Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dfqAJV9bxVqvcxoCs5hF_E1j3is.roa
File:                     dfqAJV9bxVqvcxoCs5hF_E1j3is.roa (raw, json)
Hash identifier:          gkBWIEoTK3fXCv5qPEoZk5c85F23TOJFt649cu57FGY=
Subject key identifier:   75:FA:80:25:5F:5B:C5:5A:AF:73:1A:02:B3:98:45:FC:4D:63:DE:2B
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       281C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dfqAJV9bxVqvcxoCs5hF_E1j3is.roa
Signing time:             Fri 01 Sep 2023 10:04:57 +0000
ROA not before:           Fri 01 Sep 2023 10:04:57 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     38841
IP address blocks:        180.177.116.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10268 (0x281c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep  1 10:04:57 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=75FA80255F5BC55AAF731A02B39845FC4D63DE2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ce:75:b3:d0:71:eb:04:0e:51:80:99:25:ee:
                    3b:ea:10:b8:c4:0f:d0:b9:c0:77:cc:52:24:74:98:
                    ad:4a:90:5f:c4:14:fa:71:4b:51:c9:46:97:9b:de:
                    d9:c1:1f:2e:41:b1:ce:db:33:a1:97:a1:ec:23:91:
                    fc:b0:10:ef:a8:b7:0b:1c:70:e2:02:96:5c:9e:35:
                    0c:d3:5a:4e:c0:a9:b3:af:46:ba:d1:15:22:f7:99:
                    43:88:c7:f1:b9:a9:ab:e4:2d:33:af:9e:33:44:23:
                    c6:4e:d1:4b:a9:3d:70:34:8b:e8:db:4e:18:19:82:
                    b6:6d:07:68:e9:53:1f:66:3e:5c:dc:7c:17:50:f3:
                    d5:5a:ae:5d:05:e4:72:df:15:57:d7:bf:6f:3b:2e:
                    7d:71:78:b4:d6:99:f2:3c:d9:c3:df:1b:19:b5:67:
                    d1:55:b4:3a:17:ae:c1:a0:5a:07:14:15:b9:0f:2b:
                    84:f7:bf:34:bc:81:2a:0d:71:c5:02:1b:a6:4f:83:
                    12:ac:39:ef:f5:f4:23:af:3d:a1:62:64:61:60:df:
                    36:9b:9f:f8:b7:56:72:de:61:2d:a2:85:32:c3:a5:
                    0e:ae:18:35:67:dd:b1:c3:1c:ff:24:2b:cf:8e:90:
                    6b:e4:5a:d5:f9:9b:0b:44:1b:d4:d9:30:08:10:d2:
                    e7:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:FA:80:25:5F:5B:C5:5A:AF:73:1A:02:B3:98:45:FC:4D:63:DE:2B
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dfqAJV9bxVqvcxoCs5hF_E1j3is.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b6:92:7f:88:78:64:2f:3a:cc:34:cb:70:1c:b0:bf:ea:c6:c9:
         1d:79:e3:92:72:52:55:f1:a6:b7:0d:a7:36:a4:17:9f:1a:41:
         d0:40:66:43:3b:bb:13:37:cd:50:87:5a:a2:f0:0b:1f:e5:7f:
         9e:83:2f:52:3e:11:81:8e:f1:32:dd:95:ab:49:96:10:29:1f:
         23:21:ed:2d:20:46:52:ad:21:6f:02:2c:df:45:be:49:9e:a2:
         fc:4a:62:53:a7:c7:b4:58:0f:af:22:f9:53:d5:93:4b:90:12:
         aa:9f:4b:02:32:e6:20:d1:5f:25:d5:5a:07:bb:f7:89:29:c0:
         63:cd:6d:d8:90:68:c8:ee:fd:5d:85:64:d7:ae:08:af:05:d2:
         26:d4:00:e4:86:59:c2:47:df:bb:18:e6:20:a2:fd:fb:fa:cc:
         7e:bb:eb:9d:ff:00:8c:c8:23:6b:c2:25:99:cf:d9:16:7f:f0:
         f8:1b:a1:5e:cb:3a:cf:33:a4:25:4a:eb:3f:be:61:c9:d3:62:
         b2:e5:e9:4a:ca:d9:c8:63:28:b4:e7:44:9f:30:6a:fe:dd:d1:
         5e:4d:cc:ca:34:85:b6:01:ae:56:f6:6f:a8:78:69:f9:b9:10:
         3f:74:3b:3a:1f:1e:71:fc:80:5f:bd:e6:27:35:06:59:e0:82:
         d6:b4:f6:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:19 2024 by rpki-client on console-ams.rpki-client.org