Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fF71LqgiHu5FPgOe_H0DchpgHQI.roa
File:                     fF71LqgiHu5FPgOe_H0DchpgHQI.roa (raw, json)
Hash identifier:          4JS2MBwGk8oFqFg8wfU12Fqu/ZS/hOALv90L//bUR4g=
Subject key identifier:   7C:5E:F5:2E:A8:22:1E:EE:45:3E:03:9E:FC:7D:03:72:1A:60:1D:02
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       2972
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fF71LqgiHu5FPgOe_H0DchpgHQI.roa
Signing time:             Fri 01 Sep 2023 10:06:37 +0000
ROA not before:           Fri 01 Sep 2023 10:06:37 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     38841
IP address blocks:        180.176.76.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10610 (0x2972)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep  1 10:06:37 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=7C5EF52EA8221EEE453E039EFC7D03721A601D02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f6:4a:b7:d0:f4:82:ae:cb:c7:4f:3d:2e:0b:
                    a2:0c:57:57:c4:61:27:ed:b3:70:ed:11:10:de:53:
                    93:c9:33:74:7b:1f:49:fa:6b:5e:9a:03:36:6e:1b:
                    21:ff:7d:d0:40:d9:9b:23:95:ab:89:29:8f:74:2c:
                    24:35:08:ac:8c:cc:64:ff:d1:0a:23:b3:6a:3e:f2:
                    3b:6d:71:9d:d8:b9:7d:1f:02:ea:4c:61:0f:f5:85:
                    87:62:fb:3d:d3:e9:22:4b:47:02:30:70:f2:74:56:
                    8b:60:c0:6e:bd:e9:2d:d8:83:c5:4b:24:1a:2d:6f:
                    13:c4:b3:1e:a4:03:70:e8:02:9b:5f:f6:34:66:d3:
                    b2:2a:76:7b:be:44:c5:7d:13:e1:12:ec:46:97:ec:
                    64:9c:50:8b:4c:32:cb:35:6b:2d:c3:ff:54:4b:0d:
                    8a:f9:e7:a3:9d:6d:aa:d0:7a:a9:e4:be:7a:8b:ef:
                    f3:58:29:dd:7c:39:37:b0:8f:b5:7a:d5:8a:df:f7:
                    0f:5d:de:d4:f8:d1:b4:7d:df:5a:30:72:1a:9b:45:
                    47:29:bc:e0:16:b4:58:32:1e:a8:30:d0:a3:63:f4:
                    63:e1:28:33:06:94:ce:15:11:ac:ee:76:6d:98:e6:
                    3f:82:c2:e3:7a:f7:a0:c7:00:09:a0:07:dc:40:9b:
                    33:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:5E:F5:2E:A8:22:1E:EE:45:3E:03:9E:FC:7D:03:72:1A:60:1D:02
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fF71LqgiHu5FPgOe_H0DchpgHQI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:59:41:38:0e:72:eb:08:78:32:89:ec:eb:f5:b4:a8:76:dc:
         7e:16:60:ad:07:1a:78:cb:b1:af:d5:8f:cb:b9:6b:80:dc:f0:
         77:70:81:f8:e0:1f:2c:5e:1a:96:96:1b:3b:ed:fb:48:28:59:
         37:65:30:2a:fd:60:09:28:1d:c1:1e:6d:d6:95:93:6f:9a:60:
         c5:a8:03:24:50:f5:c1:90:4d:94:30:56:ab:f1:41:a8:2f:ed:
         47:44:d7:b5:c8:7b:df:07:c3:df:8d:90:44:1f:19:b4:33:2b:
         3f:19:57:dc:ce:89:ce:85:cf:28:6c:ca:d0:ba:f3:4e:f7:24:
         f8:41:57:7b:71:4e:6b:33:58:62:0f:c8:84:00:77:1d:d2:45:
         b4:ce:64:67:4c:d3:85:76:89:ed:67:d2:37:fc:f2:74:c6:98:
         17:2b:98:2d:1e:b8:a1:93:03:ac:8f:cf:fb:c3:59:ee:6f:6d:
         e8:7c:93:4d:4e:8b:fe:86:36:32:aa:57:1e:00:6f:ca:3b:23:
         5d:55:8d:47:ee:fa:f9:59:44:6c:75:b4:02:6a:9c:5e:b8:12:
         9e:33:4b:70:41:f0:53:9a:ce:b5:de:b6:f3:eb:a2:6f:81:49:
         de:88:ff:bc:b3:f6:a8:8c:15:5c:53:af:74:d9:a6:32:d9:9e:
         e9:ac:87:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:19 2024 by rpki-client on console-ams.rpki-client.org