Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/V3AJlBkd1VmLdIl6ku6p6M-99CM.roa
File:                     V3AJlBkd1VmLdIl6ku6p6M-99CM.roa (raw, json)
Hash identifier:          i43g+43UZymDzEmTglszBdMEbE8R1MUdYZurO3HLzdE=
Subject key identifier:   57:70:09:94:19:1D:D5:59:8B:74:89:7A:92:EE:A9:E8:CF:BD:F4:23
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       2A17
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/V3AJlBkd1VmLdIl6ku6p6M-99CM.roa
Signing time:             Fri 01 Sep 2023 10:07:29 +0000
ROA not before:           Fri 01 Sep 2023 10:07:29 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     38841
IP address blocks:        123.194.8.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10775 (0x2a17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep  1 10:07:29 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=57700994191DD5598B74897A92EEA9E8CFBDF423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:03:e6:ed:55:e8:55:52:e9:9f:b8:ee:a5:df:
                    77:dc:75:90:94:18:df:86:8b:3d:8f:de:af:42:56:
                    9b:2a:19:46:6d:71:e7:ff:41:86:2f:43:4a:24:29:
                    5e:7d:2d:86:9c:0b:d9:a7:93:80:cf:ab:92:62:46:
                    14:11:5a:51:ed:1f:2e:fc:9c:95:90:1c:1b:67:c3:
                    da:5c:1e:4a:b5:06:cd:34:b7:3c:38:95:80:d7:ab:
                    ec:f8:c4:7c:f7:e9:b7:0c:4b:6c:cc:99:95:be:55:
                    d2:5a:a3:42:e8:6d:a8:c2:de:fb:22:38:aa:3b:56:
                    32:0a:38:c6:d7:f8:00:94:0b:72:90:d0:4f:aa:0e:
                    e4:fe:8e:9a:83:24:af:45:3f:af:a3:23:16:65:ee:
                    b0:8f:c8:d2:66:0f:c9:a2:2d:57:f5:a3:09:08:9f:
                    43:aa:c4:a1:7e:c7:c6:d4:a7:40:2b:7d:6f:12:2f:
                    cf:bf:54:13:3c:e1:c5:24:80:9b:02:26:cb:58:85:
                    05:79:a2:69:2c:f8:c2:c8:6e:f9:ce:bd:ed:2f:ab:
                    c3:a1:80:b5:2a:d6:46:5b:f8:08:82:85:6b:5f:22:
                    26:c2:43:63:6f:c9:28:1b:41:44:48:1b:37:a9:f8:
                    c5:f6:6a:93:60:28:d5:e4:9b:18:f0:14:57:4f:75:
                    c4:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:70:09:94:19:1D:D5:59:8B:74:89:7A:92:EE:A9:E8:CF:BD:F4:23
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/V3AJlBkd1VmLdIl6ku6p6M-99CM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:47:92:28:c6:7a:3d:a3:02:ec:c9:eb:51:03:d7:35:21:97:
         f2:93:c9:6e:f5:d2:c2:67:1b:23:52:ec:7f:85:c1:36:68:55:
         66:ee:99:ce:aa:24:88:8f:90:61:00:73:53:fe:dc:14:e3:ef:
         08:66:0e:6a:ef:3c:9f:32:47:98:99:f7:bd:44:d6:03:32:8a:
         17:29:ed:9b:fa:ab:5e:e9:b2:e9:f6:cf:dd:6c:10:44:a4:54:
         43:3b:af:bf:e6:d4:ce:0a:9d:34:96:d9:90:2e:f6:28:e5:fa:
         5a:2b:c8:56:09:89:f9:76:0d:18:6d:17:2f:2b:f7:63:03:78:
         bb:f8:3a:41:77:ef:55:dd:9f:7a:0b:19:40:38:59:25:57:14:
         25:4a:22:b6:03:8f:b9:eb:a7:88:3a:7b:24:3a:6d:4e:48:57:
         82:ba:86:ab:6c:fd:e1:6b:35:c1:32:22:3b:7b:61:09:ef:da:
         4d:e2:da:0e:f9:b4:7c:25:5c:46:54:73:62:4c:4c:bb:e9:fa:
         4e:13:02:32:b9:a8:02:8c:53:8f:e1:c2:44:28:37:72:cb:c2:
         6f:4b:f0:10:c2:92:a5:26:54:a7:2c:a9:70:d8:f7:f4:9b:bb:
         c6:31:b3:a3:b4:39:7e:2d:bd:44:54:c8:23:41:92:1f:11:92:
         f6:e3:42:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:18 2024 by rpki-client on console-ams.rpki-client.org