:bd:d8:e2:99:19:1d:15:13:63:ef:21:28:60:32:
         b5:69:64:1e:70:4b:da:63:67:ba:11:91:db:05:ac:c6:d3:e8:
         ac:f8:22:2d:88:4f:d1:76:bb:63:2c:39:d9:fc:b8:0c:66:14:
         eb:67:fd:88:97:42:34:3d:6b:54:2a:67:15:c6:6c:ac:85:ac:
         45:69:a3:00:c9:b2:0f:86:1a:29:81:ac:26:1f:49:f6:dd:ea:
         5d:d6:49:d9:9a:dc:52:ec:9b:c4:a1:c2:1a:6e:66:c2:d3:3d:
         e2:a2:a3:fb:1b:4f:6d:8a:e0:2f:52:3c:a0:1d:5d:0e:20:b3:
         0f:cf:4b:7c:e9:fb:d2:0e:e9:bd:25:86:c2:40:0c:2a:0d:5e:
         14:b0:cc:6e:3d:a9:fc:25:3c:52:84:9c:bc:eb:22:23:1f:fa:
         27:b2:e6:59:d1:e4:8c:3e:7f:c0:88:b7:fd:6e:f6:83:df:55:
         61:86:2d:cc:1b:8d:c9:5f:ce:4c:02:7d:71:df:73:cb:15:24:
         5f:fa:a3:79:54:1b:f8:a0:44:7e:31:59:f4:b7:3e:93:70:27:
         cd:4f:98:fe:29:4a:a7:28:f7:05:ba:be:a7:f3:e9:0b:06:5a:
         d1:a6:74:90:b4:1f:2e:93:5d:47:31:f9:54:38:18:d4:89:4f:
         e6:65:cb:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:18 2024 by rpki-client on console-ams.rpki-client.org