Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/u-WwqHFabGvaOzjiMlGZmGUk9T0.roa
File:                     u-WwqHFabGvaOzjiMlGZmGUk9T0.roa (raw, json)
Hash identifier:          92H1clT8vRuZifuqn32fhkzTBX+a3ubM8ujpfGETBy8=
Subject key identifier:   BB:E5:B0:A8:71:5A:6C:6B:DA:3B:38:E2:32:51:99:98:65:24:F5:3D
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       2970
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/u-WwqHFabGvaOzjiMlGZmGUk9T0.roa
Signing time:             Fri 01 Sep 2023 10:06:36 +0000
ROA not before:           Fri 01 Sep 2023 10:06:36 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     38841
IP address blocks:        118.233.128.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10608 (0x2970)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep  1 10:06:36 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=BBE5B0A8715A6C6BDA3B38E2325199986524F53D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:7f:66:08:44:69:5f:b7:9d:d2:80:d5:a9:f1:
                    19:5b:64:be:d2:16:ff:8e:86:9b:56:ab:47:fb:4c:
                    24:54:15:d3:9a:f2:36:4d:ef:6e:b6:a8:9e:be:e1:
                    2c:98:4f:6f:95:9e:fa:29:14:77:e8:1f:c1:a8:5f:
                    40:b2:b6:55:8c:f1:77:f3:5d:31:df:f2:6d:33:35:
                    6e:30:15:2b:a1:4d:12:e2:95:5d:12:d7:a8:10:c0:
                    c9:61:14:8b:aa:ab:d6:35:24:fc:02:ab:05:3b:b2:
                    d5:a8:48:8d:ed:2f:ec:ca:e2:50:f2:42:e9:5d:c1:
                    90:2d:f9:84:0e:eb:6b:c3:30:e5:e3:87:80:e2:eb:
                    d6:57:c1:fc:1c:7d:13:d1:6f:34:6b:4f:14:c1:15:
                    46:89:e1:06:5a:26:77:0a:63:2e:81:e1:27:8f:f6:
                    bd:b9:07:aa:ad:f9:b5:1c:4d:9d:4e:1f:d6:df:a7:
                    46:3c:6e:67:1f:c6:08:d2:4e:e6:a1:d3:94:8e:7f:
                    26:4c:d8:f3:e1:2a:cf:0a:6f:16:4f:ad:03:cb:cb:
                    5b:f1:61:06:99:98:d7:70:a4:db:16:88:a1:c8:d9:
                    e3:e6:fc:77:4e:79:bb:76:b9:e0:b7:30:eb:c0:65:
                    78:0c:9e:07:2e:30:c9:e9:2d:d2:56:73:52:d3:4b:
                    98:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:E5:B0:A8:71:5A:6C:6B:DA:3B:38:E2:32:51:99:98:65:24:F5:3D
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/u-WwqHFabGvaOzjiMlGZmGUk9T0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.233.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:8c:0c:a2:c0:7e:84:99:fc:4d:17:23:22:38:9c:90:fb:58:
         dd:07:0a:0a:54:87:3f:1a:25:cd:b9:df:b1:03:fd:a2:89:2c:
         54:02:62:b0:c1:2b:e8:de:36:4f:f1:70:a8:85:ed:e6:a3:01:
         97:90:6c:81:75:10:67:3a:2e:8a:f9:02:a5:32:b9:1d:ee:27:
         e7:cf:6d:84:27:b0:cc:50:51:c7:ff:8f:3b:e7:ca:4e:28:62:
         c2:b9:8d:0b:59:2a:a5:e3:29:31:69:9a:c7:38:a2:d0:b2:90:
         24:5b:a7:1b:36:c4:aa:ce:ee:61:10:f7:32:51:2d:7f:1b:5c:
         0c:6f:53:13:eb:54:63:8c:60:e1:b9:c5:3a:57:90:04:77:12:
         77:59:b6:68:72:a8:8a:72:e5:52:9d:ae:2b:2b:23:2c:16:d8:
         ac:4f:c2:3b:df:75:cf:75:00:67:11:a3:5d:d7:f8:cc:a7:b6:
         9e:79:24:45:6e:27:af:35:27:6e:d4:d3:36:21:aa:36:2c:66:
         23:2c:00:93:5c:23:43:cf:d1:f6:84:ff:f9:dd:4a:c4:3d:55:
         6a:b1:1c:f4:99:1e:fc:bc:94:6f:cc:16:7e:65:a9:58:f3:42:
         cb:83:51:68:69:9c:93:b1:c9:92:d3:fd:34:b5:f0:e9:93:b9:
         8a:f8:e8:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:20 2024 by rpki-client on console-ams.rpki-client.org