Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dEHbcUTRr_Ibn8en1XL-tybcrtE.roa
File:                     dEHbcUTRr_Ibn8en1XL-tybcrtE.roa (raw, json)
Hash identifier:          loIWhDxVWF/qMc0bCpTRSvAW4DZxu14SNcZseHWKofU=
Subject key identifier:   74:41:DB:71:44:D1:AF:F2:1B:9F:C7:A7:D5:72:FE:B7:26:DC:AE:D1
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       29CB
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dEHbcUTRr_Ibn8en1XL-tybcrtE.roa
Signing time:             Fri 01 Sep 2023 10:07:04 +0000
ROA not before:           Fri 01 Sep 2023 10:07:04 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     38841
IP address blocks:        118.233.32.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10699 (0x29cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep  1 10:07:04 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=7441DB7144D1AFF21B9FC7A7D572FEB726DCAED1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9b:69:fa:9e:1c:65:56:d5:15:47:c8:2c:12:
                    23:26:57:74:bc:6c:b6:40:a3:66:38:24:b2:1b:aa:
                    e7:73:dd:fb:af:ee:22:6f:a6:96:12:73:3b:cc:16:
                    7d:bf:9c:bd:76:60:9c:54:d6:5d:8b:57:fb:12:05:
                    16:75:f3:18:84:f0:92:82:4c:ba:35:6c:c8:74:ae:
                    99:d0:29:c0:32:d2:58:2b:9f:f0:6f:2b:46:3b:ba:
                    dc:18:17:c7:65:2c:6a:08:ee:f1:f1:c8:4d:df:7f:
                    10:24:56:a6:54:3f:d5:37:8f:d5:dc:0f:08:57:e6:
                    49:86:58:dd:53:13:02:23:04:eb:dd:25:82:a8:df:
                    c0:f6:0d:ed:ea:59:60:dc:4e:1c:9b:48:ec:76:a6:
                    57:29:21:f7:fb:47:0f:b9:80:96:24:ae:43:3b:90:
                    71:21:a7:dd:c4:85:cd:98:dc:d0:5c:6e:ef:8a:90:
                    a7:a7:16:b9:c7:05:9e:5a:83:25:6c:58:8c:bb:53:
                    a0:89:04:26:7f:88:cc:3e:7c:33:1d:89:98:15:76:
                    b1:ce:bc:da:9e:1e:60:a5:89:f0:5d:b4:e2:ad:86:
                    fa:d6:12:76:d6:52:fd:45:7a:7a:0a:6f:51:5b:9f:
                    ae:3a:77:50:d2:ea:14:30:03:b7:19:97:6e:02:61:
                    be:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:41:DB:71:44:D1:AF:F2:1B:9F:C7:A7:D5:72:FE:B7:26:DC:AE:D1
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dEHbcUTRr_Ibn8en1XL-tybcrtE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.233.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         95:01:78:de:ff:59:10:bd:bb:62:ff:87:5d:ed:43:d2:f9:0d:
         44:1f:00:00:d6:13:a9:73:b5:55:cc:d8:02:0e:fb:d4:c4:f1:
         07:17:7c:fd:f7:11:e8:d0:53:26:c5:9b:ba:b2:68:7a:45:43:
         a6:c5:35:33:f0:52:2e:36:db:fa:8e:49:77:13:f5:8d:13:b6:
         fd:33:cb:47:0e:53:e8:85:39:24:90:f4:e3:21:dd:2d:54:ff:
         b7:d0:cb:6e:f5:2e:0e:ac:5e:4c:93:32:3b:b2:e0:bb:14:8d:
         98:dd:dc:2f:3a:10:cc:27:7f:2c:e4:38:d0:74:db:59:05:fb:
         cc:63:34:56:34:f4:e7:f4:00:86:11:61:d3:a5:1d:85:e0:a2:
         be:b4:b0:f9:a4:3e:12:42:4f:c2:11:ab:79:e2:ce:f9:4b:b4:
         40:27:62:18:41:cc:78:aa:de:92:d9:1d:9f:0f:62:19:a8:30:
         c5:39:3f:1b:12:74:76:3f:e7:94:0a:b6:7c:02:35:f1:9a:d1:
         84:c3:90:34:52:0a:01:ec:05:43:19:dc:6a:50:41:09:50:71:
         c9:e8:da:11:ae:3b:6b:9f:a3:39:9e:3b:87:6a:cd:28:f9:58:
         42:a4:83:05:1d:ed:0d:ee:8f:f9:59:2d:cd:81:97:58:18:c6:
         87:ae:72:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:19 2024 by rpki-client on console-ams.rpki-client.org