Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/T_O6jHzzqCRwrYoSyvkwe6wGEX4.roa
File:                     T_O6jHzzqCRwrYoSyvkwe6wGEX4.roa (raw, json)
Hash identifier:          zrzaOrrb62qRMfAV26R2IKru6K8xS1LqfnIoRpslhK8=
Subject key identifier:   4F:F3:BA:8C:7C:F3:A8:24:70:AD:8A:12:CA:F9:30:7B:AC:06:11:7E
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       29C1
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/T_O6jHzzqCRwrYoSyvkwe6wGEX4.roa
Signing time:             Fri 01 Sep 2023 10:07:02 +0000
ROA not before:           Fri 01 Sep 2023 10:07:02 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     38841
IP address blocks:        123.192.80.0/21 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10689 (0x29c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep  1 10:07:02 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=4FF3BA8C7CF3A82470AD8A12CAF9307BAC06117E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a7:f1:d4:d7:87:3d:3e:46:e2:f7:1a:50:dc:
                    53:25:d3:70:1e:5b:91:1f:e3:4b:82:ee:18:4f:0a:
                    6c:d8:01:92:47:5e:44:d3:ff:4b:b1:95:77:49:5f:
                    d3:20:ef:c5:7f:7a:da:a8:f9:bc:b6:3c:0d:ca:14:
                    89:34:24:50:04:6b:bf:96:48:a8:e2:8a:f1:ab:dd:
                    b8:6a:e5:45:b9:8b:e9:3b:f8:ff:bf:d2:e9:04:9f:
                    6c:5a:27:bb:41:38:6f:a4:90:fe:d5:61:aa:44:7f:
                    d7:d6:c8:47:6d:0c:56:48:17:5e:7f:16:0c:0e:9a:
                    e2:9e:c9:08:f2:08:15:90:c4:ed:b8:06:11:eb:1d:
                    10:3b:33:3d:78:d2:7d:a1:6c:ae:88:9d:96:8b:70:
                    0f:11:18:84:4e:40:68:78:f6:6c:4a:62:db:e4:6e:
                    26:2c:89:11:f8:1b:5e:79:22:96:4e:04:13:be:d0:
                    bd:5e:07:11:1c:dd:3d:99:61:b5:d9:10:6b:fd:8d:
                    41:9d:9a:b9:7d:87:30:5a:5a:9e:77:ba:42:ef:7e:
                    8d:bd:09:f7:61:bd:0b:4c:f6:6b:53:c7:84:89:5b:
                    c9:ce:b8:0b:34:3f:43:55:7e:30:d6:7b:d0:38:e7:
                    84:60:01:34:e6:54:0e:f0:4f:f1:c5:0e:00:f8:ca:
                    d9:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:F3:BA:8C:7C:F3:A8:24:70:AD:8A:12:CA:F9:30:7B:AC:06:11:7E
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/T_O6jHzzqCRwrYoSyvkwe6wGEX4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.192.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         83:d6:3f:91:f6:93:73:c8:a8:5e:4a:31:d3:74:b5:93:c9:2a:
         f3:41:3e:2b:02:d4:0f:47:a7:ea:e2:9c:cb:0c:a8:0a:b0:2f:
         3e:37:36:dd:dd:6b:84:f8:89:3f:d4:16:9e:9a:a9:c5:e4:25:
         aa:ad:a4:55:21:4e:84:06:fb:d9:69:2a:20:10:2b:82:a3:f4:
         92:70:1d:fe:ae:20:cc:73:32:93:f7:c4:dc:84:d5:88:14:8c:
         9b:b5:ed:4a:9e:42:20:bb:ab:f2:b9:78:a4:06:74:31:52:0d:
         36:52:b4:8e:d6:64:02:db:bf:f1:50:df:3d:00:fa:90:45:e4:
         ed:d7:09:aa:06:cd:e8:a9:56:fa:29:1c:5b:6c:fd:56:da:da:
         ff:94:8a:16:d7:e8:ed:e0:62:3b:fe:9f:06:94:31:ad:80:40:
         f8:31:0a:ee:e8:70:39:71:a3:99:4b:cd:13:44:39:c2:4f:72:
         ee:a2:79:9a:e7:bd:29:9d:c2:60:ca:b6:8d:38:84:a7:57:95:
         95:33:02:82:ea:10:1f:dd:a6:fe:86:cf:f8:b1:a5:7d:92:f7:
         4b:65:b4:b9:4c:23:8c:ea:c1:26:c0:2f:6e:28:71:e1:6e:ab:
         db:89:6a:66:fe:38:6f:7d:8e:fa:02:be:29:73:2a:5d:64:69:
         96:fb:05:9d
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICKcEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx
MDA3MDJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDRGRjNCQThDN0NGM0E4
MjQ3MEFEOEExMkNBRjkzMDdCQUMwNjExN0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCop/HU14c9Pkbi9xpQ3FMl03AeW5Ef40uC7hhPCmzYAZJHXkTT
/0uxlXdJX9Mg78V/etqo+by2PA3KFIk0JFAEa7+WSKjiivGr3bhq5UW5i+k7+P+/
0ukEn2xaJ7tBOG+kkP7VYapEf9fWyEdtDFZIF15/FgwOmuKeyQjyCBWQxO24BhHr
HRA7Mz140n2hbK6InZaLcA8RGIROQGh49mxKYtvkbiYsiRH4G155IpZOBBO+0L1e
BxEc3T2ZYbXZEGv9jUGdmrl9hzBaWp53ukLvfo29CfdhvQtM9mtTx4SJW8nOuAs0
P0NVfjDWe9A454RgATTmVA7wT/HFDgD4ytk9AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUT/O6jHzzqCRwrYoSyvkwe6wGEX4wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1RfTzZqSHp6cUNSd3JZb1N5
dmt3ZTZ3R0VYNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7
wFAwDQYJKoZIhvcNAQELBQADggEBAIPWP5H2k3PIqF5KMdN0tZPJKvNBPisC1A9H
p+rinMsMqAqwLz43Nt3da4T4iT/UFp6aqcXkJaqtpFUhToQG+9lpKiAQK4Kj9JJw
Hf6uIMxzMpP3xNyE1YgUjJu17UqeQiC7q/K5eKQGdDFSDTZStI7WZALbv/FQ3z0A
+pBF5O3XCaoGzeipVvopHFts/Vba2v+UihbX6O3gYjv+nwaUMa2AQPgxCu7ocDlx
o5lLzRNEOcJPcu6ieZrnvSmdwmDKto04hKdXlZUzAoLqEB/dpv6Gz/ixpX2S90tl
tLlMI4zqwSbAL24oceFuq9uJamb+OG99jvoCvilzKl1kaZb7BZ0=
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:18 2024 by rpki-client on console-ams.rpki-client.org