Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_soDs6Msd4noPf0m6rogyW8RKbc.roa
File:                     _soDs6Msd4noPf0m6rogyW8RKbc.roa (raw, json)
Hash identifier:          8zOvRpBHAWvsnH/k1ubfwzMVK5lpHtD5/4Z5iPNJFus=
Subject key identifier:   FE:CA:03:B3:A3:2C:77:89:E8:3D:FD:26:EA:BA:20:C9:6F:11:29:B7
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       2A93
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_soDs6Msd4noPf0m6rogyW8RKbc.roa
Signing time:             Fri 01 Sep 2023 10:08:04 +0000
ROA not before:           Fri 01 Sep 2023 10:08:04 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     38841
IP address blocks:        123.192.144.64/26 maxlen: 26

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10899 (0x2a93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep  1 10:08:04 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=FECA03B3A32C7789E83DFD26EABA20C96F1129B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e1:73:6e:3e:50:4a:b1:9b:a4:db:6e:fc:10:
                    cf:15:e6:fe:ac:5c:56:c0:99:3e:c4:48:a4:9b:62:
                    71:9f:6a:b6:a9:5d:af:fe:b2:a3:78:1e:00:88:1e:
                    50:2d:a4:cd:18:23:1a:2d:7b:01:c8:64:53:c0:82:
                    ec:27:3d:2d:71:30:38:8e:46:92:6a:32:9c:cb:57:
                    9a:3d:12:a7:12:7a:0f:06:2d:35:b6:7a:f8:5b:ed:
                    e6:43:a3:52:9d:83:1b:6a:08:63:1a:47:a4:b8:20:
                    49:51:7d:a0:7b:3b:d0:bb:2a:dd:90:15:d3:de:79:
                    33:47:0d:84:dc:26:c4:88:1c:1d:5f:0b:f8:4d:f1:
                    d6:2a:0d:1f:0e:6c:5a:d1:8b:d6:28:1b:20:1d:0f:
                    51:5e:7e:f4:4b:f9:89:92:17:33:68:4b:dd:a6:72:
                    38:30:9d:95:10:da:9a:07:9e:42:73:cb:b2:9b:f9:
                    12:1e:69:8b:d6:78:8e:99:5e:af:55:7e:68:de:87:
                    cd:4f:74:99:9f:0d:7f:3d:90:11:5f:c6:4f:fe:57:
                    9d:5d:05:91:27:9d:5a:44:98:77:03:0d:82:8c:4e:
                    da:0e:2a:e2:6c:5d:d7:35:2c:50:c9:b9:8f:7e:4c:
                    ef:50:36:72:a5:7c:a6:f9:14:22:b0:14:fd:98:74:
                    e2:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:CA:03:B3:A3:2C:77:89:E8:3D:FD:26:EA:BA:20:C9:6F:11:29:B7
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_soDs6Msd4noPf0m6rogyW8RKbc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.192.144.64/26

    Signature Algorithm: sha256WithRSAEncryption
         71:a7:c0:2b:97:aa:80:47:7f:c5:6b:fb:5f:49:d7:15:f3:a7:
         79:42:bb:c6:c6:13:0f:13:6c:ab:55:4e:6d:4d:e2:c5:f8:71:
         63:35:41:ac:f1:43:8a:94:ec:cb:74:9d:ff:49:36:e9:56:ee:
         66:ed:60:ba:ea:cf:a3:d1:0f:16:0a:51:f4:4a:0e:39:2f:18:
         94:87:ad:f9:1b:7c:44:ba:da:c5:79:d9:fb:71:e7:cb:31:34:
         14:a8:f4:48:57:cd:59:42:69:a7:c6:13:fa:03:79:72:fb:05:
         44:7e:7f:0d:db:bf:5a:a8:b7:c9:74:88:0f:95:d8:93:d1:2a:
         2d:f2:eb:39:29:f8:db:0e:aa:30:73:09:1d:07:d6:52:91:ff:
         bb:00:dd:70:23:67:1f:47:55:f1:18:04:e3:12:e0:33:c8:8f:
         fd:5f:74:17:d9:10:82:8e:f2:9a:e2:ea:34:a5:06:7f:75:a9:
         69:3d:c0:68:e7:4c:89:18:dc:fd:0c:61:72:19:14:e5:c5:11:
         59:9f:73:3d:15:2d:b9:35:3c:32:77:80:d0:3c:5f:de:d4:4d:
         20:ba:45:16:72:c7:4f:9c:9d:bb:a7:0d:52:10:94:8a:ec:8a:
         27:30:dc:bc:2a:a6:e8:a6:91:cb:37:16:52:1f:ae:1a:77:27:
         9f:24:ae:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:25 2024 by rpki-client on console-fra.rpki-client.org