Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/n6YM8gcwPG5pt78pDwqMtp2kXLI.roa
File:                     n6YM8gcwPG5pt78pDwqMtp2kXLI.roa (raw, json)
Hash identifier:          PEUXPC2Q3PTRWvfw0oqOz4m6Qrkg4AkNvwPbzZTKIlE=
Subject key identifier:   9F:A6:0C:F2:07:30:3C:6E:69:B7:BF:29:0F:0A:8C:B6:9D:A4:5C:B2
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       2871
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/n6YM8gcwPG5pt78pDwqMtp2kXLI.roa
Signing time:             Fri 01 Sep 2023 10:05:20 +0000
ROA not before:           Fri 01 Sep 2023 10:05:20 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     38841
IP address blocks:        180.177.47.0/26 maxlen: 26

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10353 (0x2871)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep  1 10:05:20 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=9FA60CF207303C6E69B7BF290F0A8CB69DA45CB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:26:54:4c:7d:86:e1:21:41:3b:f1:cb:44:86:
                    df:07:c4:7f:d6:81:fd:45:b6:3a:98:c4:8f:b7:b3:
                    1e:fd:4b:8a:d9:5b:82:6c:fc:fe:2e:ce:68:da:43:
                    14:1d:66:ea:e3:24:25:46:82:4e:7e:8d:d0:50:91:
                    d9:88:ee:23:34:4a:38:29:21:b0:27:b8:e0:03:b8:
                    25:78:7b:0e:03:83:8e:81:6c:bc:35:0f:b7:ac:c8:
                    63:58:a5:5a:40:55:0c:23:58:26:29:8d:de:ad:11:
                    1c:52:c1:a4:69:af:61:43:24:f3:2f:66:f5:16:ef:
                    c9:70:75:c6:a6:78:f7:51:cc:36:f7:c9:db:e8:6e:
                    38:b0:c9:15:92:03:74:a1:40:cd:89:02:5d:d2:1e:
                    e1:4d:64:90:fa:72:0d:97:fb:e9:66:ef:2c:d5:b7:
                    76:51:78:54:34:57:99:73:2e:83:a6:fe:a6:20:69:
                    63:2e:ab:94:d7:21:13:5b:07:70:35:5a:ce:8c:38:
                    54:24:1a:b2:4c:48:ae:bc:b4:ea:4e:c4:28:12:b2:
                    34:47:00:23:8b:50:52:0a:53:d1:7b:4e:8d:2d:23:
                    3a:ff:3d:d1:66:9a:a6:86:ce:94:ad:c6:7c:b4:5d:
                    86:18:5d:5a:6b:65:42:3b:74:23:88:9f:42:4e:31:
                    ca:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:A6:0C:F2:07:30:3C:6E:69:B7:BF:29:0F:0A:8C:B6:9D:A4:5C:B2
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/n6YM8gcwPG5pt78pDwqMtp2kXLI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.47.0/26

    Signature Algorithm: sha256WithRSAEncryption
         70:04:df:a5:2b:5f:00:83:43:43:1a:cc:08:2e:2e:6b:f8:f9:
         dc:4f:9f:63:fa:f6:ae:a7:76:fd:dd:bc:5b:27:2e:82:8f:28:
         43:34:df:9d:47:c5:7a:8a:e4:c5:1e:4d:cf:16:c6:56:e2:8b:
         76:0f:50:ca:a9:bd:b8:9d:b7:58:9d:33:83:8b:cd:1a:15:bc:
         3d:a4:fb:7b:6e:43:f8:a6:aa:76:ed:d3:b8:41:af:f9:4c:5e:
         31:63:03:7f:9f:59:af:83:57:2e:77:7d:f4:c5:64:a8:2d:b6:
         01:46:09:7c:41:4b:05:f3:40:98:82:f9:f2:91:f7:a9:ef:49:
         1b:9e:63:36:9a:84:3f:a7:4d:f0:6a:d0:da:f3:1d:7c:46:d0:
         a0:b5:6b:a9:61:0f:56:56:be:bb:d4:f9:4b:ea:16:67:cb:53:
         a4:e8:7b:1e:ab:52:9b:62:14:5a:1f:07:95:59:0f:8d:a4:e2:
         a6:18:77:50:c6:50:78:a8:a7:b2:f1:c9:e9:36:4f:c4:7e:aa:
         da:70:7c:6e:c3:bd:d3:17:8d:16:19:67:4e:29:d8:23:7f:65:
         1f:8a:a2:ea:d1:67:61:5e:1a:a7:17:2e:a4:f8:24:b9:3b:9e:
         3c:ae:04:89:7c:97:ca:c2:d0:a8:4a:75:6f:13:47:bb:5c:f6:
         99:40:b0:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:20 2024 by rpki-client on console-ams.rpki-client.org