Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SmzHsER-I3S1k0w9AoP89htcRXc.roa
File:                     SmzHsER-I3S1k0w9AoP89htcRXc.roa (raw, json)
Hash identifier:          3bgrzY2HiwbDA35ho1MmMOxvAquzTxJEjjkIo9CEdG0=
Subject key identifier:   4A:6C:C7:B0:44:7E:23:74:B5:93:4C:3D:02:83:FC:F6:1B:5C:45:77
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       2A40
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SmzHsER-I3S1k0w9AoP89htcRXc.roa
Signing time:             Fri 01 Sep 2023 10:07:40 +0000
ROA not before:           Fri 01 Sep 2023 10:07:40 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     9924
IP address blocks:        118.232.64.0/18 maxlen: 18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10816 (0x2a40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep  1 10:07:40 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=4A6CC7B0447E2374B5934C3D0283FCF61B5C4577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b7:22:56:b5:e1:ae:2c:26:33:a9:64:f4:d0:
                    aa:52:2f:f0:12:04:8c:42:a7:13:17:88:a6:55:d8:
                    5a:97:3b:cb:d7:6d:aa:24:d8:9b:ee:0c:85:de:65:
                    aa:00:89:09:29:05:0a:95:89:fa:84:01:95:85:a5:
                    91:26:b6:bb:d3:1e:ca:f6:8b:95:3b:e7:c7:50:1e:
                    1c:22:01:c7:1f:b8:52:a3:e1:c1:3a:c6:d5:4e:f3:
                    7d:88:90:54:3d:51:03:d5:51:5c:89:9f:1f:82:2f:
                    0d:87:84:80:ec:f6:e6:9f:92:3b:04:06:1e:25:21:
                    20:44:b1:0d:9f:13:b2:b5:14:f8:92:46:9e:f5:1c:
                    18:35:4f:9f:eb:74:27:37:01:45:33:a7:01:66:f3:
                    e7:65:0a:25:0f:88:ae:1d:96:fa:f9:ff:fe:fe:29:
                    e6:dc:2f:34:08:c5:0f:f6:70:e5:8b:58:dc:f8:4a:
                    40:22:5f:61:c5:63:c3:bb:ea:63:be:bc:eb:19:29:
                    08:75:ac:ba:0b:fa:b8:05:ff:72:33:4e:74:aa:36:
                    6a:01:dd:be:97:a8:95:11:65:8c:6a:e6:77:15:38:
                    4f:63:75:23:d8:a6:27:e7:49:d3:9b:ea:fe:77:0a:
                    b9:e7:d4:29:29:ed:00:2b:d2:d0:eb:5d:1d:20:7a:
                    53:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:6C:C7:B0:44:7E:23:74:B5:93:4C:3D:02:83:FC:F6:1B:5C:45:77
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SmzHsER-I3S1k0w9AoP89htcRXc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         74:cd:e8:0b:ff:2a:75:73:2a:42:47:70:94:f3:c0:c4:cd:d6:
         33:7e:01:58:2c:8f:ee:be:15:ae:e7:2f:f8:03:18:1c:fd:36:
         a5:29:09:5b:ea:91:d2:c9:ab:37:aa:60:a8:82:21:19:a0:2e:
         68:d8:57:38:6f:43:31:1f:0f:f4:1e:25:24:44:94:22:64:fc:
         4e:0d:ea:86:f9:34:ed:27:2a:df:0a:84:f2:3f:83:49:1f:9d:
         67:34:aa:bd:31:3b:6b:5a:70:f6:bc:6a:da:61:7a:bf:53:0d:
         fd:d2:57:8b:48:f9:48:fe:3a:c0:ae:34:6c:7c:b3:1b:48:d5:
         c7:b8:a8:27:1b:67:e4:78:2e:52:0b:d5:f4:81:8c:47:7c:c8:
         ee:8f:2f:71:a4:ee:f4:ac:c2:ec:ff:d3:3a:53:64:16:bd:36:
         23:1c:84:cf:7f:f5:ac:25:ff:1c:e8:6c:48:c5:ca:2a:48:d3:
         d0:75:bc:26:f9:5d:c1:bb:a2:f3:a9:fa:39:bb:2b:1c:f9:57:
         02:8f:82:c4:32:35:43:d5:6b:ec:1f:39:f7:f2:1a:9b:fb:ec:
         c8:f6:23:fe:d4:0d:b9:b5:38:64:75:7d:46:d9:38:cc:3f:8e:
         4a:34:c5:d6:fd:3b:a6:19:73:66:d6:e2:9a:11:0c:45:ad:2c:
         fc:4b:26:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:25 2024 by rpki-client on console-fra.rpki-client.org