Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Rl4BdGE-0fejfAvJ4PxLVt4kRrQ.roa
File:                     Rl4BdGE-0fejfAvJ4PxLVt4kRrQ.roa (raw, json)
Hash identifier:          LwXMJSGMgdHTAMIS0aU7+oSHvANzZki13Qd/rQRE4DQ=
Subject key identifier:   46:5E:01:74:61:3E:D1:F7:A3:7C:0B:C9:E0:FC:4B:56:DE:24:46:B4
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       2838
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Rl4BdGE-0fejfAvJ4PxLVt4kRrQ.roa
Signing time:             Fri 01 Sep 2023 10:05:05 +0000
ROA not before:           Fri 01 Sep 2023 10:05:05 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     38841
IP address blocks:        180.177.64.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10296 (0x2838)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep  1 10:05:05 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=465E0174613ED1F7A37C0BC9E0FC4B56DE2446B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:a5:98:58:40:43:f7:e9:35:50:58:6c:41:d0:
                    d8:66:a0:df:ed:65:25:57:bc:6c:76:d0:e1:a4:ef:
                    1c:f7:8b:b4:9f:d9:58:07:ac:65:88:4d:cb:48:a3:
                    dd:7b:6c:59:11:a7:13:df:71:6b:5d:dc:5a:d6:8d:
                    46:06:0e:1f:6b:15:81:9a:da:83:b5:19:84:83:c8:
                    c1:c2:78:44:63:a3:1f:dc:1c:f4:dd:e3:12:45:1a:
                    00:37:f9:5d:9c:eb:99:55:74:73:c7:86:93:d5:8f:
                    85:bd:2f:c3:d1:91:01:b8:8a:5f:52:ea:d3:8d:71:
                    e0:48:fe:9e:90:81:8a:cd:3c:9c:1e:f7:7b:fb:0a:
                    48:ac:46:b8:06:63:86:78:ae:9a:a6:a3:e7:61:ba:
                    5d:1c:a7:34:18:2a:80:5c:85:8c:42:0a:53:1f:24:
                    e1:9c:05:e6:34:cc:5c:b7:7d:8e:7b:86:6a:29:79:
                    d3:91:06:2a:24:e2:f0:a5:24:9a:26:d9:54:26:14:
                    a3:75:6e:5f:49:53:2e:74:e4:9d:d1:af:7e:bb:a6:
                    6a:56:54:e0:f1:c9:61:c0:9c:81:2e:d6:49:15:48:
                    6f:09:1b:dc:1b:39:14:e3:a7:8f:56:55:42:2e:e7:
                    aa:70:d8:6c:9e:d7:6f:f3:80:03:20:eb:a5:1f:e5:
                    a0:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:5E:01:74:61:3E:D1:F7:A3:7C:0B:C9:E0:FC:4B:56:DE:24:46:B4
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Rl4BdGE-0fejfAvJ4PxLVt4kRrQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a9:7f:6a:e6:06:1d:27:ac:a1:49:45:8d:fa:af:85:79:64:a6:
         f1:70:b4:8d:a5:d5:02:91:e5:cb:d9:eb:fa:ab:51:f4:97:7e:
         a2:0f:b6:ce:75:37:74:ba:40:75:e9:a9:54:a0:bd:7f:23:50:
         aa:86:ba:1d:7d:61:5f:c9:f4:d5:e5:96:c3:32:38:9a:dc:65:
         6d:d2:6b:b6:1b:9e:22:76:d1:21:11:3a:31:8e:d5:15:1b:ad:
         aa:28:19:22:58:0a:49:a7:d2:c9:b9:55:04:23:3c:73:30:00:
         97:72:8a:5e:fb:3e:84:38:62:10:f5:62:5d:53:95:a9:b7:07:
         2a:42:3c:0c:f9:d9:3e:97:b2:e2:7a:c6:f5:0d:ff:23:32:1f:
         30:31:c4:74:af:35:41:09:62:e7:24:3d:b4:d0:84:6b:f0:a8:
         3c:b9:c1:81:1b:13:c5:cd:3e:f2:85:c4:59:68:44:81:07:1a:
         c4:65:79:29:60:f4:f3:68:88:bb:7d:13:13:68:ce:be:a6:0e:
         20:e4:61:c8:46:03:f5:1e:a1:1f:f8:5a:e8:c6:66:d6:c0:d2:
         fa:00:79:94:aa:90:5e:27:90:14:b5:44:50:70:c5:d8:9d:bb:
         c5:04:bb:30:c4:11:62:67:3e:f4:20:a1:aa:1e:fd:1b:71:50:
         a2:0d:02:f6
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICKDgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx
MDA1MDVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDQ2NUUwMTc0NjEzRUQx
RjdBMzdDMEJDOUUwRkM0QjU2REUyNDQ2QjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD3pZhYQEP36TVQWGxB0NhmoN/tZSVXvGx20OGk7xz3i7Sf2VgH
rGWITctIo917bFkRpxPfcWtd3FrWjUYGDh9rFYGa2oO1GYSDyMHCeERjox/cHPTd
4xJFGgA3+V2c65lVdHPHhpPVj4W9L8PRkQG4il9S6tONceBI/p6QgYrNPJwe93v7
CkisRrgGY4Z4rpqmo+dhul0cpzQYKoBchYxCClMfJOGcBeY0zFy3fY57hmopedOR
Biok4vClJJom2VQmFKN1bl9JUy505J3Rr367pmpWVODxyWHAnIEu1kkVSG8JG9wb
ORTjp49WVUIu56pw2Gye12/zgAMg66Uf5aCnAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQURl4BdGE+0fejfAvJ4PxLVt4kRrQwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1JsNEJkR0UtMGZlamZBdko0
UHhMVnQ0a1JyUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0
sUAwDQYJKoZIhvcNAQELBQADggEBAKl/auYGHSesoUlFjfqvhXlkpvFwtI2l1QKR
5cvZ6/qrUfSXfqIPts51N3S6QHXpqVSgvX8jUKqGuh19YV/J9NXllsMyOJrcZW3S
a7YbniJ20SEROjGO1RUbraooGSJYCkmn0sm5VQQjPHMwAJdyil77PoQ4YhD1Yl1T
lam3BypCPAz52T6XsuJ6xvUN/yMyHzAxxHSvNUEJYuckPbTQhGvwqDy5wYEbE8XN
PvKFxFloRIEHGsRleSlg9PNoiLt9ExNozr6mDiDkYchGA/UeoR/4WujGZtbA0voA
eZSqkF4nkBS1RFBwxdidu8UEuzDEEWJnPvQgoaoe/RtxUKINAvY=
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:25 2024 by rpki-client on console-fra.rpki-client.org