Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Sn0-2Fcno4S2ySU9G501f556_rc.roa
File:                     Sn0-2Fcno4S2ySU9G501f556_rc.roa (raw, json)
Hash identifier:          PLXEdrvOy55YKlXcPWEs0dMVOyLBhPxCuMW8ImdfMko=
Subject key identifier:   4A:7D:3E:D8:57:27:A3:84:B6:C9:25:3D:1B:9D:35:7F:9E:7A:FE:B7
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       28C4
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Sn0-2Fcno4S2ySU9G501f556_rc.roa
Signing time:             Fri 01 Sep 2023 10:05:44 +0000
ROA not before:           Fri 01 Sep 2023 10:05:44 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     9924
IP address blocks:        118.232.128.0/18 maxlen: 18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10436 (0x28c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep  1 10:05:44 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=4A7D3ED85727A384B6C9253D1B9D357F9E7AFEB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:56:d6:97:05:59:b2:8a:16:8f:91:8e:2c:ad:
                    c8:50:41:21:7e:8c:30:0c:67:b2:62:80:ad:a7:44:
                    db:fc:51:56:d5:1c:36:3e:14:9b:ca:36:82:23:fc:
                    5b:db:b8:12:50:9f:3c:ae:9f:70:78:72:c2:ed:1e:
                    b2:7c:3c:a7:b6:13:39:f8:89:e8:be:57:95:ee:32:
                    63:7a:07:07:66:59:06:14:d3:98:00:4e:89:62:7a:
                    17:72:0d:fe:e3:e2:44:c4:ed:32:a2:1b:09:de:38:
                    7f:47:33:2b:06:ef:96:d2:25:4e:a2:d2:c3:16:14:
                    a7:c2:04:ef:b8:0b:16:0e:a8:62:22:b1:a9:64:d6:
                    c4:af:56:27:a2:93:0f:f4:00:2f:1e:38:70:2b:b8:
                    af:94:42:a3:ee:ea:07:71:d9:9e:c2:38:5f:d8:10:
                    c9:ae:3b:00:d1:11:c3:5d:8f:15:0c:e0:42:ab:89:
                    60:a7:96:33:5a:ad:71:36:d8:02:66:10:42:47:ff:
                    3d:6e:f9:8c:44:7e:ba:3d:f9:7d:e4:8b:f5:c9:87:
                    79:50:17:8c:57:d0:b0:1d:c2:81:ee:92:52:80:79:
                    f8:70:e2:1b:93:e5:e0:bc:a0:b7:cf:ce:d5:55:e2:
                    7e:22:3e:2f:b7:b4:f5:f3:11:d3:70:7c:15:c6:51:
                    d7:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:7D:3E:D8:57:27:A3:84:B6:C9:25:3D:1B:9D:35:7F:9E:7A:FE:B7
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Sn0-2Fcno4S2ySU9G501f556_rc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         98:ea:4e:73:ac:a2:38:38:b4:90:f1:c5:f2:45:c6:93:6b:5c:
         3f:a6:69:6f:7c:45:3e:bf:04:7c:f0:2a:e0:1a:4f:b3:f0:fb:
         63:d0:0f:9c:2c:98:08:e5:a1:29:70:24:55:3e:8a:78:af:09:
         4b:91:26:46:02:dc:a8:be:31:f4:75:67:c3:93:71:2f:c7:4d:
         6e:31:95:0a:07:f8:0c:ce:c6:cd:db:65:9c:98:63:41:6d:15:
         f5:3a:b3:4d:cd:85:ac:65:52:8a:bb:a8:ae:2e:b1:9e:ce:51:
         48:9d:86:c8:1c:da:54:0a:9b:bb:71:b0:44:85:a5:f1:7a:04:
         f2:0f:7a:23:70:a9:03:33:71:f0:e6:24:0e:7e:10:7e:ad:6e:
         40:cb:42:ef:3e:ea:9a:a5:05:e8:0a:56:81:e1:bc:47:6d:61:
         ac:83:74:00:37:7d:c5:5b:9e:03:5c:1b:7d:54:c9:bb:24:f3:
         e4:65:77:a3:b0:08:be:9f:33:e7:29:c0:5a:d0:61:16:e0:30:
         06:69:12:c3:98:1c:6c:11:bf:6b:d0:f7:1e:10:17:85:6d:82:
         36:28:12:9a:28:ff:5b:f3:cd:0c:e0:60:87:ed:c2:1a:72:63:
         89:29:47:c2:e8:6d:59:ce:ed:db:04:0b:10:1c:91:b2:e3:67:
         b1:d4:d8:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:25 2024 by rpki-client on console-fra.rpki-client.org