Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/c6DKv8Upt6DUIaQTUUMhGu2cqxI.roa
File:                     c6DKv8Upt6DUIaQTUUMhGu2cqxI.roa (raw, json)
Hash identifier:          ckvcI9m+aGO2qAdOxSNQh05UPZ2reYIj96wlM4MOglo=
Subject key identifier:   73:A0:CA:BF:C5:29:B7:A0:D4:21:A4:13:51:43:21:1A:ED:9C:AB:12
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       2A2B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/c6DKv8Upt6DUIaQTUUMhGu2cqxI.roa
Signing time:             Fri 01 Sep 2023 10:07:34 +0000
ROA not before:           Fri 01 Sep 2023 10:07:34 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     38841
IP address blocks:        118.232.96.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10795 (0x2a2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep  1 10:07:34 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=73A0CABFC529B7A0D421A4135143211AED9CAB12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a3:8e:99:52:2d:83:8d:c2:b9:96:d2:fd:18:
                    0b:e0:31:1d:97:be:2f:fb:32:0d:5e:0c:ca:88:b5:
                    5c:cc:96:19:41:de:f3:f3:dc:24:6c:0f:69:eb:56:
                    37:75:9b:25:44:c3:3d:eb:ed:12:26:aa:32:ab:d0:
                    9b:b1:08:24:d3:4a:94:ea:ad:76:b0:a0:24:9e:b8:
                    af:b1:34:98:21:99:7c:a5:e3:e8:77:96:aa:92:24:
                    bf:0f:f4:ac:ee:f1:00:a5:9a:6c:ab:1b:8d:49:f2:
                    25:af:74:fd:c7:c5:4c:30:62:3e:d9:1e:83:f1:ca:
                    69:69:ef:e7:f9:f9:d4:b6:1e:56:00:c4:ce:d9:88:
                    a0:40:20:94:8a:93:ae:39:3d:55:04:25:c4:4d:6d:
                    20:15:db:78:3c:2c:6a:b5:5f:c8:35:43:64:a6:57:
                    90:cb:4a:bb:68:91:1c:61:4c:41:d9:8f:f5:5d:4e:
                    50:e4:80:8b:32:42:fe:09:55:1a:29:a3:ff:57:a5:
                    b5:a2:8c:bd:c4:2e:0b:0a:be:1f:24:b4:50:a7:94:
                    22:71:a8:08:03:01:1a:b6:ed:64:94:06:9d:2e:38:
                    35:3f:1e:bf:a7:49:7c:70:bf:39:94:3b:a2:89:f1:
                    ec:47:60:a4:76:4b:06:f8:5a:d3:0a:6c:3e:c0:a1:
                    f1:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:A0:CA:BF:C5:29:B7:A0:D4:21:A4:13:51:43:21:1A:ED:9C:AB:12
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/c6DKv8Upt6DUIaQTUUMhGu2cqxI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8c:23:98:d2:cf:70:4d:59:f7:75:94:a6:f6:47:e3:54:fb:b7:
         86:49:02:86:e3:7d:db:be:23:5e:e3:2a:82:88:0b:6e:f7:05:
         38:13:ec:45:25:18:cd:82:02:9a:9c:8d:01:2f:74:30:d9:20:
         61:94:2c:fc:f6:42:89:4b:41:7d:bf:0e:0c:d3:35:e6:25:88:
         56:04:5c:5a:33:22:0c:1f:e5:56:d6:76:f5:31:49:d2:ec:ef:
         25:b1:fe:d8:88:6f:49:cf:4a:03:75:e1:e0:da:ea:e1:40:f0:
         f1:cc:8b:62:d8:06:bf:69:a3:f1:e3:da:d3:2d:52:ff:4c:52:
         6a:e9:00:13:1d:56:cb:fe:d1:ac:7d:01:39:ff:94:56:1b:10:
         98:fa:ec:58:ff:cd:2c:27:55:b9:03:31:44:43:45:a6:d4:56:
         74:cd:df:bb:d2:0d:68:44:5e:b7:7d:b1:b0:6e:6a:8f:78:ad:
         be:e0:b7:63:f4:69:af:1f:df:f6:7c:ef:c7:48:b1:7a:41:6b:
         fe:fe:48:c3:89:23:82:7c:5f:d4:93:e9:be:08:34:cb:28:e9:
         22:80:bb:3a:ab:06:d9:6e:b4:29:10:b8:5e:a1:a5:63:b0:94:
         17:80:7f:6f:ba:56:f1:f8:58:a8:a8:28:68:33:78:75:b7:ef:
         0e:0e:92:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:19 2024 by rpki-client on console-ams.rpki-client.org