Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VaJoQd6_GK6SKGwebKtbpEgvwLQ.roa
File:                     VaJoQd6_GK6SKGwebKtbpEgvwLQ.roa (raw, json)
Hash identifier:          xrUWjLQCjGdkbJWCwlcKdjGHTpOyyM+ehpuLo0iW074=
Subject key identifier:   55:A2:68:41:DE:BF:18:AE:92:28:6C:1E:6C:AB:5B:A4:48:2F:C0:B4
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       2ACA
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VaJoQd6_GK6SKGwebKtbpEgvwLQ.roa
Signing time:             Fri 01 Sep 2023 10:08:18 +0000
ROA not before:           Fri 01 Sep 2023 10:08:18 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     38841
IP address blocks:        211.76.119.0/25 maxlen: 25

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10954 (0x2aca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep  1 10:08:18 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=55A26841DEBF18AE92286C1E6CAB5BA4482FC0B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0c:45:82:1d:83:0f:c6:91:d0:78:74:ca:53:
                    7e:bf:ca:75:4e:7e:ba:80:a3:23:a3:ae:6e:54:e2:
                    9b:90:87:cb:87:af:d1:60:a2:f0:9e:75:4c:39:7f:
                    99:24:f0:ac:4e:93:a3:d7:dc:c4:94:c6:79:20:3d:
                    0e:58:47:88:8b:21:b4:45:f9:15:85:18:5b:8f:5b:
                    74:15:47:73:62:7f:6c:d9:61:13:e0:31:c1:79:f6:
                    24:73:52:f5:b5:3c:b8:22:1d:3a:f9:3b:2e:6f:56:
                    30:5f:31:bc:ff:55:23:0d:d8:f4:6b:df:e7:10:34:
                    47:61:59:03:0a:31:0d:fa:c1:c1:76:2f:5b:5f:15:
                    b6:32:8c:95:79:56:d1:f7:dd:00:68:8f:85:cc:48:
                    50:83:31:72:50:dd:a2:7a:04:d5:59:8f:7e:62:8c:
                    92:ef:b3:98:17:60:86:e8:c4:1a:e3:88:a6:5d:fb:
                    a2:4f:98:46:2e:74:6a:fc:49:8b:65:40:0c:d8:ab:
                    74:80:79:d8:3a:a0:b4:5e:d0:91:ee:f8:62:eb:9a:
                    12:30:e2:8b:d9:85:76:b6:43:ee:ba:fb:4d:2e:5d:
                    a5:5f:90:00:30:df:40:72:2d:b5:68:01:56:8f:76:
                    1f:f5:00:dd:a1:01:67:14:0f:07:c7:72:19:4e:1c:
                    32:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:A2:68:41:DE:BF:18:AE:92:28:6C:1E:6C:AB:5B:A4:48:2F:C0:B4
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VaJoQd6_GK6SKGwebKtbpEgvwLQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.76.119.0/25

    Signature Algorithm: sha256WithRSAEncryption
         5e:44:01:26:39:27:fc:d5:87:7f:48:8f:69:60:e6:91:7f:dc:
         41:1f:5c:33:1d:ca:a3:5c:58:b1:24:aa:a6:e9:ab:22:16:38:
         46:22:8a:c0:1a:2e:71:be:31:e4:a9:68:01:61:1d:86:cc:5d:
         b6:f6:cf:32:8c:d8:3c:09:32:06:86:41:92:17:ac:e2:24:82:
         d9:50:2b:a6:49:c6:e6:a8:4a:2c:74:2d:d9:bb:55:20:18:77:
         2c:c3:5d:db:43:25:29:4d:2c:39:ae:48:2a:fe:ee:6d:e8:83:
         65:55:c4:b8:c4:c0:d0:1e:8d:8e:d8:11:2e:4b:1e:11:75:e8:
         97:39:39:b5:3c:d7:30:31:0c:57:2f:02:1a:91:9b:01:3c:d4:
         c3:8e:b2:3e:ac:4b:9b:f4:95:78:ac:1b:8b:54:90:a1:f7:91:
         dd:21:c3:66:c4:35:7d:7d:15:ae:2f:84:a7:71:2a:37:ad:08:
         33:aa:41:6d:e1:e6:e7:a7:ef:52:49:c4:4b:31:83:2d:a7:28:
         ec:3f:e4:0d:6e:bb:fe:44:c7:11:3b:0d:89:a5:96:5b:e2:3f:
         5c:87:aa:b6:fc:fd:4a:80:16:54:c2:56:cd:4d:12:dd:18:6e:
         d5:85:a1:4c:1c:59:e6:51:ec:a2:55:33:dd:5e:4e:4e:08:14:
         65:33:74:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:25 2024 by rpki-client on console-fra.rpki-client.org