Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fm4v0f7MHPm3Dpyaf4FOby0cze4.roa
File:                     fm4v0f7MHPm3Dpyaf4FOby0cze4.roa (raw, json)
Hash identifier:          UHh2QlafxVLCyTEnxQvoaqbrx/zw8yvZUz/0brPILAc=
Subject key identifier:   7E:6E:2F:D1:FE:CC:1C:F9:B7:0E:9C:9A:7F:81:4E:6F:2D:1C:CD:EE
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       27CA
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fm4v0f7MHPm3Dpyaf4FOby0cze4.roa
Signing time:             Fri 01 Sep 2023 10:04:32 +0000
ROA not before:           Fri 01 Sep 2023 10:04:32 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     9924
IP address blocks:        123.193.160.0/19 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10186 (0x27ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep  1 10:04:32 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=7E6E2FD1FECC1CF9B70E9C9A7F814E6F2D1CCDEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:8f:f2:88:22:ad:b0:f9:f4:ca:7b:c8:e4:a3:
                    bf:e4:27:89:7f:4d:7f:45:9a:26:82:6e:34:0f:ef:
                    1f:5a:07:22:a6:8a:68:5f:0e:38:50:1d:c8:c7:c7:
                    c7:f8:60:f1:12:15:72:5d:b5:6c:3c:b7:88:9c:1c:
                    3c:a3:09:11:9a:4f:a2:f7:5f:ed:51:4d:67:55:05:
                    3e:5e:72:99:88:80:27:4c:1e:54:d5:71:98:ed:83:
                    72:46:ee:1b:8c:82:dd:79:55:19:1c:1f:ef:a3:a1:
                    87:55:1d:ff:a4:1f:4e:89:1c:3f:39:7f:63:5d:24:
                    ee:e1:fc:86:8a:2e:0d:2e:f2:5f:f4:4e:f2:bd:fc:
                    f2:bf:ae:7a:04:6e:e4:d9:8b:d2:2a:ac:a0:7d:64:
                    46:03:d7:ad:2a:0e:33:f7:3f:08:bc:e7:86:06:4b:
                    9e:ec:e1:30:0b:6e:c9:ff:b9:bc:9c:cf:17:a6:67:
                    fb:01:ad:ba:6b:ee:1c:e7:c6:f5:f4:d7:3f:e7:50:
                    2d:18:f1:36:50:ad:21:7e:03:ca:bf:4e:db:30:47:
                    d7:38:98:5b:88:d0:e4:20:8e:b9:5d:e4:d5:d5:1a:
                    4c:26:b1:52:b3:96:50:6e:6a:e4:cf:28:55:96:9d:
                    0b:e3:45:a8:59:f1:97:3d:cd:79:f0:41:db:66:56:
                    41:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:6E:2F:D1:FE:CC:1C:F9:B7:0E:9C:9A:7F:81:4E:6F:2D:1C:CD:EE
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fm4v0f7MHPm3Dpyaf4FOby0cze4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         94:5c:78:46:a8:d8:d6:4d:37:87:07:9d:42:66:50:68:6c:3e:
         5b:2d:5a:35:92:f6:27:96:59:ce:9c:ea:b5:7a:08:dd:89:96:
         dd:14:02:e1:5a:58:a1:2e:2d:03:30:03:5f:a7:63:b1:8d:ed:
         6d:67:bd:c7:de:4e:82:90:ae:16:8c:23:7e:f5:94:f8:fb:fd:
         22:3d:19:01:ac:f4:fa:9f:7c:a1:fb:c4:74:33:dd:c8:40:2a:
         c5:a7:69:ec:6b:5b:09:8c:36:b2:15:31:3f:7a:c8:fc:5f:ba:
         ab:37:84:e6:2a:85:eb:c5:07:18:8d:48:42:0b:b8:78:49:4c:
         d8:52:9d:ac:25:c4:d8:e5:a7:a3:d6:0e:3f:0c:d8:81:06:38:
         31:f6:9b:d4:e1:a6:22:ba:f2:5a:ff:d3:ed:29:d8:c4:0f:a1:
         22:45:43:77:cc:4f:c0:37:d5:cb:41:18:d5:28:9a:9e:53:55:
         48:d0:c3:27:89:fa:6a:f7:4a:70:70:70:9b:9b:cd:b7:55:36:
         e2:46:48:8d:63:f2:9a:fc:ee:93:bf:6e:fd:99:09:f8:98:d3:
         79:7c:ac:0e:95:4e:de:5c:a1:c7:88:a9:b7:09:d2:46:d2:f7:
         f9:32:55:d6:6b:85:d6:a8:be:d5:e0:a0:3d:94:f7:45:94:77:
         3b:1d:18:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:19 2024 by rpki-client on console-ams.rpki-client.org