Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/e_iAmQOPX6MbeDEINiRm91DQl3Y.roa
File:                     e_iAmQOPX6MbeDEINiRm91DQl3Y.roa (raw, json)
Hash identifier:          11fxIj1+qagxybRiDedtlO3omMT+DqpguAhi/liomPs=
Subject key identifier:   7B:F8:80:99:03:8F:5F:A3:1B:78:31:08:36:24:66:F7:50:D0:97:76
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       33A2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/e_iAmQOPX6MbeDEINiRm91DQl3Y.roa
Signing time:             Mon 10 Feb 2025 13:51:36 +0000
ROA not before:           Mon 10 Feb 2025 13:51:36 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     38841
IP address blocks:        123.193.111.192/28 maxlen: 28
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13218 (0x33a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb 10 13:51:36 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=7BF88099038F5FA31B783108362466F750D09776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7a:3f:94:e0:eb:2c:26:49:96:1c:e7:23:09:
                    d9:17:f1:60:43:4a:ba:6a:df:70:33:e4:c5:05:65:
                    3f:db:34:24:c8:5a:10:a4:8a:be:b2:57:19:d6:13:
                    5f:48:57:71:13:17:19:77:85:a1:6a:03:89:3d:b8:
                    85:c4:70:7a:cd:56:37:f2:3c:f3:63:ad:a2:69:37:
                    94:9f:53:ba:9a:b9:b4:e1:3a:75:00:c1:d8:c4:8e:
                    4d:71:e0:57:05:f4:7b:97:41:73:83:a8:eb:e1:29:
                    85:67:f9:60:dc:84:79:69:08:47:61:aa:ee:c4:66:
                    0d:c3:4f:a7:b9:82:d6:41:6d:9d:f7:b9:b2:53:e7:
                    29:7e:f1:47:a3:94:f7:1c:ed:6b:29:c8:a3:a1:06:
                    95:ac:01:14:4d:c6:ef:ad:ca:98:30:8f:c9:12:c3:
                    2e:5f:a2:77:8a:6a:fe:c3:2f:a1:6e:25:90:50:a7:
                    14:9b:00:33:79:f9:91:41:ba:df:52:42:8d:74:a9:
                    45:80:97:36:15:f2:95:7a:19:ac:95:f2:a8:65:8d:
                    d9:19:81:83:30:10:83:87:c1:e5:e0:22:4a:83:ae:
                    38:c8:09:c0:16:71:b6:12:0b:c1:cb:2a:df:05:a4:
                    68:14:6a:64:9b:23:b4:00:33:11:c6:c1:9c:18:b3:
                    e8:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:F8:80:99:03:8F:5F:A3:1B:78:31:08:36:24:66:F7:50:D0:97:76
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/e_iAmQOPX6MbeDEINiRm91DQl3Y.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.111.192/28

    Signature Algorithm: sha256WithRSAEncryption
         8c:9f:f3:b2:e5:08:f2:65:4b:b5:f3:a6:76:88:f7:bc:e6:94:
         30:3c:fa:80:6d:06:d7:83:69:a3:64:07:90:c5:d7:ad:bc:1b:
         97:f1:48:33:f8:1d:d1:45:1c:f4:3a:7e:f7:b0:ea:db:51:2f:
         c4:8b:e3:22:88:12:c3:c0:83:c4:8a:ce:1d:9d:89:20:d4:9a:
         b1:f3:55:ce:1c:d4:b9:4c:b6:15:dc:b3:f6:81:66:8a:94:94:
         53:0c:a2:77:8d:43:6b:99:20:6e:93:16:6c:08:56:5c:fd:65:
         65:ae:cc:5c:20:a3:a7:60:a3:4b:3e:87:45:93:c5:06:29:90:
         e1:ed:1a:e2:1e:c0:4e:fa:c5:cb:aa:fa:c2:4c:6d:c4:eb:42:
         32:45:64:d9:6b:0e:22:cb:c3:95:55:36:d4:5d:b7:e6:02:96:
         d6:b0:b0:ef:dd:e7:15:ac:3c:3b:b8:a9:d0:a6:6b:8d:6d:47:
         e3:e3:67:a3:fb:fa:b2:27:b4:1e:e3:e0:60:fc:1f:21:3c:80:
         67:71:e7:b9:70:50:9b:45:c7:28:33:e0:f3:24:19:9a:78:42:
         9e:04:84:d5:f4:b4:f3:fc:62:6b:a9:f4:cc:e6:e3:5f:a2:e3:
         d9:f4:2f:c2:1f:8b:26:44:fa:1c:40:eb:1c:3f:e1:42:7b:6d:
         b6:9a:5c:0f
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgICM6IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx
MzUxMzZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDdCRjg4MDk5MDM4RjVG
QTMxQjc4MzEwODM2MjQ2NkY3NTBEMDk3NzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC9ej+U4OssJkmWHOcjCdkX8WBDSrpq33Az5MUFZT/bNCTIWhCk
ir6yVxnWE19IV3ETFxl3haFqA4k9uIXEcHrNVjfyPPNjraJpN5SfU7qaubThOnUA
wdjEjk1x4FcF9HuXQXODqOvhKYVn+WDchHlpCEdhqu7EZg3DT6e5gtZBbZ33ubJT
5yl+8UejlPcc7WspyKOhBpWsARRNxu+typgwj8kSwy5foneKav7DL6FuJZBQpxSb
ADN5+ZFBut9SQo10qUWAlzYV8pV6GayV8qhljdkZgYMwEIOHweXgIkqDrjjICcAW
cbYSC8HLKt8FpGgUamSbI7QAMxHGwZwYs+jNAgMBAAGjggHvMIIB6zAdBgNVHQ4E
FgQUe/iAmQOPX6MbeDEINiRm91DQl3YwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2VfaUFtUU9QWDZNYmVERUlO
aVJtOTFEUWwzWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQR7
wW/AMA0GCSqGSIb3DQEBCwUAA4IBAQCMn/Oy5QjyZUu186Z2iPe85pQwPPqAbQbX
g2mjZAeQxdetvBuX8Ugz+B3RRRz0On73sOrbUS/Ei+MiiBLDwIPEis4dnYkg1Jqx
81XOHNS5TLYV3LP2gWaKlJRTDKJ3jUNrmSBukxZsCFZc/WVlrsxcIKOnYKNLPodF
k8UGKZDh7RriHsBO+sXLqvrCTG3E60IyRWTZaw4iy8OVVTbUXbfmApbWsLDv3ecV
rDw7uKnQpmuNbUfj42ej+/qyJ7Qe4+Bg/B8hPIBncee5cFCbRccoM+DzJBmaeEKe
BITV9LTz/GJrqfTM5uNfouPZ9C/CH4smRPocQOscP+FCe222mlwP
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:06 2025 by rpki-client