Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/v8bqcHTFhNfXcGOzUZJUGPZVve8.roa
File:                     v8bqcHTFhNfXcGOzUZJUGPZVve8.roa (raw, json)
Hash identifier:          i3gnZxlgu16xKehOm6TXM4qWjF4MhprDg/ysdS0HVp0=
Subject key identifier:   BF:C6:EA:70:74:C5:84:D7:D7:70:63:B3:51:92:54:18:F6:55:BD:EF
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       2853
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/v8bqcHTFhNfXcGOzUZJUGPZVve8.roa
Signing time:             Fri 01 Sep 2023 10:05:13 +0000
ROA not before:           Fri 01 Sep 2023 10:05:13 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     38841
IP address blocks:        180.176.48.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10323 (0x2853)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep  1 10:05:13 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=BFC6EA7074C584D7D77063B351925418F655BDEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:11:42:cd:fd:29:be:e4:7f:38:ec:fc:ba:e4:
                    13:78:7d:ba:64:79:6b:34:d8:ad:29:5d:b8:d8:3a:
                    a6:c9:98:db:00:82:08:75:5a:b4:e2:bd:aa:5b:cf:
                    42:52:95:04:95:ae:0b:0e:21:1e:3f:ff:a4:60:80:
                    a0:60:96:1a:2d:ef:84:4b:ca:7f:14:b6:74:a7:9c:
                    1a:91:b7:ef:4e:d6:7f:ce:4e:ab:df:d7:8c:dd:16:
                    03:08:05:51:a3:d2:6b:c2:db:80:5e:71:51:d1:a3:
                    84:d7:c6:74:e5:78:eb:21:9b:34:30:f9:43:11:58:
                    d4:87:94:ca:91:87:ce:bb:6f:e3:55:b7:7f:8f:d8:
                    fe:63:e2:e1:08:ea:d1:bd:7d:56:2d:3f:9f:78:c7:
                    4a:9f:4e:ca:dd:cb:e5:0b:fb:6a:50:44:03:e6:43:
                    26:75:b9:c0:d8:62:18:c7:14:6e:8b:4c:3c:c6:03:
                    f6:09:f5:61:f8:59:b4:92:27:8c:d8:67:5f:47:8d:
                    a9:d3:9a:f3:4f:28:62:5e:fc:c1:0b:ef:c4:76:ad:
                    00:b0:42:da:d5:25:d6:39:74:54:79:d8:3c:2e:da:
                    5f:db:c0:12:bd:19:73:93:5f:47:49:1c:91:53:31:
                    98:af:cf:15:f3:26:4a:f6:92:5f:8f:db:f0:6e:df:
                    3e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:C6:EA:70:74:C5:84:D7:D7:70:63:B3:51:92:54:18:F6:55:BD:EF
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/v8bqcHTFhNfXcGOzUZJUGPZVve8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         58:2c:40:9f:ba:ed:9b:76:21:89:5d:6b:83:54:57:a1:db:d7:
         d9:38:d5:fe:1f:64:d1:da:f5:26:ec:74:c5:3e:f9:00:50:ee:
         cd:90:19:1a:3e:d0:e0:3b:dc:47:1f:b1:bb:18:48:b9:8d:bd:
         3f:3c:82:a5:37:73:a7:52:f5:22:8a:e0:d4:e5:14:36:74:49:
         d7:08:a7:47:9e:30:f5:c5:6c:2b:96:d3:c9:bb:e8:d6:93:9e:
         d3:8d:05:db:07:e9:62:9d:47:11:a7:19:85:77:ae:72:17:44:
         70:90:41:7f:ad:e8:a4:0e:ad:9e:33:2c:5c:f3:78:51:f9:0c:
         58:2f:5b:4a:9a:45:48:c9:a9:4b:eb:8d:6b:24:56:28:e5:ba:
         78:c1:20:88:d9:1f:e4:53:ae:f4:a7:9c:9b:5f:5e:a8:32:6f:
         d6:8e:02:75:22:1e:d3:d5:c2:9b:04:5a:e6:3b:34:63:3a:b9:
         4f:0a:5a:10:31:36:d2:4b:0b:55:2f:f5:0d:af:d3:c9:46:bb:
         29:c2:75:d2:bf:07:ed:fe:29:f9:4d:c8:40:3b:40:33:de:cb:
         7b:d7:c5:6c:4b:4b:4e:a0:04:64:09:52:9e:b6:06:05:f2:ad:
         21:7f:cd:96:6d:c6:e2:d4:22:20:46:ed:10:c6:5b:71:83:68:
         86:88:7c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:20 2024 by rpki-client on console-ams.rpki-client.org