Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/blK7A5WQWsGuSz3kwYYE8g6y0Zk.roa
File:                     blK7A5WQWsGuSz3kwYYE8g6y0Zk.roa (raw, json)
Hash identifier:          NFunR9+KURHLnBCTGeXVYBP2+UVyIYq7CyiHHPX32e0=
Subject key identifier:   6E:52:BB:03:95:90:5A:C1:AE:4B:3D:E4:C1:86:04:F2:0E:B2:D1:99
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       2A49
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/blK7A5WQWsGuSz3kwYYE8g6y0Zk.roa
Signing time:             Fri 01 Sep 2023 10:07:43 +0000
ROA not before:           Fri 01 Sep 2023 10:07:43 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     38841
IP address blocks:        106.1.16.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10825 (0x2a49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep  1 10:07:43 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=6E52BB0395905AC1AE4B3DE4C18604F20EB2D199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:56:43:89:89:e5:d0:e3:da:1b:e5:2b:47:68:
                    78:b8:00:f3:28:86:c3:47:ff:c7:b3:89:9b:23:e2:
                    ef:7d:e7:6b:b3:df:53:3e:a0:25:c2:f0:60:a2:6c:
                    b9:73:1e:52:4a:8c:52:3e:ca:4c:1e:5a:73:12:db:
                    2d:f5:93:1a:5f:83:e1:3c:66:b1:46:57:da:92:c2:
                    07:fd:2f:da:47:42:20:3d:1f:21:ca:5e:aa:76:9b:
                    2d:15:e6:e6:51:b4:50:ee:a7:f1:26:cb:ca:e9:90:
                    88:a3:2c:72:d3:84:9b:ab:e4:1c:ca:a5:27:af:15:
                    f0:78:ca:c6:70:b6:9f:b5:e3:50:c8:91:cf:19:6c:
                    eb:17:c6:42:38:2a:aa:e6:f1:1c:6a:d0:91:7a:41:
                    ce:c9:4a:06:e1:df:a0:b9:0d:33:28:9b:e6:c7:3d:
                    f0:cc:82:86:44:da:d7:31:64:47:bd:b3:42:88:36:
                    af:e6:a7:ac:81:e2:65:49:2f:0b:b3:27:67:31:1d:
                    0d:2c:6f:d1:1f:a5:2a:84:0c:de:72:63:b1:18:f4:
                    8b:46:b9:0e:bf:c1:99:59:2d:8c:8e:8a:bd:80:ca:
                    62:7f:29:f4:2a:99:42:df:a4:82:f7:09:d8:5b:5e:
                    69:da:e6:58:c9:a4:8e:35:9f:49:0d:c6:ec:40:bb:
                    e5:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:52:BB:03:95:90:5A:C1:AE:4B:3D:E4:C1:86:04:F2:0E:B2:D1:99
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/blK7A5WQWsGuSz3kwYYE8g6y0Zk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9d:6c:0e:07:77:de:1a:30:ad:92:c3:de:a9:87:8a:e2:9a:0a:
         66:07:af:95:e1:bc:fb:46:e4:37:73:aa:71:3e:56:d6:bb:ac:
         f8:6b:17:aa:7e:f1:04:5f:d1:93:70:57:4a:b2:c1:7d:e6:44:
         2b:5f:93:f6:26:d2:aa:2f:1f:92:1b:c2:23:3d:85:cb:9a:95:
         59:ca:d7:38:c3:ec:1c:e8:64:0c:7d:b8:59:06:f5:8a:29:48:
         42:c2:a8:76:fa:17:f0:4f:e8:e6:00:eb:fd:0c:38:27:f1:c2:
         c8:b7:ef:d9:34:bd:d7:d4:c2:a4:ce:d9:f0:25:40:68:38:5a:
         6b:49:71:42:8c:d6:12:75:01:69:20:f1:a7:cc:09:b2:4d:2a:
         4b:e5:8d:09:ca:bd:d7:3b:00:59:02:3b:b1:ac:b1:ed:07:47:
         e3:ed:1d:2a:4e:24:f7:28:9b:fc:39:81:34:32:06:4f:6b:3e:
         f9:d8:c1:93:6c:8d:f2:e3:c1:8c:10:0d:36:04:b8:a2:b9:97:
         6e:ac:46:ee:63:14:9c:af:f9:02:ed:f5:a3:b8:4c:84:4e:39:
         2a:79:45:9f:0c:65:c6:79:84:0b:ad:de:aa:c9:92:c1:63:fa:
         a5:9d:8a:eb:65:60:7c:a9:dc:eb:6c:3c:b8:84:fa:44:8b:8f:
         8e:47:d7:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:25 2024 by rpki-client on console-fra.rpki-client.org