Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WzTYewXjUyR97eUpaiGcNG7pwDE.roa
File:                     WzTYewXjUyR97eUpaiGcNG7pwDE.roa (raw, json)
Hash identifier:          wvrXTggnB41X2fCp1oRkEmAPMs3uPiBM0Gcruav5aYE=
Subject key identifier:   5B:34:D8:7B:05:E3:53:24:7D:ED:E5:29:6A:21:9C:34:6E:E9:C0:31
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       29AB
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WzTYewXjUyR97eUpaiGcNG7pwDE.roa
Signing time:             Fri 01 Sep 2023 10:06:54 +0000
ROA not before:           Fri 01 Sep 2023 10:06:54 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     38841
IP address blocks:        106.1.152.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10667 (0x29ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep  1 10:06:54 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=5B34D87B05E353247DEDE5296A219C346EE9C031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e9:ea:fa:d5:1a:3a:67:bf:0d:bb:cd:36:12:
                    62:4a:a8:7b:65:1b:82:77:90:66:25:77:7e:3d:64:
                    a5:ca:fc:b5:c8:14:09:94:1f:93:7b:fa:48:fd:1e:
                    00:33:97:c4:c8:a2:f4:a1:2b:a8:06:d9:7b:f8:52:
                    3b:af:f6:63:a8:30:45:fd:19:2b:51:7c:d8:d9:cb:
                    3b:be:c3:a7:da:be:db:8d:6e:2d:d0:1b:1c:8a:b4:
                    ed:b8:c5:1a:bc:a4:62:26:d6:f6:6e:71:d0:15:3b:
                    71:eb:87:aa:c3:e8:dc:06:cd:3b:cf:4f:63:4a:b7:
                    92:5e:aa:b9:1f:33:ce:f3:14:28:7f:33:de:bc:e4:
                    9b:38:a9:55:5f:ba:e2:78:69:02:79:30:1c:a1:b2:
                    3d:97:e7:aa:4b:a8:67:a8:0e:8c:d7:a7:0f:d0:5e:
                    f8:09:00:3f:81:1d:7b:ef:bd:24:16:c3:0d:53:36:
                    38:67:ad:ee:2c:57:b9:5a:de:d6:68:db:ec:06:ad:
                    f6:d5:58:da:48:66:85:b8:71:45:8c:ff:de:49:da:
                    bb:c1:59:d8:bf:2c:03:d7:fc:7e:0f:96:09:1a:2f:
                    9b:aa:30:1a:0c:70:6c:9c:ec:11:1c:7b:1e:f2:9d:
                    b6:ea:29:08:ae:e1:1f:39:fd:e1:57:b7:ba:1e:33:
                    45:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:34:D8:7B:05:E3:53:24:7D:ED:E5:29:6A:21:9C:34:6E:E9:C0:31
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WzTYewXjUyR97eUpaiGcNG7pwDE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:13:3e:2a:88:4a:83:0c:69:2f:d7:01:18:c2:0d:d5:bc:74:
         4b:08:1b:74:52:8f:ef:21:7f:de:78:24:4a:32:b3:77:e8:f7:
         65:01:0a:cc:1c:e1:b3:75:cb:96:0a:80:5b:8c:7e:1d:15:7d:
         e1:df:9e:2b:75:8e:fe:b8:f3:5d:64:9e:29:f4:1d:6c:1d:64:
         2a:43:38:5a:1e:8d:d1:46:94:8d:1b:f9:f7:4a:8d:24:c1:f7:
         11:03:a7:6f:19:31:f6:d4:b9:6f:9d:62:95:d5:51:8e:3f:8f:
         85:61:06:59:64:9b:19:74:6a:5b:ce:6b:68:e8:a2:ab:b7:8c:
         7e:53:ee:d4:2a:35:49:7d:61:a9:dc:23:94:50:2e:d0:46:53:
         3a:7d:94:e4:f1:a1:0a:bb:d3:61:cd:b4:2a:71:60:31:ee:4a:
         17:28:29:44:c0:5d:fc:91:d2:d2:71:4f:ba:3d:74:ad:16:87:
         d9:52:96:06:28:f2:ac:ff:5f:c2:a6:28:a2:97:f6:16:0a:2f:
         38:75:05:6b:d8:67:0a:59:2d:58:13:10:58:93:13:44:b8:e6:
         46:f6:58:75:25:a5:ad:ad:73:56:be:1c:2c:64:45:80:6a:44:
         f0:5f:89:03:74:ce:78:a8:f6:f2:11:d3:96:fc:20:7c:64:b5:
         87:c3:d3:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:18 2024 by rpki-client on console-ams.rpki-client.org