Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/f4VE6NtH4UPb8CHyp2JuOyKhvrM.roa
File:                     f4VE6NtH4UPb8CHyp2JuOyKhvrM.roa (raw, json)
Hash identifier:          pxVlnl5+MpYkTaaVzP4qAdXGazM6romp1LNPSKMhQPM=
Subject key identifier:   7F:85:44:E8:DB:47:E1:43:DB:F0:21:F2:A7:62:6E:3B:22:A1:BE:B3
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       2AA5
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/f4VE6NtH4UPb8CHyp2JuOyKhvrM.roa
Signing time:             Fri 01 Sep 2023 10:08:08 +0000
ROA not before:           Fri 01 Sep 2023 10:08:08 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     38841
IP address blocks:        106.1.144.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10917 (0x2aa5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep  1 10:08:08 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=7F8544E8DB47E143DBF021F2A7626E3B22A1BEB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a2:4c:76:3b:31:96:d9:a9:ac:b4:42:5c:92:
                    f3:a6:a7:03:9d:4d:81:9b:f2:46:4e:c6:a2:92:46:
                    32:ce:67:49:bc:2e:8b:66:40:20:61:c1:d5:8e:68:
                    55:c8:bf:51:1c:d6:3d:54:be:7e:0f:bf:fd:24:16:
                    e5:7f:44:a5:43:1f:57:8d:84:84:99:b9:09:88:31:
                    c8:59:01:49:e7:60:8f:da:81:3e:bf:43:e6:30:58:
                    20:8b:b2:fb:47:e0:e1:d5:54:c9:b2:22:60:ba:8d:
                    47:14:af:37:22:6b:00:d6:b1:ca:56:27:e6:8d:32:
                    15:07:de:7b:5a:55:3a:33:28:f6:c6:5e:bc:cc:80:
                    05:7a:a7:17:e5:cd:cd:e1:bd:cd:ad:b1:62:a5:c1:
                    4a:c5:d6:14:73:cb:e5:c7:d6:d8:2c:4e:b7:41:07:
                    2a:d3:bc:37:c6:e7:cc:34:6c:11:e5:27:66:5a:61:
                    07:d4:95:78:73:89:e6:26:53:7f:33:e9:7d:f1:03:
                    9c:20:b5:5d:d6:66:30:78:d7:16:e1:08:87:5d:4b:
                    15:98:ed:b5:87:9c:33:07:29:f7:33:ae:50:01:24:
                    72:b7:f9:0e:4a:0a:a4:9a:86:b7:83:86:20:25:f0:
                    43:f5:04:6c:5e:34:c5:98:9e:db:75:c6:6b:a0:75:
                    ee:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:85:44:E8:DB:47:E1:43:DB:F0:21:F2:A7:62:6E:3B:22:A1:BE:B3
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/f4VE6NtH4UPb8CHyp2JuOyKhvrM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:4c:96:aa:10:58:4d:c4:7b:0f:85:e7:e9:e2:a4:3b:0a:46:
         c8:31:5c:47:df:0f:8f:12:44:ec:64:3f:46:cf:f5:50:21:0b:
         e6:8b:ab:f7:d6:3f:85:2e:3c:cc:ac:66:93:30:0b:d5:3e:ae:
         c7:bc:9f:d7:b5:87:c4:2a:25:08:28:ea:d5:6c:c0:21:27:69:
         a2:87:b1:09:72:c5:dd:ca:07:52:ee:c4:f2:fa:37:5c:46:ca:
         3a:c6:0a:a4:6e:6e:03:18:08:56:a7:8d:79:6f:92:dc:bd:2a:
         bb:62:4f:3a:05:1d:30:3b:88:b1:76:2a:5a:5c:45:c7:d7:92:
         03:75:13:1c:06:fc:ab:82:09:24:38:e6:e8:9e:5f:79:e0:91:
         f3:9c:82:a6:04:f7:b7:c7:d6:38:95:7f:3d:56:1c:0d:ce:6b:
         c7:3e:22:a9:df:8e:2c:36:d1:7a:9d:75:ef:06:26:cc:fe:27:
         ab:83:25:88:6a:bf:e7:c2:c3:2e:ba:99:b3:55:df:ac:0e:58:
         1e:c2:3f:70:28:cf:39:5d:fa:f5:23:6f:d4:35:ba:d3:df:0e:
         cd:c7:89:25:f6:df:60:a4:d0:d8:55:b0:04:23:a2:ff:a5:e9:
         f9:97:f9:9f:a3:a3:98:14:13:8f:f4:a3:cb:36:aa:89:dd:0c:
         74:5b:b1:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:26 2024 by rpki-client on console-fra.rpki-client.org