Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/q6PC05FhMli7xczxPs7Wm60C-iI.roa
File:                     q6PC05FhMli7xczxPs7Wm60C-iI.roa (raw, json)
Hash identifier:          dw9UBamdpFEq93f2GA/E4jXChaag9vXogRosPuAU5nA=
Subject key identifier:   AB:A3:C2:D3:91:61:32:58:BB:C5:CC:F1:3E:CE:D6:9B:AD:02:FA:22
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       287E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/q6PC05FhMli7xczxPs7Wm60C-iI.roa
Signing time:             Fri 01 Sep 2023 10:05:24 +0000
ROA not before:           Fri 01 Sep 2023 10:05:24 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     38841
IP address blocks:        123.193.80.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10366 (0x287e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep  1 10:05:24 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=ABA3C2D391613258BBC5CCF13ECED69BAD02FA22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b7:31:ff:30:44:a9:88:c2:08:59:17:8a:2f:
                    50:89:8f:af:61:04:e6:7a:90:78:65:4f:7c:68:0b:
                    de:e7:44:b1:39:36:7d:6f:bf:3c:41:39:ca:6e:f3:
                    f6:c8:24:03:7b:b5:14:76:6d:a9:0c:ac:40:cb:0b:
                    d4:f8:82:e5:68:79:43:0f:31:11:70:fd:df:4b:db:
                    ad:19:4d:a0:f8:29:57:f2:3b:39:38:be:32:c9:3e:
                    ca:0a:28:cb:fe:9d:c4:1d:3b:8f:29:c4:54:8f:89:
                    d9:fb:4e:d8:d1:d6:0f:37:50:6e:e9:51:ee:02:6d:
                    95:cf:10:c0:5d:c4:2d:00:19:6b:91:d3:94:b5:41:
                    fa:ec:3d:7d:22:94:a9:0d:53:62:04:3f:97:6b:b8:
                    1c:84:60:19:38:53:82:e5:80:44:2d:18:ce:a5:84:
                    d7:61:36:48:10:ac:6c:0c:e8:34:04:69:13:be:45:
                    76:d4:bd:9c:78:cd:1f:44:b9:99:e1:ec:1d:53:de:
                    13:03:3d:1f:b1:47:1a:d5:d3:e0:04:6c:15:d5:93:
                    84:06:7d:41:e4:c9:cb:d3:f0:e7:ae:71:f0:35:1b:
                    c2:6e:69:39:33:68:05:0b:9c:bb:39:01:13:0e:dc:
                    5c:22:fb:97:a6:60:5b:55:fa:f8:e8:e3:fa:2b:30:
                    9c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:A3:C2:D3:91:61:32:58:BB:C5:CC:F1:3E:CE:D6:9B:AD:02:FA:22
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/q6PC05FhMli7xczxPs7Wm60C-iI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3f:77:b9:48:68:24:88:be:86:4b:0b:e9:90:73:41:16:fe:fe:
         4c:50:f6:11:9a:d2:a7:2f:6f:1a:49:28:f9:87:2e:e5:ec:15:
         59:cc:e6:da:52:e1:45:26:13:07:e8:3f:a4:90:2e:89:44:04:
         05:7c:5c:f1:43:e7:0c:0a:49:86:65:f8:62:9f:02:3b:4d:4c:
         37:5a:66:b4:11:4e:b5:cd:e5:0e:fd:62:9c:de:69:ed:ae:dd:
         c2:ca:94:a4:1c:db:2b:c5:d6:b5:6f:9d:65:ed:bc:59:4f:30:
         6c:12:a0:46:39:5f:c7:04:ba:03:c8:3d:14:5b:90:6f:ad:47:
         75:da:85:a4:4d:0c:96:68:03:41:1e:b0:f9:0f:dd:ff:28:64:
         25:ec:ec:0d:b7:36:65:cc:ab:64:7b:c4:c3:66:29:33:50:1b:
         49:81:41:2d:dd:a6:53:10:74:1b:96:15:32:a4:8a:9a:09:cf:
         ee:03:05:83:f4:7e:6a:64:17:2a:b3:73:70:26:ef:85:d7:b2:
         4e:65:d7:21:8e:1a:9c:5d:0d:41:d8:5b:f4:ab:5c:52:a4:a7:
         f4:83:3f:54:07:07:1d:de:d2:f7:9a:28:40:87:f5:69:0d:2f:
         9d:49:87:7f:22:62:6d:c4:74:a4:91:41:31:62:40:08:1c:bf:
         3a:01:46:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:20 2024 by rpki-client on console-ams.rpki-client.org