Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/T-zDZMif9QyCoEXQH1IepVIFQl8.roa
File:                     T-zDZMif9QyCoEXQH1IepVIFQl8.roa (raw, json)
Hash identifier:          VmUFjsLpBDBmGGHEnBpQTtDgff/xYyNtZ5jRmTycUR0=
Subject key identifier:   4F:EC:C3:64:C8:9F:F5:0C:82:A0:45:D0:1F:52:1E:A5:52:05:42:5F
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       27EF
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/T-zDZMif9QyCoEXQH1IepVIFQl8.roa
Signing time:             Fri 01 Sep 2023 10:04:44 +0000
ROA not before:           Fri 01 Sep 2023 10:04:44 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     38841
IP address blocks:        118.233.179.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10223 (0x27ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep  1 10:04:44 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=4FECC364C89FF50C82A045D01F521EA55205425F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:12:da:28:3a:b4:5e:a3:90:36:3d:0a:76:02:
                    56:dd:f8:d0:47:13:78:d0:da:a2:63:0e:85:b6:66:
                    8a:a1:23:44:e4:78:6b:b7:a3:92:27:c5:d0:1b:9d:
                    07:78:b3:27:df:3e:e4:9f:b4:9f:b9:dd:47:9a:81:
                    bf:18:2e:9d:15:22:e0:d7:25:99:d9:72:35:f3:51:
                    a3:0d:c1:66:64:a3:92:81:a6:34:21:1d:05:74:fc:
                    36:8a:5a:c2:0a:a3:63:08:90:6c:b7:9f:b1:c7:1d:
                    0d:cf:69:31:c4:97:c4:66:bf:cf:34:39:2c:6c:a1:
                    e2:99:96:42:b4:c2:45:00:ff:1e:08:05:32:be:42:
                    df:99:79:39:a3:9b:b9:8e:c5:61:d1:37:5c:31:f6:
                    eb:8e:76:2f:18:9b:e8:c2:95:50:f7:a4:0e:ae:91:
                    0c:da:ec:47:44:9b:e9:49:e4:f5:a9:09:16:bb:0e:
                    1e:09:7f:41:d4:f6:ba:77:04:73:b7:73:1b:ae:42:
                    a6:e3:d4:ad:5f:fd:3f:cd:4e:dc:bc:9d:22:56:61:
                    f8:53:49:fc:29:d3:f2:8c:b6:58:27:cb:45:77:aa:
                    64:aa:8c:06:bb:9f:2a:bb:95:66:22:63:a8:48:6f:
                    85:2f:27:09:46:c2:78:66:1c:1c:c6:64:6d:f3:51:
                    0b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:EC:C3:64:C8:9F:F5:0C:82:A0:45:D0:1F:52:1E:A5:52:05:42:5F
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/T-zDZMif9QyCoEXQH1IepVIFQl8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.233.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:09:69:47:85:57:eb:73:e4:db:88:55:e0:df:e6:07:23:06:
         78:0d:8d:7e:74:5f:64:bb:a7:a5:fb:39:f8:1e:1e:21:49:ff:
         b6:e6:0a:9f:a3:a7:64:a4:ba:26:d7:18:a5:49:48:a8:0d:f9:
         17:b9:10:ca:1f:04:e9:13:77:06:1f:59:fe:1c:88:6c:fa:fe:
         63:1f:61:cd:34:14:06:54:f5:e6:50:7a:b9:10:49:de:2f:cf:
         92:c5:ea:73:76:40:dc:c1:66:b3:65:61:5e:5c:a9:43:6d:6e:
         6f:f3:84:e9:41:7f:b8:f2:16:4e:16:fd:bf:92:15:0f:42:d6:
         18:ae:06:7e:d2:9b:3e:93:e1:06:e3:02:40:cb:e8:d9:e9:23:
         53:42:0e:ad:6e:3d:5f:59:74:e6:2e:c6:3e:57:32:76:e6:5d:
         9d:a1:15:1a:8b:8c:f8:5e:03:f7:75:32:11:07:72:00:0d:ac:
         8e:48:a1:ef:6c:b7:f9:e4:cf:a7:c7:55:fc:ca:c1:dc:79:1c:
         cd:42:94:13:f5:76:23:74:a2:2a:b4:51:bd:88:33:ba:c1:1e:
         cd:8e:e0:c6:1f:51:eb:50:4a:06:d5:1e:d6:a3:7c:ea:15:9f:
         6a:4c:d9:3d:2f:d6:9f:62:51:5a:4c:79:44:54:ed:0b:0e:ae:
         4a:21:80:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:25 2024 by rpki-client on console-fra.rpki-client.org