Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XljuMaLJ1erIGsNKh5WwPSk416A.roa
File:                     XljuMaLJ1erIGsNKh5WwPSk416A.roa (raw, json)
Hash identifier:          qeuSm+yuSlrkOl3SvvH/uPkuQxrjrLlIntYBwWLpGRo=
Subject key identifier:   5E:58:EE:31:A2:C9:D5:EA:C8:1A:C3:4A:87:95:B0:3D:29:38:D7:A0
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       2A5A
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XljuMaLJ1erIGsNKh5WwPSk416A.roa
Signing time:             Fri 01 Sep 2023 10:07:48 +0000
ROA not before:           Fri 01 Sep 2023 10:07:48 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     9924
IP address blocks:        123.194.254.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10842 (0x2a5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep  1 10:07:48 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=5E58EE31A2C9D5EAC81AC34A8795B03D2938D7A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1b:c6:ab:14:d5:00:9e:57:53:c8:1b:e4:ae:
                    86:14:d3:0f:70:ef:04:c9:c8:95:76:2a:89:bd:a5:
                    c8:c5:65:7d:b3:d2:09:c4:16:b4:3b:2e:d6:e3:37:
                    c4:86:18:b3:07:22:bf:86:85:db:b0:65:b3:7b:87:
                    3a:00:05:81:e8:33:8d:97:79:27:71:91:79:c8:1f:
                    88:7a:37:ed:b3:e8:e6:79:c0:75:4e:5c:62:d1:6c:
                    68:bc:13:fc:c7:e1:bb:b3:1c:39:c6:06:ab:da:7a:
                    bd:6c:47:1d:ad:2c:0b:cf:30:c4:6d:a9:76:5c:7a:
                    5a:56:82:a3:c4:a8:00:a9:11:82:65:74:80:17:57:
                    db:20:be:2a:e3:b9:40:82:63:71:56:be:ae:7b:b4:
                    51:c5:da:88:44:d4:a6:5c:9e:b4:1c:3c:31:2a:39:
                    69:8c:0a:c3:54:ec:17:2f:41:09:38:03:3e:c6:c0:
                    71:5f:a2:23:48:5e:31:31:b6:e9:a1:61:33:d0:fd:
                    c0:61:f7:5b:2d:3a:57:e3:0f:84:70:24:52:bc:7c:
                    f3:c0:7b:0e:43:e8:42:15:dd:83:9b:e0:d1:a0:6c:
                    c6:5e:a5:2d:fc:79:0c:8d:62:d6:c4:71:3b:b0:9f:
                    9c:31:65:38:56:7d:0d:d6:3b:d6:2d:a4:e6:80:c9:
                    92:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:58:EE:31:A2:C9:D5:EA:C8:1A:C3:4A:87:95:B0:3D:29:38:D7:A0
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XljuMaLJ1erIGsNKh5WwPSk416A.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:74:b9:ab:31:9e:a3:33:f0:64:e4:ce:29:a1:e3:09:e5:64:
         e5:b4:27:a4:97:2f:af:70:60:9d:32:dd:3f:0f:d0:70:22:63:
         b3:63:eb:2c:7f:e7:91:78:65:da:36:a3:fd:2f:80:37:bf:3e:
         f2:0b:ff:d7:c9:75:09:44:75:19:d9:5d:af:13:5f:44:3a:2b:
         aa:9f:14:66:58:24:fb:a5:af:6c:1f:c9:55:d8:54:8e:be:d6:
         ef:a5:97:e4:d9:07:d7:27:4c:bb:67:e8:dc:51:07:55:56:e2:
         b4:20:d7:75:19:e6:7e:fe:1a:ba:55:b4:1b:d6:b9:34:64:ed:
         0d:e4:cc:eb:1c:21:54:67:ee:6c:14:d3:50:f8:0b:c4:08:18:
         17:b1:df:ff:1c:8b:ed:31:bb:cd:0b:89:bc:38:58:12:29:a1:
         1e:07:be:35:ec:41:72:90:f6:fd:a8:2d:d5:49:e0:2a:e7:bf:
         15:1f:95:fc:a1:ee:e4:a5:f3:ee:02:64:5d:cb:46:95:d4:0c:
         d2:45:a4:e9:3f:64:2e:b2:30:6d:cb:fd:cd:4a:2c:50:0b:86:
         bc:ce:73:43:45:b5:42:48:6f:de:67:f8:fc:51:f1:7f:e3:3b:
         82:66:0d:6d:a5:d1:c7:9d:7e:8b:f9:4e:c8:ee:b0:a8:dd:fe:
         69:85:d9:0d
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICKlowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx
MDA3NDhaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDVFNThFRTMxQTJDOUQ1
RUFDODFBQzM0QTg3OTVCMDNEMjkzOEQ3QTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDDG8arFNUAnldTyBvkroYU0w9w7wTJyJV2Kom9pcjFZX2z0gnE
FrQ7LtbjN8SGGLMHIr+GhduwZbN7hzoABYHoM42XeSdxkXnIH4h6N+2z6OZ5wHVO
XGLRbGi8E/zH4buzHDnGBqvaer1sRx2tLAvPMMRtqXZcelpWgqPEqACpEYJldIAX
V9sgvirjuUCCY3FWvq57tFHF2ohE1KZcnrQcPDEqOWmMCsNU7BcvQQk4Az7GwHFf
oiNIXjExtumhYTPQ/cBh91stOlfjD4RwJFK8fPPAew5D6EIV3YOb4NGgbMZepS38
eQyNYtbEcTuwn5wxZThWfQ3WO9YtpOaAyZKTAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUXljuMaLJ1erIGsNKh5WwPSk416AwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1hsanVNYUxKMWVySUdzTkto
NVd3UFNrNDE2QS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAF7
wv4wDQYJKoZIhvcNAQELBQADggEBAAh0uasxnqMz8GTkzimh4wnlZOW0J6SXL69w
YJ0y3T8P0HAiY7Nj6yx/55F4Zdo2o/0vgDe/PvIL/9fJdQlEdRnZXa8TX0Q6K6qf
FGZYJPulr2wfyVXYVI6+1u+ll+TZB9cnTLtn6NxRB1VW4rQg13UZ5n7+GrpVtBvW
uTRk7Q3kzOscIVRn7mwU01D4C8QIGBex3/8ci+0xu80Libw4WBIpoR4HvjXsQXKQ
9v2oLdVJ4CrnvxUflfyh7uSl8+4CZF3LRpXUDNJFpOk/ZC6yMG3L/c1KLFALhrzO
c0NFtUJIb95n+PxR8X/jO4JmDW2l0cedfov5TsjusKjd/mmF2Q0=
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:18 2024 by rpki-client on console-ams.rpki-client.org