Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lWA62rokVpOXmS_cCjgeNrP_uHA.roa
File:                     lWA62rokVpOXmS_cCjgeNrP_uHA.roa (raw, json)
Hash identifier:          25/v4CunZJQNMlchaQBe43b16BNZD7n3S+NVzAVADlo=
Subject key identifier:   95:60:3A:DA:BA:24:56:93:97:99:2F:DC:0A:38:1E:36:B3:FF:B8:70
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       2886
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lWA62rokVpOXmS_cCjgeNrP_uHA.roa
Signing time:             Fri 01 Sep 2023 10:05:26 +0000
ROA not before:           Fri 01 Sep 2023 10:05:26 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     38841
IP address blocks:        123.193.112.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10374 (0x2886)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep  1 10:05:26 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=95603ADABA24569397992FDC0A381E36B3FFB870
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:8d:3e:c2:11:bf:16:61:1b:9e:61:10:28:41:
                    77:f4:c3:a4:cf:f1:01:15:c3:c1:ac:cb:78:17:28:
                    38:3c:54:cc:1d:1f:9b:a1:29:cb:0a:d1:b2:42:d3:
                    83:1d:a8:f7:40:e9:b0:26:a4:3d:fc:7c:da:c9:52:
                    bd:1c:eb:ff:cf:be:dc:2e:1f:91:df:dd:0e:39:1d:
                    1a:67:7c:c1:f8:ac:8b:ac:f6:8c:93:96:af:52:4a:
                    cf:c0:ec:c2:8b:e8:b7:6e:09:35:b2:62:99:dc:a7:
                    a0:5e:e3:b7:59:b3:17:0b:f9:84:ea:76:f2:e9:60:
                    c7:64:16:3f:34:73:32:1f:bd:f2:3f:39:38:46:b0:
                    24:12:51:3b:d0:77:3d:2d:6f:fc:f5:85:e5:54:0c:
                    0f:ad:d9:d3:62:cd:5d:23:5d:e1:4d:c9:19:2b:f9:
                    66:f2:af:f3:21:8e:52:70:82:2d:b4:24:91:39:28:
                    05:fa:60:75:46:e2:42:3b:82:de:68:8a:1f:9d:d5:
                    29:91:56:b6:15:dc:c4:b7:21:90:38:e6:74:68:01:
                    25:73:81:53:06:72:27:02:3c:c3:5e:ce:71:c7:70:
                    a2:a6:87:64:01:28:fc:11:01:64:5c:74:5a:6e:d4:
                    bb:c9:68:81:b0:2a:91:24:3c:86:1a:a8:fa:75:b7:
                    19:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:60:3A:DA:BA:24:56:93:97:99:2F:DC:0A:38:1E:36:B3:FF:B8:70
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lWA62rokVpOXmS_cCjgeNrP_uHA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4e:a0:a7:61:42:c1:c2:19:32:db:6c:0d:9b:51:36:e1:a5:46:
         b6:c6:0d:11:a7:99:d9:66:6d:c0:68:8d:8c:78:a2:6f:e0:0b:
         cd:62:aa:9f:1b:9d:70:c0:45:cb:cf:7b:1a:0d:fd:a6:5e:79:
         3d:f3:aa:07:81:c7:16:3c:92:95:dd:ef:cf:ae:18:ce:2e:6f:
         f3:0e:e1:16:de:59:c0:c6:10:15:bf:88:ac:0f:c4:f5:ef:a9:
         aa:7c:2d:79:34:73:ce:29:fc:81:87:d1:e0:4a:fa:a5:d5:f3:
         68:e1:42:ee:b1:36:35:53:fb:a1:be:92:9b:4f:53:44:f6:5c:
         44:cd:c7:b5:cf:01:f5:5f:7b:42:84:86:d7:7c:83:26:51:bc:
         09:f3:30:1e:25:50:f7:51:10:22:e5:c9:cb:42:05:b3:00:2d:
         75:0b:8e:f2:b7:50:7e:41:c9:6e:56:3e:ab:13:ef:10:fb:0a:
         02:1e:ba:cf:16:c8:20:b0:7e:26:45:a9:89:70:70:c4:8d:52:
         5b:86:ec:2c:3f:0d:99:ce:45:77:73:d8:11:3e:d3:33:0f:32:
         d3:6f:f9:cc:dd:03:05:b6:c8:07:98:44:fe:a9:05:da:3b:9c:
         ac:90:a2:7c:84:8a:9f:c6:bf:a2:e3:83:31:7a:92:ef:7a:3a:
         a9:f7:78:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:19 2024 by rpki-client on console-ams.rpki-client.org