Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/e8TWB7MB97n5_bq2iYfhKG3yIH0.roa
File:                     e8TWB7MB97n5_bq2iYfhKG3yIH0.roa (raw, json)
Hash identifier:          wjeqgEYUInJwCUvlJVMBPuld79iBYorsbyHmP3vwots=
Subject key identifier:   7B:C4:D6:07:B3:01:F7:B9:F9:FD:BA:B6:89:87:E1:28:6D:F2:20:7D
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       2A69
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/e8TWB7MB97n5_bq2iYfhKG3yIH0.roa
Signing time:             Fri 01 Sep 2023 10:07:52 +0000
ROA not before:           Fri 01 Sep 2023 10:07:52 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     38841
IP address blocks:        123.194.176.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10857 (0x2a69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep  1 10:07:52 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=7BC4D607B301F7B9F9FDBAB68987E1286DF2207D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e1:19:43:02:c8:cd:50:5d:70:91:c8:9f:55:
                    8f:56:b6:94:c9:98:71:f9:d6:8d:ae:6f:c2:41:cf:
                    4d:ea:a8:d9:55:82:c8:a1:46:2d:81:22:90:42:a1:
                    74:9d:9b:f9:7b:e0:4f:41:42:85:f3:b0:f1:bd:30:
                    75:d4:33:4d:1a:bf:01:06:64:86:90:47:a3:51:91:
                    13:4c:d9:39:53:3e:d5:54:06:fc:e7:dd:73:73:f6:
                    51:52:e2:61:c8:f8:8f:81:11:9e:89:da:c7:ca:32:
                    7f:22:a8:e8:bb:a8:e5:8b:12:44:72:f1:dd:f4:0c:
                    83:f0:e2:4b:8e:5a:59:67:86:51:99:4f:ff:8e:ad:
                    66:b7:5d:f8:58:21:45:e4:67:f0:52:28:9f:f4:d8:
                    e6:31:2c:67:ef:88:57:b3:48:14:ab:ea:8a:7b:0a:
                    d1:5b:43:59:76:aa:f9:8f:64:b7:bb:40:88:34:fa:
                    3a:74:8f:cc:bd:c9:ca:5b:8f:59:a1:64:ee:55:3e:
                    67:83:e7:2d:e4:3d:e9:e4:20:6d:9f:e1:a5:13:2b:
                    73:be:9d:98:92:c8:eb:5c:64:24:62:62:9b:1e:bd:
                    1a:42:43:06:d4:84:c2:86:05:15:44:f8:2b:aa:1c:
                    d3:8d:0e:8b:d9:01:60:83:4a:a6:61:b0:25:21:c9:
                    96:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:C4:D6:07:B3:01:F7:B9:F9:FD:BA:B6:89:87:E1:28:6D:F2:20:7D
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/e8TWB7MB97n5_bq2iYfhKG3yIH0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5c:14:57:9e:c2:a6:6e:70:e8:10:06:b7:cf:dd:c8:3a:60:48:
         e0:fe:57:26:5d:30:fb:b4:70:fe:db:5e:71:24:87:59:a5:79:
         65:fc:43:14:f0:0e:af:9f:0e:e3:54:a0:2f:ed:9c:1c:06:76:
         21:c1:41:79:2b:e3:02:9c:1c:e5:fa:ab:e1:b2:56:9e:30:fd:
         80:ee:9c:12:44:cc:bc:4f:fb:b2:7a:4c:e6:e8:7d:ed:5e:7f:
         5a:af:9b:16:ad:d5:2e:d5:7a:9d:36:11:e6:70:35:b4:d5:07:
         f1:88:eb:8f:0f:77:7a:8f:84:47:0d:11:67:c4:87:03:8c:82:
         60:9c:94:92:67:63:d2:96:94:97:e0:4e:fb:86:74:48:13:ed:
         e8:a6:eb:c1:42:77:f1:aa:d9:3f:30:da:6d:c6:aa:ee:a5:36:
         28:03:b9:ef:ab:74:60:55:99:6e:f3:f9:c4:a8:cb:72:2a:e7:
         98:f0:d3:80:5f:24:48:91:7b:97:4e:76:91:27:47:fa:89:20:
         bf:40:48:c1:1b:97:d1:1a:50:ac:54:68:6a:45:f2:5f:54:cd:
         9e:a3:67:f9:b5:c8:33:72:f9:e5:17:1c:3c:42:12:a9:ee:e3:
         21:d1:ff:bb:9a:ad:1c:f1:e4:5e:47:0a:fa:8b:fd:f0:01:30:
         87:e2:14:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:26 2024 by rpki-client on console-fra.rpki-client.org