Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dKHCZEQ1M5nF9cwmNz_6odIWgH8.roa
File:                     dKHCZEQ1M5nF9cwmNz_6odIWgH8.roa (raw, json)
Hash identifier:          99LKYh3+RgXjM4AYMHEQETs8RFUYlGHZSgSpWM/dtYI=
Subject key identifier:   74:A1:C2:64:44:35:33:99:C5:F5:CC:26:37:3F:FA:A1:D2:16:80:7F
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       2AFC
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dKHCZEQ1M5nF9cwmNz_6odIWgH8.roa
Signing time:             Fri 01 Sep 2023 10:08:31 +0000
ROA not before:           Fri 01 Sep 2023 10:08:31 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     38841
IP address blocks:        180.177.216.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11004 (0x2afc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep  1 10:08:31 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=74A1C26444353399C5F5CC26373FFAA1D216807F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:28:3c:0b:77:bc:90:cd:29:84:a8:d1:14:d8:
                    46:e4:c2:91:e3:c8:4e:a3:e6:87:d9:a4:f9:55:f6:
                    dd:7c:7a:a6:13:fe:3e:54:7a:e3:2c:24:18:8e:03:
                    cd:f1:1a:ac:be:b8:78:9c:84:ad:5b:cc:a8:4d:2f:
                    65:63:28:ac:ee:97:35:39:71:90:63:48:a2:5b:96:
                    b6:7b:41:64:58:e1:bb:6a:81:73:fd:08:6b:51:a4:
                    f9:03:5c:d0:2b:5d:ec:a1:65:1e:bd:ee:4c:16:68:
                    20:24:8f:1d:17:14:1a:f6:eb:17:69:49:8b:cd:20:
                    75:99:55:9b:f9:9c:b0:b9:68:fc:0d:84:5a:cc:55:
                    6f:36:68:90:cf:b3:ce:a6:77:45:34:95:4c:8f:d1:
                    06:a2:7f:b5:84:e2:06:db:8d:bb:14:2c:de:f1:66:
                    65:02:c0:30:01:f6:01:44:f4:d7:55:35:83:e2:49:
                    6a:67:0a:bc:5c:e2:8c:d3:38:02:9d:dc:1a:dc:db:
                    16:9d:6b:1d:0b:04:9c:87:b9:bb:1b:4e:ea:66:10:
                    3b:1d:22:0d:11:db:0c:ca:1e:96:1f:da:60:b7:c8:
                    fa:6f:7f:01:87:3a:df:c7:16:6f:2e:07:c7:01:9b:
                    b2:7f:35:8e:b2:db:54:83:9d:bd:7d:1a:03:81:a0:
                    cd:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:A1:C2:64:44:35:33:99:C5:F5:CC:26:37:3F:FA:A1:D2:16:80:7F
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dKHCZEQ1M5nF9cwmNz_6odIWgH8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:44:dc:78:57:98:85:e8:0b:57:f4:bc:fd:a7:4c:1a:91:95:
         1c:b4:b0:2a:41:50:e0:6b:bb:0f:6f:3d:2b:f7:08:bd:76:81:
         8b:f4:f9:47:58:d8:db:3a:eb:69:2b:a3:41:0e:b7:11:ee:35:
         9a:45:0a:f1:e0:de:b0:2f:66:df:e1:bd:3b:ca:9e:bd:7b:ac:
         cf:a4:72:59:27:31:0c:03:18:93:6a:f3:5e:be:f1:70:ca:57:
         09:c3:45:5b:34:fa:dd:9b:ef:2c:10:43:3c:5b:c9:03:b2:42:
         9f:b0:ff:5a:66:da:8f:58:0d:59:29:85:af:cd:8e:82:b2:2c:
         e8:84:d9:06:0c:04:9a:43:cd:c2:b4:02:d5:95:1f:f8:37:9c:
         dc:27:61:74:dd:57:22:15:41:44:eb:95:ad:df:e7:40:e6:f1:
         b2:77:34:51:ab:9b:24:7b:c4:f3:cc:58:29:87:50:8c:c8:58:
         e5:37:c8:a3:e6:2c:8e:a2:cf:32:f1:9f:82:95:03:da:48:a9:
         d2:2c:34:7f:e8:74:0f:0c:8d:75:04:e9:41:37:ca:02:11:f6:
         a6:88:4c:57:56:f2:5b:f2:c0:b6:b5:3f:b4:3a:8e:01:7e:dd:
         2e:11:bf:64:eb:d3:55:9f:e9:a7:f9:73:8f:ff:03:03:0a:92:
         b7:47:cd:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:19 2024 by rpki-client on console-ams.rpki-client.org