Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/i4ml1t1oArXRaNizhb4QOViEqlI.roa
File:                     i4ml1t1oArXRaNizhb4QOViEqlI.roa (raw, json)
Hash identifier:          sJAru8JRyiFtyy3Qyc0bUnhFguf0dAYw7sKy+f1CJZ0=
Subject key identifier:   8B:89:A5:D6:DD:68:02:B5:D1:68:D8:B3:85:BE:10:39:58:84:AA:52
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       2840
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/i4ml1t1oArXRaNizhb4QOViEqlI.roa
Signing time:             Fri 01 Sep 2023 10:05:08 +0000
ROA not before:           Fri 01 Sep 2023 10:05:08 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     38841
IP address blocks:        123.192.104.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10304 (0x2840)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep  1 10:05:08 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=8B89A5D6DD6802B5D168D8B385BE10395884AA52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d8:da:8e:36:72:67:0c:42:ec:63:87:52:e1:
                    d9:cc:53:b0:15:1e:00:97:ed:ff:14:4d:44:40:a6:
                    f7:34:b3:26:08:e6:c6:af:2f:3a:2d:15:d3:89:59:
                    b6:79:4a:b2:54:6a:9d:43:80:3f:75:0c:2a:36:c2:
                    09:69:81:51:0f:f7:89:d7:0b:67:4d:6a:db:59:73:
                    1a:3a:3b:05:aa:33:ff:7e:d8:84:a3:1e:f3:a3:6a:
                    21:19:c5:fb:1f:d7:0f:91:6a:1b:db:c4:97:b7:86:
                    b3:b2:09:75:d0:9a:7c:a3:eb:82:e1:b5:a3:73:2c:
                    07:f7:31:48:df:1f:2a:b2:c7:56:45:b4:89:50:a4:
                    02:aa:44:d5:78:1a:24:9b:7d:0f:92:4f:14:ed:76:
                    19:24:96:6e:df:45:58:28:d3:4c:35:5f:44:8b:aa:
                    c3:f6:70:79:ec:2f:18:c9:3f:07:80:f2:15:b9:28:
                    ea:76:46:b8:a5:fb:33:19:6b:61:a3:66:3f:8c:43:
                    9a:11:a2:77:e3:65:0e:b5:dc:09:45:4b:d5:51:9f:
                    a0:e7:df:22:5b:59:6d:87:76:57:41:ff:63:1c:ca:
                    72:a6:47:dd:b8:bc:82:f7:db:ad:f5:67:9c:60:35:
                    81:d6:ec:f3:d3:32:63:36:64:91:76:77:2e:ea:cd:
                    3a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:89:A5:D6:DD:68:02:B5:D1:68:D8:B3:85:BE:10:39:58:84:AA:52
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/i4ml1t1oArXRaNizhb4QOViEqlI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.192.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:5c:da:a3:1d:ab:e8:fa:de:8e:e5:39:39:48:a3:ef:d2:e2:
         e4:ef:fe:46:15:f0:b6:36:29:6d:f0:b1:f0:65:ab:5c:c8:cf:
         4f:5c:26:ff:e3:36:5d:37:36:4d:5b:1b:eb:a0:d4:91:22:85:
         05:81:4b:77:28:6e:63:0b:45:e7:47:9a:a8:dc:0c:93:1e:4a:
         0a:af:3b:18:78:f8:3b:ad:24:bf:b4:c6:f4:07:dc:fd:b2:65:
         eb:65:01:fd:a9:28:d0:b3:f0:ff:0e:fe:47:d0:91:62:c0:7f:
         82:b5:55:65:a2:fd:50:db:6f:f5:3b:c0:f4:26:45:6a:b0:d2:
         9c:f1:05:cc:34:cc:9e:06:a5:7b:92:73:e7:75:89:17:5a:7d:
         4a:5d:7c:8e:91:cd:9b:ec:0d:40:2b:9e:92:a3:cc:3b:e7:68:
         c1:74:b6:f6:d6:fc:f2:9c:13:37:0d:fd:ea:ab:19:11:85:ef:
         54:73:b9:f2:8d:e0:64:d1:8a:45:d9:ff:81:9c:d3:e6:2c:ed:
         ad:3f:5d:54:e6:f4:6a:d8:21:de:02:37:6a:af:b0:4b:d1:5c:
         7e:71:2c:ce:b9:8b:d6:8d:71:b6:fe:9b:78:7b:88:af:ca:1b:
         0e:17:e2:77:76:1b:5f:ce:b2:ac:27:31:ec:44:58:c2:94:62:
         12:77:40:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:19 2024 by rpki-client on console-ams.rpki-client.org