Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Y8N94uOMmwittgYJMGW_9hyXN8Y.roa
File:                     Y8N94uOMmwittgYJMGW_9hyXN8Y.roa (raw, json)
Hash identifier:          SXCmJa7dgdUtxutXvc1kwbA2aKYnH1OuPmQw77E/W3w=
Subject key identifier:   63:C3:7D:E2:E3:8C:9B:08:AD:B6:06:09:30:65:BF:F6:1C:97:37:C6
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       27C0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Y8N94uOMmwittgYJMGW_9hyXN8Y.roa
Signing time:             Fri 01 Sep 2023 10:04:30 +0000
ROA not before:           Fri 01 Sep 2023 10:04:30 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     38841
IP address blocks:        2407:4d00:ff0c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10176 (0x27c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep  1 10:04:30 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=63C37DE2E38C9B08ADB606093065BFF61C9737C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:65:c4:0a:87:d0:39:7f:7d:a2:7f:37:c2:dc:
                    94:08:b0:db:81:9e:fb:e0:20:f8:62:f3:b0:f8:2a:
                    22:3b:0b:f7:60:24:6a:1e:82:4a:54:1a:f6:7f:03:
                    c3:66:8a:ce:58:f6:97:54:be:96:0c:82:c2:97:e9:
                    ec:3f:46:8d:f1:5a:23:90:8b:ba:02:e0:2b:fd:db:
                    0e:b9:27:ce:b1:0d:3b:b5:7d:ed:d2:2e:ce:d7:63:
                    10:76:29:6a:86:b7:bb:25:2a:49:23:4a:24:99:44:
                    54:a7:bc:7b:8c:e0:53:a7:60:aa:2b:7d:56:dc:53:
                    ab:73:5d:f1:09:aa:f4:64:8d:87:e3:54:57:ab:ee:
                    6a:18:0c:01:e2:04:e6:ee:ae:d9:b7:a8:30:04:00:
                    00:16:2d:46:a5:85:f9:f5:d1:71:b2:fa:68:38:08:
                    29:58:36:66:e0:9d:5a:08:da:15:a1:36:67:dc:9d:
                    82:4c:1c:4d:f6:fe:7f:eb:7b:68:8a:76:c0:c1:07:
                    a1:08:e4:bd:a7:7d:a8:b4:94:05:6b:89:b6:d8:b8:
                    5d:68:3a:37:03:ce:4d:08:fb:84:f2:e4:c3:f5:c7:
                    20:f3:16:38:b0:cd:e8:d4:15:07:83:70:0d:87:a3:
                    25:a3:51:60:da:5d:b8:65:b8:9c:25:1e:cc:84:1e:
                    f5:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:C3:7D:E2:E3:8C:9B:08:AD:B6:06:09:30:65:BF:F6:1C:97:37:C6
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Y8N94uOMmwittgYJMGW_9hyXN8Y.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:4d00:ff0c::/48

    Signature Algorithm: sha256WithRSAEncryption
         8a:3e:b2:e5:f9:ec:97:8a:dc:7d:28:6f:44:55:b0:ab:e3:f2:
         cf:30:17:c1:e1:21:4f:f3:58:5d:41:97:cd:39:fe:59:2e:99:
         09:8f:0e:ad:7f:fb:a3:cb:05:5d:1f:44:b7:47:ca:0c:48:cd:
         37:c7:4e:93:8e:93:58:98:13:e4:0c:f3:20:f6:49:3a:7b:3f:
         17:87:d1:60:48:10:3c:cf:b9:51:73:bf:9f:70:ee:81:3b:78:
         83:2a:d1:a1:51:be:46:6d:f2:2f:34:63:93:b6:8e:cf:db:42:
         01:5e:55:f0:7b:f6:9a:32:c5:f2:b8:c0:86:23:cf:25:ca:cf:
         4b:44:86:76:5a:dd:ea:68:fe:1e:f1:ad:5a:38:ec:c0:d6:92:
         eb:83:9e:fb:3c:d6:f8:67:50:a5:7f:a7:63:0e:e2:51:c0:5c:
         b4:78:6c:2f:b7:ca:a3:ad:73:67:9e:1e:b2:5b:c4:da:99:6d:
         74:d1:58:f1:ea:71:3a:ba:13:42:a2:49:94:2e:f5:4a:18:1c:
         15:9f:c1:e6:49:ce:3a:ef:75:86:0a:e3:d1:29:26:5d:75:3e:
         e8:fa:b6:ab:75:99:0e:4d:f2:59:ab:c1:81:fb:27:38:a2:f4:
         b4:af:27:f3:41:85:5b:d3:f5:7e:0d:a5:be:c3:aa:43:c2:fa:
         5f:13:43:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:25 2024 by rpki-client on console-fra.rpki-client.org