Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/u82MgJSTBmrgYSMVR8bvZpHAfYM.roa
File:                     u82MgJSTBmrgYSMVR8bvZpHAfYM.roa (raw, json)
Hash identifier:          1qw6EIxxiHVGoeHkav+E8TQrZrVCyd1UXn5ch5QPpXc=
Subject key identifier:   BB:CD:8C:80:94:93:06:6A:E0:61:23:15:47:C6:EF:66:91:C0:7D:83
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       2ABF
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/u82MgJSTBmrgYSMVR8bvZpHAfYM.roa
Signing time:             Fri 01 Sep 2023 10:08:15 +0000
ROA not before:           Fri 01 Sep 2023 10:08:15 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     38841
IP address blocks:        180.177.128.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10943 (0x2abf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep  1 10:08:15 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=BBCD8C809493066AE061231547C6EF6691C07D83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:33:dd:53:a2:c3:07:cf:7a:9b:a0:e8:c2:5c:
                    a8:bd:3e:43:6a:6a:dd:af:06:ac:f8:f6:60:1f:b4:
                    cc:05:ae:04:5e:ca:4f:90:84:d2:01:eb:a3:88:d4:
                    02:ee:c8:79:d1:64:5f:fd:eb:cb:4a:bd:6c:3e:0d:
                    db:03:fb:22:39:67:29:66:3e:29:b9:38:e4:03:6d:
                    27:28:ca:26:fb:e9:13:d1:c8:d6:af:a4:e4:f2:d1:
                    82:af:50:56:d0:d1:f5:64:2a:dd:3b:dc:d2:a8:09:
                    44:a4:bb:8a:76:f8:75:f1:53:1a:0c:21:58:12:fb:
                    f1:13:4f:7f:a5:81:e9:57:6a:a6:04:11:17:3b:b1:
                    e8:5e:b2:e2:0c:85:74:1b:8f:0c:51:3a:c3:5e:2b:
                    77:a4:b8:c4:e3:8d:78:50:98:7a:bf:95:5b:5a:30:
                    3c:ac:4c:c5:b9:27:7a:1a:00:fa:c0:27:34:97:de:
                    ed:99:73:50:c3:cf:87:94:ab:f0:a5:2a:79:ff:08:
                    e6:2b:2b:7c:0c:ed:1d:2d:f7:12:7f:a5:34:ca:49:
                    73:e4:64:5c:44:18:1d:da:d9:1d:40:6d:e9:b0:1b:
                    61:86:5d:2d:68:e1:b5:8f:e2:fa:ef:76:63:65:70:
                    0a:bb:60:f0:d9:17:b3:ab:ca:fb:78:e6:23:a8:5f:
                    08:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:CD:8C:80:94:93:06:6A:E0:61:23:15:47:C6:EF:66:91:C0:7D:83
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/u82MgJSTBmrgYSMVR8bvZpHAfYM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:0a:d4:a4:4f:93:c2:db:7a:1e:9d:d9:fa:9e:11:82:5d:2e:
         31:7c:f5:97:33:a9:81:27:2d:15:99:34:2e:c6:72:67:1b:24:
         35:48:88:fc:4c:7c:a0:02:03:6d:4b:d0:ca:3c:c9:07:85:89:
         03:75:ec:50:4f:40:d0:f9:1a:5b:5e:ba:2d:b0:52:f5:4d:c1:
         cd:dd:cb:ac:6c:ed:22:bf:1a:d3:3b:fc:2b:23:a5:6f:c4:fb:
         ae:ff:b4:37:1e:19:b9:85:a2:42:b7:67:fc:6a:be:cb:3c:24:
         71:49:44:ec:7b:e0:fe:65:51:3b:df:25:47:f6:18:6c:a6:fc:
         89:de:a8:d6:eb:cc:4d:50:a0:f5:26:d9:c4:73:86:89:02:2c:
         3f:35:c9:7f:e4:a3:66:f1:9d:77:cb:91:9d:0e:55:1f:b2:c5:
         0f:d4:86:ae:fc:eb:0a:74:d0:77:35:be:88:fd:8f:be:35:23:
         28:33:ed:19:9d:33:fb:b6:15:cc:67:1c:0e:a7:34:3b:e4:dd:
         d6:42:96:ce:30:e9:43:95:58:8e:2c:7c:7f:47:db:c5:ea:ad:
         35:7c:cd:eb:8b:e0:4e:84:b3:ef:72:9f:06:b9:3a:8c:d2:33:
         6a:d7:80:3d:18:a3:00:68:c8:3c:56:39:55:ca:85:50:55:1f:
         10:5f:61:7b
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICKr8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx
MDA4MTVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEJCQ0Q4QzgwOTQ5MzA2
NkFFMDYxMjMxNTQ3QzZFRjY2OTFDMDdEODMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDKM91TosMHz3qboOjCXKi9PkNqat2vBqz49mAftMwFrgReyk+Q
hNIB66OI1ALuyHnRZF/968tKvWw+DdsD+yI5ZylmPim5OOQDbScoyib76RPRyNav
pOTy0YKvUFbQ0fVkKt073NKoCUSku4p2+HXxUxoMIVgS+/ETT3+lgelXaqYEERc7
sehesuIMhXQbjwxROsNeK3ekuMTjjXhQmHq/lVtaMDysTMW5J3oaAPrAJzSX3u2Z
c1DDz4eUq/ClKnn/COYrK3wM7R0t9xJ/pTTKSXPkZFxEGB3a2R1AbemwG2GGXS1o
4bWP4vrvdmNlcAq7YPDZF7Oryvt45iOoXwhBAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUu82MgJSTBmrgYSMVR8bvZpHAfYMwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3U4Mk1nSlNUQm1yZ1lTTVZS
OGJ2WnBIQWZZTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0
sYAwDQYJKoZIhvcNAQELBQADggEBAEsK1KRPk8Lbeh6d2fqeEYJdLjF89ZczqYEn
LRWZNC7GcmcbJDVIiPxMfKACA21L0Mo8yQeFiQN17FBPQND5Glteui2wUvVNwc3d
y6xs7SK/GtM7/CsjpW/E+67/tDceGbmFokK3Z/xqvss8JHFJROx74P5lUTvfJUf2
GGym/IneqNbrzE1QoPUm2cRzhokCLD81yX/ko2bxnXfLkZ0OVR+yxQ/Uhq786wp0
0Hc1voj9j741Iygz7RmdM/u2FcxnHA6nNDvk3dZCls4w6UOVWI4sfH9H28XqrTV8
zeuL4E6Es+9ynwa5OozSM2rXgD0YowBoyDxWOVXKhVBVHxBfYXs=
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:26 2024 by rpki-client on console-fra.rpki-client.org