Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XRL7mi50fPmkedP3nbexDMmHIHA.roa
File:                     XRL7mi50fPmkedP3nbexDMmHIHA.roa (raw, json)
Hash identifier:          A7OBpeqlibAjj/6KQG9fkiv9288j9jkRVyg8yVyPe2A=
Subject key identifier:   5D:12:FB:9A:2E:74:7C:F9:A4:79:D3:F7:9D:B7:B1:0C:C9:87:20:70
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       295B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XRL7mi50fPmkedP3nbexDMmHIHA.roa
Signing time:             Fri 01 Sep 2023 10:06:25 +0000
ROA not before:           Fri 01 Sep 2023 10:06:25 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     38841
IP address blocks:        123.194.88.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10587 (0x295b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep  1 10:06:25 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=5D12FB9A2E747CF9A479D3F79DB7B10CC9872070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c1:da:04:78:b1:2b:b4:e5:f3:1c:85:e2:af:
                    02:7d:ba:82:84:a0:e8:b0:a4:17:e9:a4:56:d1:0a:
                    7d:1d:32:15:ef:4d:a6:fd:f7:71:d2:ab:57:12:af:
                    ac:c0:6b:15:75:5c:14:56:56:98:c6:c7:8e:01:45:
                    78:20:20:83:e8:0c:b3:2b:57:86:33:6f:9c:23:1d:
                    87:8f:4b:a0:39:e0:d5:47:a3:5a:93:7a:a8:c8:ed:
                    aa:36:90:eb:af:7e:6f:01:54:89:fd:67:92:37:8f:
                    64:62:97:1c:94:7f:d8:7b:1e:df:a4:cb:4f:e8:a7:
                    a8:bf:a5:88:80:45:22:f6:4f:0b:d6:e6:10:be:27:
                    35:27:b3:3a:4c:da:dc:3f:1d:b0:04:3f:e4:2e:de:
                    42:68:df:18:7e:bc:7b:84:c4:d0:bf:25:ab:f0:b5:
                    88:13:bd:01:69:c5:cb:e7:9e:6d:74:94:d5:7f:d6:
                    5f:49:0d:0e:b0:1e:42:d9:1d:fb:eb:23:b8:d2:0c:
                    b9:6c:ef:ed:93:d4:55:7e:57:1a:4c:78:9a:ed:83:
                    08:b8:42:79:ff:92:c0:34:fa:5a:f1:53:1a:f3:cc:
                    02:56:38:fa:cf:75:70:3a:1f:99:9e:0f:77:1f:52:
                    0c:73:3d:2f:b9:04:46:1c:16:34:97:d9:3c:b8:b3:
                    e1:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:12:FB:9A:2E:74:7C:F9:A4:79:D3:F7:9D:B7:B1:0C:C9:87:20:70
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XRL7mi50fPmkedP3nbexDMmHIHA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2d:30:a7:0a:fb:d0:a6:1c:e5:1d:b1:4a:a6:0c:59:30:8e:42:
         09:39:66:9b:d2:e8:82:c5:b5:2b:23:e9:aa:9a:76:ec:b7:e2:
         34:f1:a2:dc:65:1a:6b:84:83:78:ec:59:3b:09:78:10:fc:5e:
         48:2d:98:72:58:dc:5e:11:7d:e4:c6:94:51:c6:dc:ca:f1:18:
         2a:9c:19:6f:2d:ad:34:1d:c1:f1:d4:57:10:54:f1:e0:5b:78:
         e1:db:b2:00:81:06:4d:0c:57:fb:08:30:42:aa:1d:49:64:4f:
         44:bd:d8:57:2f:7f:24:fb:a1:5d:89:36:f1:64:b0:32:0d:9f:
         90:e4:ef:9e:d6:24:24:c0:ab:17:2e:6e:f2:25:ca:9d:27:b0:
         df:2d:5e:88:3d:67:d1:64:c4:44:43:d1:b2:80:d5:01:64:21:
         0d:cf:04:57:d3:db:cb:5c:42:76:25:85:fc:14:e4:81:10:f1:
         4a:7b:d0:e3:05:15:64:c0:30:2d:11:6d:bb:8d:e0:4d:95:d4:
         e9:b9:9f:43:9b:8c:ce:61:48:28:1c:db:d0:df:eb:5e:89:12:
         81:43:f0:79:91:f5:9d:37:09:31:47:11:f1:a1:c5:13:a0:8b:
         4d:99:6a:a4:e2:8f:76:40:d3:41:bd:64:b9:b5:1d:b9:d2:64:
         50:7f:2c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:25 2024 by rpki-client on console-fra.rpki-client.org