Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Va88d_Qd0758PJXk8lowsafrOp4.roa
File:                     Va88d_Qd0758PJXk8lowsafrOp4.roa (raw, json)
Hash identifier:          wQka1XyWrRPdrB19UGEYTp/22MIURHmc88ijmjBJRO0=
Subject key identifier:   55:AF:3C:77:F4:1D:D3:BE:7C:3C:95:E4:F2:5A:30:B1:A7:EB:3A:9E
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       2B20
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Va88d_Qd0758PJXk8lowsafrOp4.roa
Signing time:             Fri 01 Sep 2023 10:09:53 +0000
ROA not before:           Fri 01 Sep 2023 10:09:53 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     38841
IP address blocks:        106.1.160.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11040 (0x2b20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep  1 10:09:53 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=55AF3C77F41DD3BE7C3C95E4F25A30B1A7EB3A9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:72:a1:f5:e2:8f:1a:b3:7d:4f:d5:ad:fc:a2:
                    49:52:50:03:75:75:6f:6e:b9:15:aa:fa:63:95:a3:
                    cd:1d:6d:c9:5c:ec:29:b2:84:c9:d2:bf:a3:5f:7c:
                    13:12:a0:98:4e:72:4e:e1:a7:d7:cb:60:b2:09:b8:
                    94:bf:cf:fc:c6:d8:78:88:9b:5f:54:d5:9c:26:18:
                    aa:bc:f1:10:d9:20:99:66:00:ed:6f:fc:f8:b5:97:
                    26:f5:5b:1f:af:66:fa:30:4f:58:ee:fd:0f:ab:9e:
                    27:07:1c:4f:31:ba:98:5a:d8:dc:9f:fd:82:9e:32:
                    8f:57:36:20:3e:bd:fd:e3:52:99:a4:c9:a2:7e:08:
                    7d:ad:96:73:d6:b0:13:76:00:99:78:ce:bd:18:5b:
                    86:63:ef:12:60:7c:2a:4b:82:c1:2a:a5:27:97:36:
                    9d:f0:c9:15:30:1a:5d:13:85:51:4f:cf:bd:2a:13:
                    d2:68:dc:d4:e7:a5:77:70:6f:81:13:91:ac:da:28:
                    85:4f:81:5f:cc:7f:c8:34:9c:f4:5c:de:a1:33:92:
                    84:c6:8e:d5:b8:0a:0e:66:4e:b0:b5:83:8f:a4:49:
                    57:b9:17:1b:2f:05:2f:98:20:75:80:2f:8c:9a:ec:
                    ca:2c:10:fb:93:94:04:9f:88:d5:f7:37:96:68:73:
                    f6:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:AF:3C:77:F4:1D:D3:BE:7C:3C:95:E4:F2:5A:30:B1:A7:EB:3A:9E
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Va88d_Qd0758PJXk8lowsafrOp4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:cb:47:aa:06:f3:f5:6c:ed:6a:c3:02:f7:f2:f6:eb:ea:22:
         a0:66:a2:20:3d:02:b6:d5:f4:0e:08:62:59:bd:02:0f:79:bd:
         5e:59:0f:59:9f:53:d6:55:18:d5:2f:75:cc:70:1a:7e:b0:e0:
         f9:50:ec:1c:62:49:e6:c2:be:af:03:84:f3:1b:c8:15:60:49:
         db:b0:04:92:20:93:31:bf:3c:24:7c:ad:f9:50:fb:85:56:dd:
         30:f9:56:7f:e7:29:89:eb:f6:76:64:55:50:77:f5:36:69:7f:
         0f:72:fe:12:48:0c:5d:0a:32:cc:cd:d3:d0:1e:6c:f9:66:b2:
         be:d6:38:6d:ed:2a:17:37:f9:43:48:b1:ea:bf:45:55:f2:48:
         b0:24:a8:30:98:35:87:e3:bb:01:0c:34:a4:46:29:69:e6:b6:
         d6:cc:b6:fd:6b:be:6e:fc:b3:e7:bb:b8:2b:f6:0e:ce:e8:52:
         35:8a:1e:02:c9:60:27:b0:3e:52:c5:38:8f:c5:fa:4b:3b:c8:
         be:0f:de:82:10:1c:b9:6a:d9:87:98:4e:5f:45:7a:aa:c6:59:
         e0:80:23:9b:b8:31:09:d0:e0:22:45:a9:99:e9:38:38:ba:23:
         85:ed:14:b2:3f:46:ce:d9:19:cf:88:7e:ea:cd:d0:8b:ae:c2:
         5a:db:9d:03
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICKyAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx
MDA5NTNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDU1QUYzQzc3RjQxREQz
QkU3QzNDOTVFNEYyNUEzMEIxQTdFQjNBOUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCbcqH14o8as31P1a38oklSUAN1dW9uuRWq+mOVo80dbclc7Cmy
hMnSv6NffBMSoJhOck7hp9fLYLIJuJS/z/zG2HiIm19U1ZwmGKq88RDZIJlmAO1v
/Pi1lyb1Wx+vZvowT1ju/Q+rnicHHE8xupha2Nyf/YKeMo9XNiA+vf3jUpmkyaJ+
CH2tlnPWsBN2AJl4zr0YW4Zj7xJgfCpLgsEqpSeXNp3wyRUwGl0ThVFPz70qE9Jo
3NTnpXdwb4ETkazaKIVPgV/Mf8g0nPRc3qEzkoTGjtW4Cg5mTrC1g4+kSVe5Fxsv
BS+YIHWAL4ya7MosEPuTlASfiNX3N5Zoc/a7AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUVa88d/Qd0758PJXk8lowsafrOp4wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1ZhODhkX1FkMDc1OFBKWGs4
bG93c2Fmck9wNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJq
AaAwDQYJKoZIhvcNAQELBQADggEBACfLR6oG8/Vs7WrDAvfy9uvqIqBmoiA9ArbV
9A4IYlm9Ag95vV5ZD1mfU9ZVGNUvdcxwGn6w4PlQ7BxiSebCvq8DhPMbyBVgSduw
BJIgkzG/PCR8rflQ+4VW3TD5Vn/nKYnr9nZkVVB39TZpfw9y/hJIDF0KMszN09Ae
bPlmsr7WOG3tKhc3+UNIseq/RVXySLAkqDCYNYfjuwEMNKRGKWnmttbMtv1rvm78
s+e7uCv2Ds7oUjWKHgLJYCewPlLFOI/F+ks7yL4P3oIQHLlq2YeYTl9FeqrGWeCA
I5u4MQnQ4CJFqZnpODi6I4XtFLI/Rs7ZGc+IfurN0IuuwlrbnQM=
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:25 2024 by rpki-client on console-fra.rpki-client.org