Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ggOF95v_KRsdNUR02K-GVKJvlDM.roa
File:                     ggOF95v_KRsdNUR02K-GVKJvlDM.roa (raw, json)
Hash identifier:          VqbB1UDlOblHr/bvjWZosL7UEAQg3KsZJBk9PTekv1w=
Subject key identifier:   82:03:85:F7:9B:FF:29:1B:1D:35:44:74:D8:AF:86:54:A2:6F:94:33
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       2A88
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ggOF95v_KRsdNUR02K-GVKJvlDM.roa
Signing time:             Fri 01 Sep 2023 10:08:01 +0000
ROA not before:           Fri 01 Sep 2023 10:08:01 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     38841
IP address blocks:        123.192.144.128/26 maxlen: 26

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10888 (0x2a88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep  1 10:08:01 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=820385F79BFF291B1D354474D8AF8654A26F9433
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ba:24:e4:de:cd:fd:15:7e:a3:1b:33:46:cf:
                    a2:09:d2:e7:c2:84:12:a5:a2:94:de:3e:13:c1:55:
                    a1:1a:5a:26:b1:6b:3e:03:a1:42:8a:f5:10:ed:eb:
                    16:a1:75:27:b6:9f:93:6a:77:a6:4a:c8:cc:c8:03:
                    ca:e0:c1:bf:44:30:da:b9:34:24:08:c5:3d:4a:75:
                    a7:ed:59:b9:66:e7:fb:4b:f4:44:93:95:5f:d6:32:
                    ad:c8:09:22:32:22:8e:14:81:41:a9:ee:1e:f8:a1:
                    a0:26:98:59:fc:73:b9:88:4f:ad:ed:f7:7a:2f:38:
                    36:a2:2e:5e:ef:18:ca:7b:bb:dd:a1:0c:5f:86:ed:
                    14:13:e9:6c:39:0d:83:13:6a:60:49:8b:a5:c6:cb:
                    46:8a:5f:72:3d:4f:53:1b:52:da:eb:22:98:03:ec:
                    4c:a1:f8:ee:6c:62:66:f3:5c:51:0b:b1:66:f0:27:
                    09:3e:a4:45:4f:61:0a:f1:fb:d0:ca:1b:b7:52:29:
                    6f:29:98:83:d4:c5:dc:67:00:c2:fc:9b:c8:e8:42:
                    27:64:94:90:a6:48:bf:7f:75:62:2f:33:02:74:01:
                    db:37:4e:f9:6e:55:bb:ca:02:b3:7c:1a:03:9e:bf:
                    57:e8:b9:aa:6d:73:15:dc:47:9a:f4:02:9e:ac:2f:
                    75:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:03:85:F7:9B:FF:29:1B:1D:35:44:74:D8:AF:86:54:A2:6F:94:33
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ggOF95v_KRsdNUR02K-GVKJvlDM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.192.144.128/26

    Signature Algorithm: sha256WithRSAEncryption
         44:a3:e5:73:f6:a8:88:ac:61:9d:ab:04:ed:e6:78:de:cc:09:
         7d:df:c8:6d:0b:36:b1:f5:34:f5:9d:d0:76:39:1b:90:09:b7:
         66:dc:39:bf:1c:c0:28:89:59:8f:12:49:de:66:10:da:72:d2:
         1b:ac:cc:79:06:b9:0b:c1:24:7a:16:47:eb:1a:36:4c:9e:44:
         6a:9e:86:69:db:40:40:b3:50:3f:a0:de:49:38:4b:7f:ab:31:
         6e:40:ef:f3:b6:21:21:ac:3b:65:7f:cf:09:53:4b:d6:2a:73:
         a3:60:17:1a:62:72:21:11:9b:74:a5:11:8e:b8:3f:68:34:5f:
         1b:8f:c9:2e:2a:30:b4:4d:05:22:88:46:c8:53:6f:43:53:88:
         ac:67:cf:38:43:13:bf:87:a1:23:2e:9b:95:6c:e8:5d:6d:ad:
         6f:d5:58:b2:92:d0:fa:85:5a:de:df:a0:dc:30:95:ad:3b:24:
         d8:4d:23:6c:3e:3f:b4:75:cb:f2:71:dd:6d:69:b2:ab:ea:fe:
         d9:18:d5:52:b3:4f:bd:26:60:52:73:64:63:c9:78:64:b2:70:
         6d:70:9b:4b:75:21:4a:19:ff:c3:20:4e:0b:e7:9f:7e:5b:7d:
         bd:67:b2:09:44:90:1e:7f:54:73:b2:8f:36:c5:de:88:61:25:
         15:86:a7:f8
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgICKogwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx
MDA4MDFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDgyMDM4NUY3OUJGRjI5
MUIxRDM1NDQ3NEQ4QUY4NjU0QTI2Rjk0MzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCmuiTk3s39FX6jGzNGz6IJ0ufChBKlopTePhPBVaEaWiaxaz4D
oUKK9RDt6xahdSe2n5Nqd6ZKyMzIA8rgwb9EMNq5NCQIxT1KdaftWblm5/tL9EST
lV/WMq3ICSIyIo4UgUGp7h74oaAmmFn8c7mIT63t93ovODaiLl7vGMp7u92hDF+G
7RQT6Ww5DYMTamBJi6XGy0aKX3I9T1MbUtrrIpgD7Eyh+O5sYmbzXFELsWbwJwk+
pEVPYQrx+9DKG7dSKW8pmIPUxdxnAML8m8joQidklJCmSL9/dWIvMwJ0Ads3Tvlu
VbvKArN8GgOev1fouaptcxXcR5r0Ap6sL3UdAgMBAAGjggHvMIIB6zAdBgNVHQ4E
FgQUggOF95v/KRsdNUR02K+GVKJvlDMwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2dnT0Y5NXZfS1JzZE5VUjAy
Sy1HVktKdmxETS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQZ7
wJCAMA0GCSqGSIb3DQEBCwUAA4IBAQBEo+Vz9qiIrGGdqwTt5njezAl938htCzax
9TT1ndB2ORuQCbdm3Dm/HMAoiVmPEkneZhDactIbrMx5BrkLwSR6FkfrGjZMnkRq
noZp20BAs1A/oN5JOEt/qzFuQO/ztiEhrDtlf88JU0vWKnOjYBcaYnIhEZt0pRGO
uD9oNF8bj8kuKjC0TQUiiEbIU29DU4isZ884QxO/h6EjLpuVbOhdba1v1ViyktD6
hVre36DcMJWtOyTYTSNsPj+0dcvycd1tabKr6v7ZGNVSs0+9JmBSc2RjyXhksnBt
cJtLdSFKGf/DIE4L559+W329Z7IJRJAef1Rzso82xd6IYSUVhqf4
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:26 2024 by rpki-client on console-fra.rpki-client.org