Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Y6C7uBckPplB2Ij0UCNzWWMFMMI.roa
File:                     Y6C7uBckPplB2Ij0UCNzWWMFMMI.roa (raw, json)
Hash identifier:          4xoBud+8FERyyE2fTyLYNYtzFiKBxyWXeUm/CpMkBt0=
Subject key identifier:   63:A0:BB:B8:17:24:3E:99:41:D8:88:F4:50:23:73:59:63:05:30:C2
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       2A0D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Y6C7uBckPplB2Ij0UCNzWWMFMMI.roa
Signing time:             Fri 01 Sep 2023 10:07:26 +0000
ROA not before:           Fri 01 Sep 2023 10:07:26 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     38841
IP address blocks:        180.177.140.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10765 (0x2a0d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep  1 10:07:26 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=63A0BBB817243E9941D888F450237359630530C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:34:52:19:13:14:bb:9d:c9:e3:84:a2:d3:5d:
                    92:04:87:2a:35:a9:6b:cd:43:ee:aa:d4:f9:bd:06:
                    c7:e8:44:d3:3f:73:8d:89:4e:1a:db:4c:58:e2:e6:
                    f8:f9:13:a8:27:2b:f8:4c:43:98:0e:09:c9:dd:0e:
                    2e:fb:71:06:80:d0:99:d8:2e:38:af:99:67:e1:18:
                    04:80:d5:92:da:cd:b1:25:d7:1e:d8:bb:a7:fe:10:
                    2a:b7:a9:32:dc:d4:4a:46:a1:44:91:a8:ca:a8:f8:
                    30:41:a9:c8:db:db:d6:fc:b4:d4:4b:81:27:d3:1b:
                    cb:7e:b6:07:a2:aa:20:01:4d:47:80:6d:de:bb:47:
                    b5:c5:ac:76:86:4f:4d:82:4a:3d:38:2e:f2:73:36:
                    d2:c2:27:28:25:aa:24:94:a9:42:c3:6f:f2:5b:48:
                    5c:f9:bd:71:74:85:e8:28:af:4a:50:4b:fe:03:58:
                    91:d0:4e:8d:c9:8a:9c:78:8d:b6:ec:5d:bd:1e:67:
                    1b:e7:11:92:e6:f6:6d:89:4e:a7:c0:93:62:7c:a3:
                    36:e5:ca:5b:d5:83:92:da:f5:8f:91:5e:0c:44:7f:
                    00:19:eb:2e:ff:48:b1:86:24:52:fe:cb:5b:2d:0d:
                    cd:44:0a:19:5e:98:0c:84:17:3a:c6:9d:db:21:4e:
                    70:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:A0:BB:B8:17:24:3E:99:41:D8:88:F4:50:23:73:59:63:05:30:C2
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Y6C7uBckPplB2Ij0UCNzWWMFMMI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:a9:7f:4b:71:b0:f3:9b:c7:08:a5:0c:64:4b:00:dc:31:3c:
         df:69:b7:12:0f:cf:85:71:b9:e9:c8:2e:95:73:60:0b:fa:44:
         87:8d:54:87:5b:2a:47:e1:f2:30:c7:4d:1f:a4:74:56:d5:e9:
         05:4a:a8:aa:35:fe:0b:46:a1:e7:b9:0b:45:0a:91:5c:ee:da:
         64:80:31:19:7e:80:85:de:3c:cc:62:c4:bd:9c:89:90:5e:41:
         6c:c2:8b:d0:17:9d:fc:29:b7:cc:d7:c4:c8:72:b5:86:c1:26:
         3a:fa:10:36:37:79:fc:fc:78:cd:ed:69:77:a8:9d:b2:b1:fb:
         4f:c3:28:fd:8a:c2:33:71:01:af:6f:54:64:21:d1:aa:9c:3f:
         e3:21:ca:f7:88:27:cb:66:39:a3:e3:1b:4b:97:84:b2:44:41:
         00:51:c9:50:d2:37:bb:95:0c:33:21:3e:2c:01:c5:ea:a8:4b:
         0f:ce:8c:87:a1:e8:21:d2:c9:92:f5:b8:d8:c7:93:19:1d:d5:
         73:c4:0b:8f:c7:e5:97:5e:04:1d:77:f0:61:70:28:a9:c8:a4:
         59:82:d3:b6:7b:9a:59:0b:46:89:31:ea:0b:58:fe:76:d1:10:
         c8:c5:fb:9f:13:c3:cc:43:8c:d1:01:ce:3a:d7:61:dc:db:77:
         cd:d6:f5:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:25 2024 by rpki-client on console-fra.rpki-client.org