Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TVGnYbsEI8yI0IkGubIz__NXlrk.roa
File:                     TVGnYbsEI8yI0IkGubIz__NXlrk.roa (raw, json)
Hash identifier:          y7wbSJBQCoAcyUqeYwu03Aajt9yW5SZqy6tS57plsWE=
Subject key identifier:   4D:51:A7:61:BB:04:23:CC:88:D0:89:06:B9:B2:33:FF:F3:57:96:B9
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       2887
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TVGnYbsEI8yI0IkGubIz__NXlrk.roa
Signing time:             Fri 01 Sep 2023 10:05:27 +0000
ROA not before:           Fri 01 Sep 2023 10:05:27 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     38841
IP address blocks:        123.193.9.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10375 (0x2887)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep  1 10:05:27 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=4D51A761BB0423CC88D08906B9B233FFF35796B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:58:81:70:81:c8:21:53:52:21:ca:52:75:fd:
                    16:46:b9:cd:0b:df:92:80:95:3d:3b:5d:bb:37:1a:
                    09:30:ff:a3:4e:93:01:8e:16:50:1b:ac:80:d9:63:
                    a8:03:c9:00:40:7b:ab:24:51:c1:15:c7:13:ef:e9:
                    a9:65:8a:5e:d3:f8:2e:52:9b:57:3e:5d:39:ad:7d:
                    2e:3d:13:c4:4d:ea:51:6e:46:6f:9c:40:04:54:35:
                    b6:de:80:75:91:c6:24:01:88:76:0f:f3:dd:b0:eb:
                    07:4a:1e:85:ec:0d:a3:ea:68:30:e4:3d:a4:96:8c:
                    e1:57:5b:7c:a8:a7:aa:ec:7f:5e:aa:d7:f6:d2:09:
                    22:43:77:78:72:03:41:2c:de:93:b3:2b:45:8f:68:
                    f4:47:0c:0e:ee:dc:fa:9c:8a:d0:ce:6c:e5:05:3d:
                    a9:19:4b:e7:49:5d:f0:af:f8:be:cb:01:76:f6:ff:
                    66:32:7b:44:a1:ef:ae:6b:db:60:25:34:11:4a:69:
                    3c:a8:9c:96:46:88:3f:22:b5:1e:a1:c8:a2:cf:dc:
                    6f:0d:f0:8f:f7:95:e6:93:71:5a:91:0b:9f:65:37:
                    fd:fc:59:da:61:a5:30:50:73:cd:27:0b:66:c2:83:
                    58:0b:a5:cb:ba:86:d0:63:db:d2:2a:21:ba:29:38:
                    a7:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:51:A7:61:BB:04:23:CC:88:D0:89:06:B9:B2:33:FF:F3:57:96:B9
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TVGnYbsEI8yI0IkGubIz__NXlrk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:fa:0a:7e:3f:95:6e:8a:3f:8c:d8:77:24:07:42:95:3d:66:
         09:7d:a9:ee:fb:84:3b:c5:1d:eb:2c:f4:74:c9:63:87:a5:2f:
         13:9e:06:e4:8e:59:28:63:a4:44:fa:d5:bb:42:04:50:e0:46:
         f4:dd:ac:86:69:f3:fb:c2:d9:76:e5:ae:ed:e8:46:8b:0f:41:
         30:ae:a1:c6:bc:62:c6:2a:c7:4e:6a:02:ef:a0:6d:00:bd:71:
         23:af:78:22:3f:10:17:3a:c3:9f:54:d4:3c:2c:63:88:46:81:
         62:93:4d:4b:ba:92:50:23:b5:3d:56:d3:68:b0:48:b3:27:0e:
         90:11:9d:0f:73:37:ca:1c:a4:d9:df:db:23:d2:11:94:12:34:
         60:e9:bd:6a:94:5a:5b:d1:5e:de:b5:bc:9c:79:68:97:db:26:
         27:1a:ca:09:30:f9:b3:c9:ce:66:7d:5e:d0:4c:b2:e1:ea:fe:
         7c:a8:8e:41:52:3a:1f:a2:8f:72:36:ee:71:18:2d:ee:1c:88:
         ed:16:78:cd:d8:69:63:29:26:e5:c0:e4:5a:25:d3:1d:15:0f:
         2c:98:20:8e:b3:94:83:b4:8b:7d:c9:43:86:5f:f8:8b:3f:ee:
         62:cc:24:05:74:4e:df:45:2c:2f:a8:f4:00:06:6f:a7:b0:a6:
         fd:0f:a5:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:25 2024 by rpki-client on console-fra.rpki-client.org