Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_z8lkHfdpMQt3hImYVVXYVyesxY.roa
File:                     _z8lkHfdpMQt3hImYVVXYVyesxY.roa (raw, json)
Hash identifier:          4JG6Xr056TFCY4MLzlwLGrQ3AG3TOOaSeNDVe3iSsek=
Subject key identifier:   FF:3F:25:90:77:DD:A4:C4:2D:DE:12:26:61:55:57:61:5C:9E:B3:16
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       2B27
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_z8lkHfdpMQt3hImYVVXYVyesxY.roa
Signing time:             Fri 01 Sep 2023 10:09:55 +0000
ROA not before:           Fri 01 Sep 2023 10:09:55 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     9924
IP address blocks:        123.195.8.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11047 (0x2b27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep  1 10:09:55 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=FF3F259077DDA4C42DDE1226615557615C9EB316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:4a:29:f2:65:c0:74:de:68:0f:a0:7e:d8:59:
                    3a:48:7b:1c:d0:0b:db:55:3d:2a:17:20:a4:78:77:
                    af:09:b9:b2:91:f0:bb:a1:4f:16:a0:96:c5:d5:a1:
                    0c:0c:f7:42:b1:88:d4:21:dc:33:31:23:02:8f:3f:
                    c7:c9:64:fc:a0:39:81:d8:34:2a:0a:a6:62:e6:f5:
                    38:8e:14:6a:00:9e:2e:7c:8a:f2:c3:2e:af:d6:ca:
                    9c:75:cc:12:d4:b0:77:f9:af:45:4a:4f:7c:30:9f:
                    a0:85:26:96:d6:5f:18:e6:59:cd:a4:76:53:10:fa:
                    e4:11:3f:e2:fc:a9:89:bc:23:f4:70:ca:d4:ee:e0:
                    5a:c1:5c:39:5b:0d:2c:1a:12:54:93:e2:dd:ff:1f:
                    0a:eb:78:9b:a6:15:2d:ee:1c:ea:47:51:6b:d4:65:
                    47:d8:ee:c0:1b:ca:4e:f0:2c:d5:5c:88:2e:1f:1e:
                    7f:57:e5:72:cc:10:4f:9b:91:0b:9a:26:92:34:bd:
                    7f:65:d4:91:cd:78:51:23:2f:dd:73:78:a3:8e:c3:
                    09:c1:73:ff:d1:9f:c2:08:d7:a2:5e:1f:bc:41:0f:
                    fb:d9:59:c3:e7:b9:c8:43:bb:d8:7c:6f:02:f4:e9:
                    6a:c6:e8:36:71:9d:70:96:af:f1:db:37:78:ac:4c:
                    69:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:3F:25:90:77:DD:A4:C4:2D:DE:12:26:61:55:57:61:5C:9E:B3:16
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_z8lkHfdpMQt3hImYVVXYVyesxY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         21:59:1e:9e:1d:c7:9e:44:a9:7f:80:02:21:26:99:06:8c:a6:
         c0:10:ac:91:7b:a3:a8:25:08:80:70:e6:56:e7:cb:b1:93:7a:
         d4:1c:b6:76:8f:61:9a:d8:ce:a2:d0:45:7c:cf:3b:04:99:e2:
         06:43:7a:9b:f5:b1:21:6c:01:b6:4a:3d:3c:ce:94:ef:6d:3f:
         e3:43:a7:64:87:c5:ae:85:d9:1c:12:dd:e3:99:a0:1b:9d:f1:
         12:30:0b:4f:ff:40:90:d9:6e:71:c3:e8:19:66:43:08:8d:fa:
         f4:7c:16:90:b2:bb:2b:2d:e0:47:82:0c:6f:34:b0:e9:50:5c:
         64:ba:a8:61:d1:4a:66:b1:6f:fc:05:f3:ec:05:58:dc:34:ec:
         28:a5:54:ed:13:0e:39:b2:c9:5a:69:ae:15:b9:80:32:d0:e9:
         c4:37:c5:6c:5f:5f:82:f0:12:f9:6d:24:37:08:77:b9:3f:8d:
         2d:53:6d:91:c8:57:44:47:11:09:3a:66:86:ca:91:0a:ed:5c:
         dc:f3:e8:73:3a:d4:11:13:6d:f5:81:c8:69:79:03:cc:0e:f1:
         e1:4e:6f:65:53:56:c9:f0:52:09:86:e2:71:5f:2c:e7:6c:e6:
         34:4e:31:a4:0c:36:03:8b:0e:73:18:15:1a:be:ea:b7:54:d8:
         a7:51:98:b9
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICKycwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx
MDA5NTVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEZGM0YyNTkwNzdEREE0
QzQyRERFMTIyNjYxNTU1NzYxNUM5RUIzMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCZSinyZcB03mgPoH7YWTpIexzQC9tVPSoXIKR4d68JubKR8Luh
TxaglsXVoQwM90KxiNQh3DMxIwKPP8fJZPygOYHYNCoKpmLm9TiOFGoAni58ivLD
Lq/Wypx1zBLUsHf5r0VKT3wwn6CFJpbWXxjmWc2kdlMQ+uQRP+L8qYm8I/RwytTu
4FrBXDlbDSwaElST4t3/HwrreJumFS3uHOpHUWvUZUfY7sAbyk7wLNVciC4fHn9X
5XLMEE+bkQuaJpI0vX9l1JHNeFEjL91zeKOOwwnBc//Rn8II16JeH7xBD/vZWcPn
uchDu9h8bwL06WrG6DZxnXCWr/HbN3isTGkDAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU/z8lkHfdpMQt3hImYVVXYVyesxYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL196OGxrSGZkcE1RdDNoSW1Z
VlZYWVZ5ZXN4WS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAF7
wwgwDQYJKoZIhvcNAQELBQADggEBACFZHp4dx55EqX+AAiEmmQaMpsAQrJF7o6gl
CIBw5lbny7GTetQctnaPYZrYzqLQRXzPOwSZ4gZDepv1sSFsAbZKPTzOlO9tP+ND
p2SHxa6F2RwS3eOZoBud8RIwC0//QJDZbnHD6BlmQwiN+vR8FpCyuyst4EeCDG80
sOlQXGS6qGHRSmaxb/wF8+wFWNw07CilVO0TDjmyyVpprhW5gDLQ6cQ3xWxfX4Lw
EvltJDcId7k/jS1TbZHIV0RHEQk6ZobKkQrtXNzz6HM61BETbfWByGl5A8wO8eFO
b2VTVsnwUgmG4nFfLOds5jROMaQMNgOLDnMYFRq+6rdU2KdRmLk=
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:25 2024 by rpki-client on console-fra.rpki-client.org