Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RVBaUiEhefIm0mSP6QJur__8kyc.roa
File:                     RVBaUiEhefIm0mSP6QJur__8kyc.roa (raw, json)
Hash identifier:          arMToFrTIrTa03Iz51owE5HdUKjAfQVy1z9dS5/jiJk=
Subject key identifier:   45:50:5A:52:21:21:79:F2:26:D2:64:8F:E9:02:6E:AF:FF:FC:93:27
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       2959
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RVBaUiEhefIm0mSP6QJur__8kyc.roa
Signing time:             Fri 01 Sep 2023 10:06:24 +0000
ROA not before:           Fri 01 Sep 2023 10:06:24 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     38841
IP address blocks:        211.76.124.0/25 maxlen: 25

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10585 (0x2959)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep  1 10:06:24 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=45505A52212179F226D2648FE9026EAFFFFC9327
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c4:ec:14:c2:3e:94:43:2b:fd:94:05:5f:4c:
                    c2:3d:6a:22:47:de:b6:e5:fa:3a:68:33:c9:04:a4:
                    da:cb:cb:bc:11:4d:17:54:94:a0:77:50:dc:1d:b6:
                    dd:99:69:04:15:49:06:ff:86:d8:38:67:7c:59:9e:
                    0f:ef:f9:23:12:ad:c8:a1:f0:54:6b:2c:55:ac:7e:
                    42:4c:49:d7:2b:d1:e8:5a:62:53:82:8b:7f:27:ed:
                    cd:d4:0c:ed:c4:ee:da:68:0c:cd:e9:0f:78:72:e0:
                    39:0a:93:75:60:bf:8d:4f:82:f1:ea:12:dc:86:73:
                    29:3a:7d:c8:b5:6d:a2:be:0b:de:3f:a5:37:94:3f:
                    7b:cf:6e:54:c7:f7:7c:af:3e:9d:cc:16:dd:9a:fd:
                    e6:3a:0e:a4:33:b1:08:e8:de:ad:96:9d:86:58:ca:
                    91:9d:91:87:7e:fb:d7:ee:5a:ef:14:a2:a1:4b:0c:
                    fd:fe:90:12:5c:7e:b8:af:2b:89:e4:c3:1e:bc:91:
                    03:b1:96:de:56:35:31:ac:06:dd:b4:ed:bc:61:66:
                    66:db:9f:2f:c5:9c:8e:80:3b:be:98:4e:c4:0f:9c:
                    15:64:c4:40:78:7b:b5:db:57:e0:f6:9f:cb:31:87:
                    40:a4:dc:09:80:3f:44:65:59:0f:ba:a4:b7:94:37:
                    8a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:50:5A:52:21:21:79:F2:26:D2:64:8F:E9:02:6E:AF:FF:FC:93:27
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RVBaUiEhefIm0mSP6QJur__8kyc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.76.124.0/25

    Signature Algorithm: sha256WithRSAEncryption
         bb:2f:ac:bb:01:11:41:90:ed:e5:1d:d0:5a:9e:fb:b7:57:c9:
         78:83:ce:3b:26:ac:b2:1d:1e:e6:92:51:03:c1:8e:e8:25:4d:
         4a:2c:52:5d:63:88:e4:b3:bd:69:2a:1b:7b:ca:71:1a:90:4e:
         51:6b:f7:64:5b:07:a0:07:6c:9f:6b:89:70:51:cc:e5:a8:61:
         56:63:95:32:09:4c:62:8e:ff:93:d0:f2:b9:ce:f6:e5:26:09:
         57:38:a4:4f:3a:7e:c3:6c:07:36:ab:d6:4e:44:ce:a0:a2:2a:
         c1:63:b6:29:8b:0c:84:86:f4:b9:bc:f1:a5:a0:52:a9:6f:8e:
         9f:31:45:a4:02:85:f0:53:2b:de:d7:10:82:8f:7d:a0:54:7c:
         95:0e:8d:8b:10:54:4c:03:63:1f:41:51:d0:a3:09:68:f5:7b:
         18:71:2d:24:7b:03:84:89:22:8e:c9:05:f5:88:fe:ad:31:87:
         0d:b6:3f:91:3e:1c:86:52:3e:ac:c7:7d:31:c2:f6:68:8b:d4:
         9e:b5:03:75:3e:43:59:37:bb:e0:d9:35:73:0b:c1:f0:cb:c5:
         a9:80:d3:bd:cf:6a:6c:fc:46:ee:87:9f:77:b2:6a:db:68:9d:
         5e:ff:48:d9:01:eb:e9:58:da:e7:ec:48:b1:ee:50:e7:11:a1:
         47:24:aa:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:25 2024 by rpki-client on console-fra.rpki-client.org