Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/f2LUyhmk6D8JVMxN4MXBczaOa7k.roa
File:                     f2LUyhmk6D8JVMxN4MXBczaOa7k.roa (raw, json)
Hash identifier:          rm4IsZlkYiB9sN+M9s6OAK9LAF+aAbHF6F/UCFGsObA=
Subject key identifier:   7F:62:D4:CA:19:A4:E8:3F:09:54:CC:4D:E0:C5:C1:73:36:8E:6B:B9
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       29D4
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/f2LUyhmk6D8JVMxN4MXBczaOa7k.roa
Signing time:             Fri 01 Sep 2023 10:07:08 +0000
ROA not before:           Fri 01 Sep 2023 10:07:08 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     18429
IP address blocks:        118.232.196.64/26 maxlen: 26

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10708 (0x29d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep  1 10:07:08 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=7F62D4CA19A4E83F0954CC4DE0C5C173368E6BB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:51:61:f0:2e:a6:d8:82:4c:5a:d7:08:a2:cc:
                    a9:4c:f0:d2:7f:9f:8e:4b:5b:1d:68:a2:fe:b8:86:
                    b5:c9:a2:3b:65:3f:57:e5:f0:8a:44:b0:6c:1b:ae:
                    23:78:c7:a2:51:cd:4c:1f:21:9e:e0:2e:37:30:c8:
                    15:f6:a8:29:5e:5b:32:a9:d2:6b:0e:2e:17:ab:88:
                    f1:14:f2:e0:47:38:90:aa:2d:66:a0:2d:3b:a2:2d:
                    48:1d:48:6b:ad:70:42:d9:56:2f:42:31:b5:a9:ce:
                    47:2d:ed:52:bd:42:a6:77:9e:50:4f:b1:ef:61:c4:
                    80:06:d8:81:86:12:3a:a5:dd:06:f0:43:d2:ac:41:
                    ea:a4:68:4a:1d:e3:ec:34:38:bb:bc:9c:d8:cd:a8:
                    ed:b0:40:23:7f:2f:04:4f:7e:bb:83:97:fe:09:2f:
                    2a:cb:a9:54:d7:b3:8b:7a:10:13:0e:92:1c:c0:04:
                    de:c6:7f:a2:4f:45:2a:3c:cf:12:7a:34:b1:67:dc:
                    37:c8:20:ca:c4:65:21:96:7d:21:2e:ce:ca:44:f8:
                    3b:68:d5:63:e5:e9:f8:8d:7d:cc:fe:3c:79:10:17:
                    7d:11:a1:81:94:48:30:72:ba:a7:18:13:74:51:42:
                    5b:6b:04:75:14:41:0d:84:f2:9b:de:3c:f6:55:fc:
                    09:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:62:D4:CA:19:A4:E8:3F:09:54:CC:4D:E0:C5:C1:73:36:8E:6B:B9
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/f2LUyhmk6D8JVMxN4MXBczaOa7k.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.196.64/26

    Signature Algorithm: sha256WithRSAEncryption
         85:0c:11:69:61:27:6d:8f:e1:e4:c1:13:c8:9c:3a:d4:79:20:
         56:97:a7:c3:b3:69:43:68:78:e3:ab:3a:fe:7a:ab:1a:5d:11:
         0b:a0:17:49:d2:00:10:b8:82:35:85:70:0b:91:f2:82:8f:7a:
         c5:e1:7e:df:41:7c:35:2a:ed:9b:7e:0e:02:6d:88:c1:00:7f:
         d6:6b:d0:7b:bd:77:41:a6:f7:9e:36:dd:c6:18:a8:f1:01:d0:
         a4:1c:5b:54:77:6c:33:a3:4c:80:7c:7f:b1:a8:46:fd:62:1f:
         00:ff:a6:1e:e5:df:51:a2:6c:c7:77:5d:80:2a:ba:7d:df:5c:
         b3:f7:17:9b:6c:05:76:4c:b0:07:b0:01:ba:9e:fd:a2:d6:3b:
         c5:aa:88:cc:85:60:29:53:fc:73:2f:35:8e:1d:27:f7:01:c1:
         22:e1:98:e0:7f:e8:ad:50:6f:d6:66:0a:9f:10:8b:8a:2d:13:
         4b:7f:0d:f8:22:10:0b:88:c6:b4:24:2b:94:f5:79:7c:e8:bc:
         84:4d:64:11:e0:b9:4c:8d:d2:aa:ff:6b:1b:c7:b7:d4:d9:9f:
         0b:6f:01:58:e2:a7:b6:de:87:07:fd:5a:5a:39:4d:04:b8:5a:
         ed:f2:de:b4:1c:63:90:55:da:75:da:bc:36:79:fb:db:80:a6:
         0f:04:ef:3b
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgICKdQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx
MDA3MDhaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDdGNjJENENBMTlBNEU4
M0YwOTU0Q0M0REUwQzVDMTczMzY4RTZCQjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCpUWHwLqbYgkxa1wiizKlM8NJ/n45LWx1oov64hrXJojtlP1fl
8IpEsGwbriN4x6JRzUwfIZ7gLjcwyBX2qCleWzKp0msOLheriPEU8uBHOJCqLWag
LTuiLUgdSGutcELZVi9CMbWpzkct7VK9QqZ3nlBPse9hxIAG2IGGEjql3QbwQ9Ks
QeqkaEod4+w0OLu8nNjNqO2wQCN/LwRPfruDl/4JLyrLqVTXs4t6EBMOkhzABN7G
f6JPRSo8zxJ6NLFn3DfIIMrEZSGWfSEuzspE+Dto1WPl6fiNfcz+PHkQF30RoYGU
SDByuqcYE3RRQltrBHUUQQ2E8pvePPZV/Ak9AgMBAAGjggHvMIIB6zAdBgNVHQ4E
FgQUf2LUyhmk6D8JVMxN4MXBczaOa7kwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2YyTFV5aG1rNkQ4SlZNeE40
TVhCY3phT2E3ay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQZ2
6MRAMA0GCSqGSIb3DQEBCwUAA4IBAQCFDBFpYSdtj+HkwRPInDrUeSBWl6fDs2lD
aHjjqzr+eqsaXRELoBdJ0gAQuII1hXALkfKCj3rF4X7fQXw1Ku2bfg4CbYjBAH/W
a9B7vXdBpveeNt3GGKjxAdCkHFtUd2wzo0yAfH+xqEb9Yh8A/6Ye5d9RomzHd12A
Krp931yz9xebbAV2TLAHsAG6nv2i1jvFqojMhWApU/xzLzWOHSf3AcEi4Zjgf+it
UG/WZgqfEIuKLRNLfw34IhALiMa0JCuU9Xl86LyETWQR4LlMjdKq/2sbx7fU2Z8L
bwFY4qe23ocH/VpaOU0EuFrt8t60HGOQVdp12rw2efvbgKYPBO87
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:26 2024 by rpki-client on console-fra.rpki-client.org