Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dupupaLz_6MgzXqLdUmYwkcT5ug.roa
File:                     dupupaLz_6MgzXqLdUmYwkcT5ug.roa (raw, json)
Hash identifier:          KNTUjzmMgfXA+HavZS5ZFzuDCO/pBw/b/x6B0UNRsaQ=
Subject key identifier:   76:EA:6E:A5:A2:F3:FF:A3:20:CD:7A:8B:75:49:98:C2:47:13:E6:E8
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       29B2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dupupaLz_6MgzXqLdUmYwkcT5ug.roa
Signing time:             Fri 01 Sep 2023 10:06:56 +0000
ROA not before:           Fri 01 Sep 2023 10:06:56 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     38841
IP address blocks:        118.233.152.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10674 (0x29b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep  1 10:06:56 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=76EA6EA5A2F3FFA320CD7A8B754998C24713E6E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:2c:6c:75:1f:be:bd:1c:0b:95:df:9b:40:fa:
                    56:72:ed:a3:da:df:08:ab:3a:16:a7:b8:4e:fd:68:
                    8a:a0:f3:b5:2e:0f:a7:aa:fb:b6:c4:75:2d:ac:8d:
                    77:7c:16:f3:1e:75:8e:6a:01:f0:05:26:23:b8:29:
                    cf:d5:65:b3:3a:98:0d:37:28:11:61:40:1c:17:e6:
                    5a:35:0b:7c:78:c0:e0:a5:ea:9b:19:1d:44:09:9a:
                    73:79:66:4d:22:66:89:26:b8:0c:90:30:be:26:63:
                    25:58:7f:38:27:8d:38:b2:a1:52:d0:41:6f:f7:06:
                    b5:61:0c:6f:a4:9b:6e:36:c3:1d:2c:0e:55:37:c4:
                    c8:44:6e:9e:24:72:c7:aa:0c:c2:bf:31:b3:3a:45:
                    da:fa:f5:b6:05:b8:af:37:69:4c:c7:23:b4:f9:41:
                    58:8d:27:3f:5d:5f:65:1c:c2:37:89:9a:91:44:02:
                    7e:f8:da:6e:7c:fd:ae:0b:99:37:a1:91:ed:7e:2c:
                    16:4a:61:c0:fd:e5:38:10:61:3b:90:de:7d:24:6f:
                    e7:b1:2d:d2:0d:cd:a4:bf:22:82:fa:e1:91:1d:e8:
                    b8:23:ba:a0:6c:85:5b:61:75:55:c8:44:0c:2f:08:
                    20:54:f6:cb:2c:83:36:d9:8b:27:f6:90:b1:41:1b:
                    64:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:EA:6E:A5:A2:F3:FF:A3:20:CD:7A:8B:75:49:98:C2:47:13:E6:E8
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dupupaLz_6MgzXqLdUmYwkcT5ug.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.233.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:9e:f4:d7:2b:6a:df:d3:e6:55:c8:bd:4a:3d:27:73:d5:67:
         e8:c0:e9:3a:69:a3:ab:38:3b:e2:b2:c3:65:f6:18:44:de:70:
         9d:5f:3d:50:cf:51:a5:fe:0e:56:2b:4b:eb:99:d4:59:b1:e4:
         83:69:5e:de:17:5c:01:7c:0f:bc:9a:bd:1a:dd:63:1b:2e:4c:
         08:dd:38:73:49:82:24:b1:ad:b5:2e:34:40:ab:98:87:25:a5:
         0e:0b:40:4f:ff:37:4c:e6:c4:13:86:a2:9f:e7:61:11:ba:80:
         f8:f5:b6:21:6d:4f:a5:ba:16:79:81:3a:95:f7:69:2e:c6:1d:
         90:32:0a:df:5d:2f:08:61:67:49:d7:9d:12:51:b0:f1:3d:06:
         c6:17:5a:45:6d:9c:7b:89:21:2b:7f:60:d2:23:db:a6:71:48:
         21:cb:a7:15:ac:93:ab:4d:dd:42:29:fe:1b:f4:75:50:1e:c2:
         43:6d:84:6f:a5:09:82:90:d7:5f:de:52:61:ff:81:b9:68:57:
         cf:4d:74:72:b8:37:12:2c:e1:1a:e3:95:a8:c7:29:75:ce:5e:
         4b:c0:df:b9:14:be:55:ef:1b:4b:d4:cb:aa:2d:fa:81:10:07:
         d3:30:e0:03:36:d6:68:75:9c:4c:75:70:bd:5b:4b:9d:ff:aa:
         ab:03:c5:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:19 2024 by rpki-client on console-ams.rpki-client.org