Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/g6s8fo3e1_cS8sLXFknBGbQIIfY.roa
File:                     g6s8fo3e1_cS8sLXFknBGbQIIfY.roa (raw, json)
Hash identifier:          K7C4VYQcbu3orzKdUYC/8bHcndfrsrY9unAzWRIcflM=
Subject key identifier:   83:AB:3C:7E:8D:DE:D7:F7:12:F2:C2:D7:16:49:C1:19:B4:08:21:F6
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       359B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/g6s8fo3e1_cS8sLXFknBGbQIIfY.roa
Signing time:             Mon 10 Feb 2025 13:53:30 +0000
ROA not before:           Mon 10 Feb 2025 13:53:30 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     38841
IP address blocks:        123.194.0.0/20 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13723 (0x359b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb 10 13:53:30 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=83AB3C7E8DDED7F712F2C2D71649C119B40821F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:11:db:e4:d3:26:c3:62:2d:5e:81:7c:4a:a6:
                    80:aa:6c:0b:c2:76:3a:7e:24:d5:b4:01:4c:75:26:
                    d6:65:88:56:c4:0e:e2:3b:16:7c:a6:c2:35:ea:a5:
                    68:81:7c:87:0a:1e:b9:ed:b4:4c:5c:29:f6:ef:87:
                    54:98:5e:8d:94:ac:28:3a:e2:6a:dd:b9:bf:01:eb:
                    67:a8:25:8a:db:a4:ae:63:51:71:48:6a:d0:77:38:
                    ee:53:e4:2c:da:35:0a:0b:9c:fd:1e:b8:0b:02:25:
                    43:ed:03:4b:59:ef:50:04:0d:4c:39:87:0d:59:56:
                    0a:d5:29:92:9f:b5:89:b3:df:e0:bc:95:31:29:35:
                    1d:4b:bc:ed:9f:ec:81:bb:77:07:40:18:c7:13:05:
                    e8:6c:1e:15:0d:8e:1f:77:b0:fb:dc:36:dc:62:04:
                    2e:17:f6:56:8c:e5:21:be:a4:f4:d5:0f:8a:35:d6:
                    0d:f9:37:12:2e:fa:94:4c:72:d7:47:14:b2:a0:fe:
                    24:34:f8:30:a8:00:50:b7:da:45:ee:46:20:4f:ed:
                    36:19:d0:a7:c0:2d:33:9f:47:8d:bf:eb:8e:1e:1c:
                    02:65:45:16:63:56:3c:31:3a:e6:f2:63:7d:b4:e8:
                    8d:32:70:03:69:1f:7d:0f:e7:a0:45:fa:50:31:ec:
                    02:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:AB:3C:7E:8D:DE:D7:F7:12:F2:C2:D7:16:49:C1:19:B4:08:21:F6
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/g6s8fo3e1_cS8sLXFknBGbQIIfY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         73:5c:87:da:e1:a9:b9:f1:91:d9:f3:a0:0a:5d:90:51:40:09:
         7d:84:3f:64:aa:60:51:22:fb:58:31:51:8d:9c:b3:d2:4c:09:
         00:7b:a7:3f:e8:c5:7f:b2:3f:b5:80:4d:69:b1:e0:f3:1e:df:
         fc:72:74:10:12:f9:0a:7f:2c:4e:8d:de:de:00:2a:61:1e:c6:
         d9:63:c5:2b:8e:bc:b9:21:18:3f:4a:04:35:ae:2a:80:a7:08:
         ce:5b:af:24:94:ce:60:f5:06:70:ff:5e:28:70:e4:65:48:f8:
         1a:3c:89:b7:02:59:ad:59:cd:cb:22:c4:0e:0d:80:ed:00:81:
         18:41:e5:05:b2:c3:63:ff:90:b4:8a:d7:9f:2a:c0:1c:f8:e7:
         4c:21:00:4f:b8:4d:ac:a4:0f:c9:06:d1:23:b1:5c:f8:10:3e:
         c4:77:11:61:a6:89:29:24:90:57:5f:27:e7:1f:71:84:c2:2f:
         e6:e4:f8:28:48:70:17:91:48:20:ce:51:eb:4e:95:ce:65:37:
         64:d2:31:d4:70:64:d8:85:eb:70:b7:a8:ae:7a:6d:46:a3:c4:
         f0:4e:e7:a2:c4:8e:7b:ec:3e:b7:a4:a3:3a:c5:07:62:9d:f3:
         fa:e7:07:5e:eb:af:4c:08:6a:5f:fc:21:ae:19:cc:20:58:75:
         97:df:41:2e
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICNZswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx
MzUzMzBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDgzQUIzQzdFOERERUQ3
RjcxMkYyQzJENzE2NDlDMTE5QjQwODIxRjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC+Edvk0ybDYi1egXxKpoCqbAvCdjp+JNW0AUx1JtZliFbEDuI7
FnymwjXqpWiBfIcKHrnttExcKfbvh1SYXo2UrCg64mrdub8B62eoJYrbpK5jUXFI
atB3OO5T5CzaNQoLnP0euAsCJUPtA0tZ71AEDUw5hw1ZVgrVKZKftYmz3+C8lTEp
NR1LvO2f7IG7dwdAGMcTBehsHhUNjh93sPvcNtxiBC4X9laM5SG+pPTVD4o11g35
NxIu+pRMctdHFLKg/iQ0+DCoAFC32kXuRiBP7TYZ0KfALTOfR42/644eHAJlRRZj
VjwxOubyY3206I0ycANpH30P56BF+lAx7AKfAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUg6s8fo3e1/cS8sLXFknBGbQIIfYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2c2czhmbzNlMV9jUzhzTFhG
a25CR2JRSUlmWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAR7
wgAwDQYJKoZIhvcNAQELBQADggEBAHNch9rhqbnxkdnzoApdkFFACX2EP2SqYFEi
+1gxUY2cs9JMCQB7pz/oxX+yP7WATWmx4PMe3/xydBAS+Qp/LE6N3t4AKmEextlj
xSuOvLkhGD9KBDWuKoCnCM5brySUzmD1BnD/Xihw5GVI+Bo8ibcCWa1ZzcsixA4N
gO0AgRhB5QWyw2P/kLSK158qwBz450whAE+4TaykD8kG0SOxXPgQPsR3EWGmiSkk
kFdfJ+cfcYTCL+bk+ChIcBeRSCDOUetOlc5lN2TSMdRwZNiF63C3qK56bUajxPBO
56LEjnvsPrekozrFB2Kd8/rnB17rr0wIal/8Ia4ZzCBYdZffQS4=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:21 2025 by rpki-client