Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/w5bUgInlwdLALu5NgFZ_Zb-TUps.roa
File:                     w5bUgInlwdLALu5NgFZ_Zb-TUps.roa (raw, json)
Hash identifier:          SnaMZurtdLoG6H5imsPI/Sr1WjO5P3EdusJQPOcx5XA=
Subject key identifier:   C3:96:D4:80:89:E5:C1:D2:C0:2E:EE:4D:80:56:7F:65:BF:93:52:9B
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       2B28
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/w5bUgInlwdLALu5NgFZ_Zb-TUps.roa
Signing time:             Fri 01 Sep 2023 10:09:55 +0000
ROA not before:           Fri 01 Sep 2023 10:09:55 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     38841
IP address blocks:        123.194.176.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11048 (0x2b28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep  1 10:09:55 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=C396D48089E5C1D2C02EEE4D80567F65BF93529B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b2:aa:8a:f8:e8:7f:1b:4e:70:ed:7e:32:09:
                    18:98:f3:08:ec:49:f4:31:52:d3:da:74:54:a5:8b:
                    67:d3:4c:f6:22:0c:ea:1d:3a:6a:58:ff:5f:04:0b:
                    15:b6:4b:c5:57:a4:c1:e5:73:5c:a1:af:25:e1:1c:
                    d2:74:be:c3:27:df:e4:f6:10:e0:29:16:4f:8f:be:
                    41:fd:40:55:61:42:45:34:d0:4b:71:54:47:70:45:
                    a0:a7:57:97:fe:3a:49:ce:73:91:3f:d9:ca:88:0c:
                    98:28:06:0e:fc:3a:83:f1:b8:ae:84:fc:6b:69:d2:
                    37:20:97:7d:62:7e:00:68:b1:c1:ad:f0:e7:7d:b5:
                    5a:66:27:da:c7:58:82:e9:36:4a:1d:ec:6c:99:23:
                    91:23:08:c9:7b:ea:c5:2d:c4:01:55:5d:ab:e5:1e:
                    7c:eb:d7:cc:62:11:08:bc:ec:1c:23:56:7a:e2:4b:
                    16:a9:ad:ca:4c:ef:4a:77:f0:21:56:a6:c3:c1:3e:
                    f1:7b:2d:8c:a8:5a:36:c1:34:39:27:ad:e4:5a:ad:
                    df:42:2b:32:2b:bf:02:1c:0f:f5:f2:98:cc:ef:8e:
                    ea:06:b8:47:f3:64:6a:e1:86:51:f5:ef:4a:75:b7:
                    00:e8:d5:0e:eb:22:49:2b:db:62:08:d2:61:67:35:
                    c6:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:96:D4:80:89:E5:C1:D2:C0:2E:EE:4D:80:56:7F:65:BF:93:52:9B
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/w5bUgInlwdLALu5NgFZ_Zb-TUps.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ba:f3:ac:b7:6f:ba:39:0d:3e:87:4e:44:6d:5a:20:15:e7:01:
         d2:6f:34:36:d2:4c:33:3b:d0:69:03:e1:91:76:ad:60:31:ff:
         af:48:95:21:b0:a9:84:ef:8d:6c:db:79:51:81:47:c9:8e:84:
         91:3e:77:cd:a8:3e:4e:68:eb:7a:19:78:d7:ed:ef:30:e1:06:
         33:4d:39:44:68:32:23:8f:39:f9:63:8a:c7:3e:b9:15:4b:17:
         43:84:8e:0f:43:73:52:f4:59:b2:81:59:d4:36:5f:fa:05:97:
         f1:63:bb:c1:5b:24:92:ac:93:59:e3:20:16:d6:8e:a7:8f:a0:
         51:62:93:ef:ed:18:25:37:1d:01:a0:e0:2f:8f:02:c8:f6:d7:
         cb:9a:f2:0b:cf:e1:f8:4f:f3:d9:d9:29:bd:d5:2c:48:bc:81:
         08:66:b7:29:4d:ea:b7:40:8b:a7:cb:fa:59:23:60:83:6a:02:
         18:cd:f7:f0:e1:1f:b3:be:30:eb:b9:61:06:d4:51:04:c2:c4:
         fd:7f:5f:23:6a:15:ee:be:14:c4:8e:de:e4:8a:9b:98:f9:9b:
         e3:24:50:1f:47:06:e8:d9:ce:c7:57:e5:39:f4:12:01:6c:f4:
         f1:7d:b9:e1:3e:eb:d3:20:1e:a7:d4:20:02:09:6a:f1:d1:db:
         2d:bb:ea:e2
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICKygwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx
MDA5NTVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEMzOTZENDgwODlFNUMx
RDJDMDJFRUU0RDgwNTY3RjY1QkY5MzUyOUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCqsqqK+Oh/G05w7X4yCRiY8wjsSfQxUtPadFSli2fTTPYiDOod
OmpY/18ECxW2S8VXpMHlc1yhryXhHNJ0vsMn3+T2EOApFk+PvkH9QFVhQkU00Etx
VEdwRaCnV5f+OknOc5E/2cqIDJgoBg78OoPxuK6E/Gtp0jcgl31ifgBoscGt8Od9
tVpmJ9rHWILpNkod7GyZI5EjCMl76sUtxAFVXavlHnzr18xiEQi87BwjVnriSxap
rcpM70p38CFWpsPBPvF7LYyoWjbBNDknreRard9CKzIrvwIcD/XymMzvjuoGuEfz
ZGrhhlH170p1twDo1Q7rIkkr22II0mFnNcZdAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUw5bUgInlwdLALu5NgFZ/Zb+TUpswHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3c1YlVnSW5sd2RMQUx1NU5n
RlpfWmItVFVwcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
wrAwDQYJKoZIhvcNAQELBQADggEBALrzrLdvujkNPodORG1aIBXnAdJvNDbSTDM7
0GkD4ZF2rWAx/69IlSGwqYTvjWzbeVGBR8mOhJE+d82oPk5o63oZeNft7zDhBjNN
OURoMiOPOfljisc+uRVLF0OEjg9Dc1L0WbKBWdQ2X/oFl/Fju8FbJJKsk1njIBbW
jqePoFFik+/tGCU3HQGg4C+PAsj218ua8gvP4fhP89nZKb3VLEi8gQhmtylN6rdA
i6fL+lkjYINqAhjN9/DhH7O+MOu5YQbUUQTCxP1/XyNqFe6+FMSO3uSKm5j5m+Mk
UB9HBujZzsdX5Tn0EgFs9PF9ueE+69MgHqfUIAIJavHR2y276uI=
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:20 2024 by rpki-client on console-ams.rpki-client.org