Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vGzxjuSp6zAdlkGbQvjkoARarxw.roa
File:                     vGzxjuSp6zAdlkGbQvjkoARarxw.roa (raw, json)
Hash identifier:          8Rlm8nGyt28t/V8DG42OtTLPofIWlRoSmrQIKzn9c8A=
Subject key identifier:   BC:6C:F1:8E:E4:A9:EB:30:1D:96:41:9B:42:F8:E4:A0:04:5A:AF:1C
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       29EF
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vGzxjuSp6zAdlkGbQvjkoARarxw.roa
Signing time:             Fri 01 Sep 2023 10:07:17 +0000
ROA not before:           Fri 01 Sep 2023 10:07:17 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     38841
IP address blocks:        123.194.128.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10735 (0x29ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep  1 10:07:17 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=BC6CF18EE4A9EB301D96419B42F8E4A0045AAF1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:73:86:d1:df:30:3d:8c:c1:84:30:8c:aa:f1:
                    09:34:3a:90:19:ed:2c:f5:57:ee:84:60:5a:86:29:
                    f5:28:98:92:f8:e3:02:85:c3:ea:6c:b7:8c:04:7e:
                    ae:81:db:6a:de:97:17:cf:bd:c4:88:53:b5:6f:ea:
                    e6:40:86:76:f9:17:2c:a3:85:08:67:6f:e9:d5:22:
                    b2:94:68:66:2e:11:0b:5c:15:60:44:12:bf:5d:94:
                    d8:0d:ae:77:58:a5:8a:55:85:6e:55:22:39:87:49:
                    ab:37:88:b6:30:a6:52:89:1a:09:b3:13:70:b0:ab:
                    24:22:27:85:5c:ba:b4:ba:4b:c8:04:98:28:91:15:
                    1e:2d:ce:dd:75:50:b8:3e:1e:e7:88:ad:40:28:ed:
                    4a:f3:a9:64:3b:67:61:1a:24:4c:ff:f1:6d:33:39:
                    aa:d5:34:42:b3:e4:b0:2d:91:7e:75:67:63:d0:3f:
                    6f:56:01:2f:6c:18:c5:96:bd:71:e6:b4:14:72:bd:
                    40:d2:3a:4c:ac:57:35:68:38:0f:b1:40:59:83:f8:
                    67:1b:ee:66:50:c6:5a:7e:90:11:72:5e:04:78:5d:
                    cb:b7:69:ad:c2:fa:7e:52:b2:b2:4d:6f:6d:8c:0f:
                    cf:59:98:fd:45:b7:4a:0e:90:a1:11:90:95:99:4b:
                    33:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:6C:F1:8E:E4:A9:EB:30:1D:96:41:9B:42:F8:E4:A0:04:5A:AF:1C
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vGzxjuSp6zAdlkGbQvjkoARarxw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b3:fe:c8:13:cb:58:a8:e0:f6:ee:74:d9:49:bd:f4:cd:55:34:
         58:7b:a5:1c:72:c4:4f:2b:8f:72:1e:78:1b:b6:28:10:2b:08:
         f4:4e:95:cf:f0:85:f9:79:24:1c:ac:3e:3f:7b:e2:75:00:39:
         2c:a3:3b:f2:d4:9a:30:fe:3c:9b:c2:98:19:66:cb:0b:1f:2c:
         1d:56:b7:fd:f5:18:46:e6:25:33:d2:ea:82:ab:e9:c4:4d:92:
         e8:c4:66:1d:ba:d2:e4:2d:1a:fd:a4:6b:83:0d:de:60:5e:16:
         c2:ad:0f:cf:40:50:3b:75:20:b8:b1:9a:ea:45:05:53:c4:c1:
         b7:0e:ae:a9:ce:dc:a6:45:fa:dc:c6:c3:4c:af:c9:c0:03:83:
         52:b4:76:13:f0:8e:a6:4a:f9:19:5a:f9:7e:58:d0:53:92:4a:
         8c:16:a6:fc:c4:e8:7b:13:d5:f8:5e:fa:4d:59:9d:b0:45:c1:
         29:82:6e:fc:0c:6a:74:df:dd:27:90:9f:71:1d:95:4e:cb:39:
         11:03:06:a1:00:8c:73:05:14:64:a1:d6:07:60:6c:50:0b:c0:
         e1:8e:be:47:88:a8:ac:b0:2c:10:42:9d:40:df:42:ce:9b:b8:
         62:ea:34:0d:39:97:fc:04:41:c9:f2:61:f7:2c:f6:b8:e8:8b:
         7b:24:6f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:20 2024 by rpki-client on console-ams.rpki-client.org