Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tyk3TzUi1LrkwUvAJDJOK_0TX9E.roa
File:                     tyk3TzUi1LrkwUvAJDJOK_0TX9E.roa (raw, json)
Hash identifier:          krDHRJRWIMBU+oiGdivzbV++nH1M4kJUIUp2ZLwraZo=
Subject key identifier:   B7:29:37:4F:35:22:D4:BA:E4:C1:4B:C0:24:32:4E:2B:FD:13:5F:D1
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       2885
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tyk3TzUi1LrkwUvAJDJOK_0TX9E.roa
Signing time:             Fri 01 Sep 2023 10:05:26 +0000
ROA not before:           Fri 01 Sep 2023 10:05:26 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     18429
IP address blocks:        118.232.200.0/25 maxlen: 25

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10373 (0x2885)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep  1 10:05:26 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=B729374F3522D4BAE4C14BC024324E2BFD135FD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e9:fb:8a:1c:45:47:a3:15:aa:95:5e:b7:93:
                    4a:1e:21:5f:35:4c:fd:98:74:ec:d6:f8:7b:68:d7:
                    fe:02:84:b0:2e:0a:84:b5:f6:e6:ee:ee:f6:70:a4:
                    34:9e:a7:5e:e4:8f:8c:38:ff:62:b2:ef:90:f7:4f:
                    a2:06:b5:04:93:97:5e:e1:36:59:76:7b:ae:e4:2d:
                    2d:f1:e9:29:b5:cf:b4:d6:44:3b:bb:48:67:a9:68:
                    7f:86:50:5a:f7:5b:9b:fd:a2:54:f2:59:b5:90:3d:
                    70:41:7a:e6:03:62:bd:a5:88:09:64:f3:91:d0:f0:
                    1c:75:05:87:5e:05:86:7d:d0:49:67:d7:f6:29:d7:
                    4c:8c:d7:d4:dd:02:0f:a2:a3:22:ed:a3:0a:25:17:
                    6a:d6:80:bf:9e:15:a4:06:c3:ad:13:91:49:21:5e:
                    d8:2b:01:46:00:a3:1c:3e:c2:49:63:52:55:17:49:
                    12:6e:b9:c8:e9:ca:8c:32:13:ec:a4:6f:52:3c:7d:
                    67:d9:67:d3:60:0d:49:0d:4e:cf:04:4c:df:f9:43:
                    a5:2a:34:65:f2:cd:86:bd:f5:d4:7b:33:3c:ef:9d:
                    9d:41:b3:fd:32:60:6e:26:59:3f:cb:82:7e:ec:69:
                    08:ff:23:33:31:56:11:97:ae:26:f4:61:2a:75:d0:
                    6f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:29:37:4F:35:22:D4:BA:E4:C1:4B:C0:24:32:4E:2B:FD:13:5F:D1
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tyk3TzUi1LrkwUvAJDJOK_0TX9E.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.200.0/25

    Signature Algorithm: sha256WithRSAEncryption
         9b:42:fb:5d:97:f8:6b:d2:3c:15:5a:8f:1d:a5:10:b1:81:f0:
         d9:a4:83:7f:13:54:bc:76:03:06:ca:2a:28:33:aa:5f:68:92:
         a0:18:d5:1a:b7:d8:5b:97:cd:15:a4:f0:17:f2:02:7f:9d:ba:
         5d:8a:59:21:87:ac:20:32:2f:d9:c2:91:b0:b5:64:ed:83:08:
         17:bb:cc:bd:29:21:ba:04:eb:7c:5d:76:3a:53:60:0c:db:a6:
         ec:16:df:b0:50:dc:4d:8a:7a:dc:6a:e4:5b:61:91:7d:0c:09:
         6c:b0:91:9f:46:6e:30:ce:28:36:6a:c5:6a:d4:e2:df:96:3c:
         17:0d:53:a6:39:53:f7:01:ee:79:00:a8:10:c1:72:b3:d4:3d:
         10:de:74:01:b0:59:87:3d:4f:57:8e:2e:87:f5:8e:9a:29:57:
         25:f0:c4:7c:c0:6f:d0:59:5e:36:ad:68:12:b3:6c:bb:5e:94:
         c4:63:28:71:72:27:01:82:79:3c:b9:cb:29:b6:82:06:8c:6a:
         55:14:61:6a:03:33:f9:d5:04:3b:ad:50:1a:c4:15:da:5a:dc:
         bd:e3:9f:e3:17:28:db:08:e1:30:c5:e5:4d:a3:73:e3:e6:6f:
         41:b8:fe:20:78:f2:1b:0e:9e:53:94:38:19:97:5e:65:11:c8:
         45:44:59:0c
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgICKIUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx
MDA1MjZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEI3MjkzNzRGMzUyMkQ0
QkFFNEMxNEJDMDI0MzI0RTJCRkQxMzVGRDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCm6fuKHEVHoxWqlV63k0oeIV81TP2YdOzW+Hto1/4ChLAuCoS1
9ubu7vZwpDSep17kj4w4/2Ky75D3T6IGtQSTl17hNll2e67kLS3x6Sm1z7TWRDu7
SGepaH+GUFr3W5v9olTyWbWQPXBBeuYDYr2liAlk85HQ8Bx1BYdeBYZ90Eln1/Yp
10yM19TdAg+ioyLtowolF2rWgL+eFaQGw60TkUkhXtgrAUYAoxw+wkljUlUXSRJu
ucjpyowyE+ykb1I8fWfZZ9NgDUkNTs8ETN/5Q6UqNGXyzYa99dR7MzzvnZ1Bs/0y
YG4mWT/Lgn7saQj/IzMxVhGXrib0YSp10G+lAgMBAAGjggHvMIIB6zAdBgNVHQ4E
FgQUtyk3TzUi1LrkwUvAJDJOK/0TX9EwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3R5azNUelVpMUxya3dVdkFK
REpPS18wVFg5RS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQd2
6MgAMA0GCSqGSIb3DQEBCwUAA4IBAQCbQvtdl/hr0jwVWo8dpRCxgfDZpIN/E1S8
dgMGyiooM6pfaJKgGNUat9hbl80VpPAX8gJ/nbpdilkhh6wgMi/ZwpGwtWTtgwgX
u8y9KSG6BOt8XXY6U2AM26bsFt+wUNxNinrcauRbYZF9DAlssJGfRm4wzig2asVq
1OLfljwXDVOmOVP3Ae55AKgQwXKz1D0Q3nQBsFmHPU9Xji6H9Y6aKVcl8MR8wG/Q
WV42rWgSs2y7XpTEYyhxcicBgnk8ucsptoIGjGpVFGFqAzP51QQ7rVAaxBXaWty9
45/jFyjbCOEwxeVNo3Pj5m9BuP4gePIbDp5TlDgZl15lEchFRFkM
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:20 2024 by rpki-client on console-ams.rpki-client.org