Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dIkF-rrBMkJp0dpeNwQmbfsGDGI.roa
File:                     dIkF-rrBMkJp0dpeNwQmbfsGDGI.roa (raw, json)
Hash identifier:          PWh8cgNfyyr9ZrEps5xk2QbJ+TAk8/t48GOKmRTH1R0=
Subject key identifier:   74:89:05:FA:BA:C1:32:42:69:D1:DA:5E:37:04:26:6D:FB:06:0C:62
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       2951
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dIkF-rrBMkJp0dpeNwQmbfsGDGI.roa
Signing time:             Fri 01 Sep 2023 10:06:22 +0000
ROA not before:           Fri 01 Sep 2023 10:06:22 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     38841
IP address blocks:        118.233.102.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10577 (0x2951)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep  1 10:06:22 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=748905FABAC1324269D1DA5E3704266DFB060C62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c8:34:94:a6:21:ce:4d:30:f4:68:39:ec:ee:
                    a2:6c:f2:97:57:f9:48:22:63:ad:5d:70:23:70:c1:
                    5a:05:5c:ec:2d:c3:48:00:ad:46:92:a1:95:3a:b3:
                    49:a8:2a:13:55:12:40:51:c7:da:61:d4:87:32:dd:
                    9c:f2:1b:18:98:50:61:40:54:76:64:da:c4:58:75:
                    8f:b8:0e:dd:80:80:48:1a:c8:6d:3e:b0:df:42:11:
                    ed:08:93:67:13:29:ae:97:c4:f9:19:2e:17:cc:17:
                    3d:81:77:79:a3:fc:92:c7:2a:00:d2:f2:c1:b3:fc:
                    48:6f:a8:cd:5e:e9:77:d8:db:6c:6c:7c:93:f6:3b:
                    d6:74:8a:98:72:ae:5e:de:6d:06:77:f3:79:54:dc:
                    12:e2:b9:01:7d:29:45:b5:ab:54:eb:a3:af:27:5a:
                    d1:f0:0e:00:1c:bd:ad:65:0a:cb:43:17:fb:2f:33:
                    ce:56:bb:d2:ea:f6:9c:e0:8a:3b:89:5a:d0:a6:bb:
                    7b:0a:e7:c7:f0:2c:c0:e0:2a:da:78:7d:5b:18:65:
                    7b:56:48:22:78:89:39:33:7e:9f:53:46:1a:dd:5a:
                    16:75:eb:f1:ef:36:01:3c:9e:07:a2:4a:98:e4:0f:
                    78:dc:39:5b:8b:27:9c:56:5b:e7:f7:e7:9b:55:cb:
                    51:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:89:05:FA:BA:C1:32:42:69:D1:DA:5E:37:04:26:6D:FB:06:0C:62
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dIkF-rrBMkJp0dpeNwQmbfsGDGI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.233.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:66:db:08:e4:b0:6e:56:21:20:dd:55:f6:65:65:79:a5:99:
         53:a1:1b:fe:6a:1e:3e:eb:89:2c:79:fa:2e:a1:50:e7:52:31:
         97:54:08:95:90:9c:92:17:f9:4d:cf:cb:d7:d8:79:2b:21:3e:
         8e:ef:2a:fe:5e:99:d0:4a:19:3f:6f:03:b7:cf:a3:34:0b:24:
         40:89:54:d8:78:09:1e:4c:15:50:a2:60:4f:d1:85:1d:e3:f0:
         67:39:37:31:5d:68:6a:90:65:35:68:e8:7b:a5:3a:57:11:7c:
         31:cf:09:01:d9:c7:39:cd:93:c7:88:20:d8:2a:75:da:70:f5:
         4c:11:8c:73:fa:c0:3d:3e:cd:0f:29:02:83:2a:fa:b7:f3:6d:
         f6:4e:72:c7:68:8e:98:c3:62:64:05:29:4f:0f:38:49:8f:35:
         3d:23:57:1e:f9:a2:b9:07:58:c3:11:cd:91:0f:3f:72:76:f5:
         f3:b6:cb:8a:3b:a1:4e:43:6b:0e:74:2f:83:d7:4b:31:7e:1c:
         d2:e5:e0:1a:58:b3:5e:e8:26:61:ab:6d:0b:5e:7a:ee:cd:d7:
         96:2f:fc:3e:69:7d:78:24:1d:bb:a2:d6:04:25:09:c6:2a:b6:
         37:9f:e6:96:22:52:2a:90:f6:67:48:65:e9:1b:0f:ba:63:89:
         da:ca:3f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:26 2024 by rpki-client on console-fra.rpki-client.org