Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SIrJ3e_Dlt8x0VEYvVgoPTyQWnw.roa
File:                     SIrJ3e_Dlt8x0VEYvVgoPTyQWnw.roa (raw, json)
Hash identifier:          /bkNI2fz5Gwaaq3nGLNA8wA6TSk0EFusYAjsJX7fXKg=
Subject key identifier:   48:8A:C9:DD:EF:C3:96:DF:31:D1:51:18:BD:58:28:3D:3C:90:5A:7C
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       2A3E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SIrJ3e_Dlt8x0VEYvVgoPTyQWnw.roa
Signing time:             Fri 01 Sep 2023 10:07:39 +0000
ROA not before:           Fri 01 Sep 2023 10:07:39 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     38841
IP address blocks:        123.192.4.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10814 (0x2a3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep  1 10:07:39 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=488AC9DDEFC396DF31D15118BD58283D3C905A7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:2f:72:9d:e6:32:ec:ef:ae:e8:9e:67:d2:cf:
                    54:1a:8f:3c:0d:4b:68:2c:8c:0c:c4:6c:4e:73:ef:
                    4a:ca:09:84:ca:e1:ab:86:92:70:ba:b3:c6:e1:bb:
                    14:e0:f2:f6:6e:63:03:db:73:da:f0:d4:58:9b:91:
                    ed:3f:4d:6b:b8:a6:79:a7:a4:ad:90:ab:c2:3f:5d:
                    94:fa:5f:44:5c:c5:2e:a2:68:1d:c8:05:67:fc:b8:
                    7b:0b:7f:d0:be:c9:e0:fe:8c:83:45:f2:e3:d4:97:
                    f2:8b:5a:df:fa:40:43:bc:89:1d:db:ac:83:d2:72:
                    67:db:d5:82:86:68:3f:fd:48:38:52:fb:b5:90:89:
                    52:3e:03:e0:c2:3d:5a:75:d0:98:7e:1b:57:f0:ec:
                    9e:50:24:53:89:30:aa:d6:0f:6b:c8:45:3f:b1:32:
                    0a:56:ee:4f:84:e7:af:59:85:51:1c:e1:a0:36:1c:
                    9f:bf:9e:de:95:61:9c:fe:0c:c6:7f:3d:e7:da:aa:
                    22:c4:04:eb:6c:13:61:72:3c:d7:e1:5c:88:0c:61:
                    5e:aa:2b:14:4a:2b:7c:a7:db:a8:11:80:b4:0b:c2:
                    cb:76:86:5e:ca:7f:15:da:96:f3:f1:8f:69:97:b6:
                    47:b0:ce:8d:b6:ba:29:ae:25:d5:5f:1a:48:69:4a:
                    ed:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:8A:C9:DD:EF:C3:96:DF:31:D1:51:18:BD:58:28:3D:3C:90:5A:7C
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SIrJ3e_Dlt8x0VEYvVgoPTyQWnw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.192.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:5d:40:76:78:d8:0a:06:b2:39:5b:f6:bc:08:a2:6c:82:3d:
         f9:07:3b:dd:af:58:9e:91:b9:bf:40:64:fe:bd:d1:43:c3:c5:
         cb:c6:d6:ea:2b:04:b1:b6:09:92:7d:12:90:6f:8d:d3:b9:0b:
         5a:91:6a:ce:0c:19:f6:e2:fa:52:bd:8b:4c:31:b3:80:45:10:
         ef:92:51:8e:ed:03:5a:48:91:e2:09:0f:8d:08:e8:4d:97:9f:
         6f:eb:d5:d0:1b:9a:37:08:45:60:80:55:30:6f:27:0f:56:42:
         f5:97:07:97:ad:9e:39:b3:55:69:5e:b7:fe:5d:54:18:b4:c7:
         f0:3f:12:a5:2b:26:c2:a7:42:ee:80:1d:ff:57:4d:2c:9a:db:
         fc:ec:99:7d:3e:bf:40:d1:ee:98:89:1c:94:8d:dd:1a:a7:38:
         63:86:f1:74:e7:b6:36:3e:67:1f:2e:ba:97:4c:36:22:10:99:
         42:2b:27:46:55:f4:b0:aa:0b:fc:cb:40:2b:42:07:f6:4f:e8:
         af:2c:b1:d6:a6:1c:01:fa:7a:d9:06:24:44:5a:ee:81:75:19:
         0f:be:0a:5f:99:31:cc:76:d3:0d:4a:76:93:58:2f:49:57:0f:
         09:7b:aa:20:04:3c:3c:8d:b5:6c:1d:be:af:a9:54:69:a2:f1:
         cd:70:37:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:18 2024 by rpki-client on console-ams.rpki-client.org