Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RNwufcWQ21PWxBHBOiMLu9yeWZM.roa
File:                     RNwufcWQ21PWxBHBOiMLu9yeWZM.roa (raw, json)
Hash identifier:          sT0FDSoduxiVgJmgjlQ9iuTBRgDutxhJVIIZmnzgjsY=
Subject key identifier:   44:DC:2E:7D:C5:90:DB:53:D6:C4:11:C1:3A:23:0B:BB:DC:9E:59:93
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       29A0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RNwufcWQ21PWxBHBOiMLu9yeWZM.roa
Signing time:             Fri 01 Sep 2023 10:06:51 +0000
ROA not before:           Fri 01 Sep 2023 10:06:51 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     38841
IP address blocks:        118.232.56.0/21 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10656 (0x29a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep  1 10:06:51 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=44DC2E7DC590DB53D6C411C13A230BBBDC9E5993
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:78:57:5b:06:28:0c:18:3d:6f:76:06:31:5b:
                    a5:a2:2b:0f:87:63:61:32:62:12:c3:2f:6f:d1:a9:
                    1e:bd:60:61:6a:2a:14:b6:39:18:72:78:3f:f0:9a:
                    15:ba:b3:26:24:da:91:c9:2e:18:db:90:be:fd:2a:
                    b0:48:1e:bf:fe:18:da:70:c2:dd:99:ec:df:0f:96:
                    6c:49:d5:32:85:dd:5f:e5:f6:34:4f:61:53:23:a6:
                    97:a9:64:08:bc:20:dc:40:71:36:ca:b1:4c:96:ef:
                    33:8b:17:e0:94:9e:b8:73:50:09:c8:b8:06:bc:86:
                    a3:a1:3b:13:5a:b7:e5:b1:d9:a1:67:13:f2:43:da:
                    5b:cf:a2:b0:5f:1e:fb:76:e3:ca:01:fb:b1:43:1a:
                    27:b0:17:76:34:d9:76:34:83:38:14:0c:46:bc:d2:
                    d2:ab:43:8f:c1:d4:32:d0:0a:9b:25:3a:ff:64:e9:
                    1f:03:c0:46:c5:38:9a:fb:67:83:27:ea:5b:e7:92:
                    79:12:f7:c0:a0:1e:18:67:f0:ed:f1:e2:04:1b:cf:
                    b7:6a:6f:e5:9f:1b:35:8e:a2:fb:58:b6:72:86:f0:
                    36:d7:37:a4:a6:ba:ec:c9:3a:76:a4:a0:de:4b:93:
                    ba:e8:c0:ee:ab:44:3e:a1:ec:60:09:87:87:b2:01:
                    cf:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:DC:2E:7D:C5:90:DB:53:D6:C4:11:C1:3A:23:0B:BB:DC:9E:59:93
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RNwufcWQ21PWxBHBOiMLu9yeWZM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         06:11:02:ee:19:94:6e:0e:d8:17:a8:74:7f:e2:c2:7f:65:35:
         57:44:f7:6d:5c:36:77:99:f4:38:f4:f6:af:89:4d:f1:ec:93:
         2c:f4:e4:1d:0f:e2:8f:6d:4d:5d:b6:e8:63:4c:92:59:76:e1:
         20:5f:a3:b9:e6:37:3a:be:58:66:05:c9:3d:d2:ae:b6:90:c4:
         8e:ac:d5:ec:06:df:07:77:66:7b:94:f4:30:af:91:5b:ad:34:
         19:09:c4:26:81:02:71:e3:51:9b:93:30:0c:b5:ae:6c:94:a2:
         ea:0d:e1:90:9a:29:88:56:89:b4:a3:83:45:5d:b8:08:46:80:
         04:bf:2b:4c:55:90:6d:a4:e8:b3:62:c2:b5:fd:6a:a0:f9:58:
         69:26:c0:52:9d:f4:fa:9d:d3:93:23:72:12:3f:50:ee:20:5c:
         50:93:db:d7:52:83:42:0a:dd:3d:b4:27:95:26:00:c7:d5:fa:
         43:ef:f7:39:23:94:bd:57:a9:f9:5a:8a:36:44:c6:0e:dd:95:
         38:55:90:db:d1:40:b3:f5:a6:f5:4b:bf:46:2c:4c:bc:be:01:
         59:db:b7:52:e4:0a:5c:20:83:75:15:fd:c2:d5:68:39:f8:25:
         ca:3d:ea:a3:d1:e7:67:37:cb:50:fc:b8:cb:53:15:76:e0:fc:
         f4:92:1f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:25 2024 by rpki-client on console-fra.rpki-client.org