Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SV9XeF4QFS8KMdbyJqfUWkQD8AA.roa
File:                     SV9XeF4QFS8KMdbyJqfUWkQD8AA.roa (raw, json)
Hash identifier:          iGRfOOsMR0MlSfUzbgTuINS9wkR8NxaaIhnlUu5za/A=
Subject key identifier:   49:5F:57:78:5E:10:15:2F:0A:31:D6:F2:26:A7:D4:5A:44:03:F0:00
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       29BC
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SV9XeF4QFS8KMdbyJqfUWkQD8AA.roa
Signing time:             Fri 01 Sep 2023 10:07:00 +0000
ROA not before:           Fri 01 Sep 2023 10:07:00 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     38841
IP address blocks:        123.192.48.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10684 (0x29bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep  1 10:07:00 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=495F57785E10152F0A31D6F226A7D45A4403F000
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:25:e1:7c:95:f3:1a:bf:9c:dc:24:94:58:16:
                    9a:31:7f:e3:be:34:64:b4:4a:dd:3d:a9:89:7d:5a:
                    c8:70:8c:cf:8c:30:74:33:01:52:d4:87:ec:85:e1:
                    53:e9:24:fe:7e:59:ae:82:a9:3f:43:c5:29:53:ae:
                    df:33:1d:fc:d9:6c:98:57:0b:2c:00:2e:87:0d:58:
                    e0:0b:1f:b8:3e:e1:14:9b:2e:7f:b4:4f:8b:1f:8a:
                    c9:b8:7f:3a:a4:73:08:92:d3:fc:40:a9:72:88:81:
                    a2:24:74:1d:58:ff:84:8a:1d:c8:14:e3:85:c7:7c:
                    bc:61:97:bd:15:03:ed:f2:cf:a0:98:4b:c8:06:3d:
                    19:59:9f:ec:91:f4:1d:f7:7c:27:12:0d:cd:de:5e:
                    46:b6:68:04:63:1f:f4:22:c0:bd:35:ae:af:9d:f9:
                    bc:5d:00:bf:9e:d1:97:a0:cc:fb:36:68:96:df:20:
                    8d:2b:4c:cf:bb:dc:51:d1:f0:e7:f9:60:b9:eb:24:
                    08:0b:24:39:6c:ca:d2:4a:97:77:19:2d:fe:51:eb:
                    11:e3:ad:82:9a:25:08:f5:ee:a3:62:8b:04:09:25:
                    1a:23:ef:7e:4c:65:13:e6:74:dd:59:79:86:07:af:
                    22:37:51:97:2c:09:b9:ca:41:db:a7:e6:47:a6:74:
                    67:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:5F:57:78:5E:10:15:2F:0A:31:D6:F2:26:A7:D4:5A:44:03:F0:00
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SV9XeF4QFS8KMdbyJqfUWkQD8AA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.192.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3b:f3:07:b8:5d:0d:b7:4a:47:10:a8:98:6e:65:39:3d:08:bb:
         dd:22:c5:85:15:22:92:e7:7b:ba:d9:44:27:91:3e:c6:4e:57:
         37:2a:fc:c3:62:ef:e7:83:29:91:21:aa:57:b0:e1:33:9a:57:
         9e:24:ce:79:dc:d6:c9:4c:17:39:ca:65:cf:af:57:7f:a8:42:
         d6:7a:53:a3:36:ee:30:79:b7:4c:47:2e:9a:83:83:f9:48:16:
         9f:1c:81:fc:fa:44:b0:6d:09:03:5b:97:d7:55:46:b5:be:73:
         28:01:85:8b:23:bd:66:93:be:39:31:02:87:a1:0d:d2:28:9b:
         84:df:56:f7:56:96:85:bd:25:d2:ba:7d:38:2d:aa:2c:23:b3:
         8f:08:ff:58:39:66:cf:3d:41:0f:47:e8:76:b2:28:d0:49:0b:
         60:a4:0e:85:6f:83:b3:55:2b:c2:24:51:91:8f:25:ff:71:f3:
         67:cf:dc:f8:9e:35:fe:57:6e:ba:80:98:88:e6:bb:4f:62:5a:
         c4:12:58:08:42:bc:58:74:d1:23:b8:24:c8:38:0a:44:fe:4d:
         b8:1a:6c:b6:2b:d8:5d:5b:e1:a6:f4:61:46:d9:d5:eb:de:e3:
         69:db:9d:89:e9:7a:94:66:49:70:78:ad:10:de:3b:d6:bf:36:
         af:ac:b3:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:18 2024 by rpki-client on console-ams.rpki-client.org