Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/w8ni4gRwklosltEN1u3x-zCVLwA.roa
File:                     w8ni4gRwklosltEN1u3x-zCVLwA.roa (raw, json)
Hash identifier:          4piNTnyrg7l2mgy+UqrKdwQWmuvbQKOhICCWpZAf6q0=
Subject key identifier:   C3:C9:E2:E2:04:70:92:5A:2C:96:D1:0D:D6:ED:F1:FB:30:95:2F:00
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       2B26
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/w8ni4gRwklosltEN1u3x-zCVLwA.roa
Signing time:             Fri 01 Sep 2023 10:09:54 +0000
ROA not before:           Fri 01 Sep 2023 10:09:54 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     38841
IP address blocks:        106.1.222.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11046 (0x2b26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep  1 10:09:54 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=C3C9E2E20470925A2C96D10DD6EDF1FB30952F00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:00:36:79:3a:e6:72:af:64:a1:04:94:4a:10:
                    66:fb:e0:56:93:50:be:d8:a1:66:36:9a:71:05:fc:
                    7b:3f:f0:c8:34:4e:ac:38:2e:70:c1:45:9a:8b:39:
                    af:7e:6d:93:1c:5f:a4:5e:77:0e:5b:11:48:c8:a7:
                    0f:0a:34:eb:da:ae:ca:55:1b:07:54:fa:59:11:7d:
                    4d:ad:c1:a5:bd:4b:14:08:2a:5e:ba:82:ce:35:84:
                    b5:b0:f8:39:70:c4:e6:4c:02:c8:82:ea:3f:66:04:
                    d4:ae:e8:f3:fd:34:a9:1c:80:b3:11:9b:09:7e:a5:
                    c5:71:54:9a:41:23:2f:ed:6d:34:38:d1:f0:9b:5f:
                    d8:e1:6d:61:7e:58:da:62:52:eb:16:80:a2:a8:09:
                    af:19:50:11:c5:5a:22:ef:dc:59:12:88:b7:4f:d9:
                    de:ed:0d:0d:0d:53:aa:50:a2:a0:98:7f:23:b8:66:
                    90:1d:8b:7a:75:81:6a:4b:6f:21:28:26:81:6d:57:
                    d3:ea:ca:ed:9c:e2:91:31:ef:f2:c9:70:98:65:81:
                    ae:be:16:ff:a3:3d:35:28:70:ac:e2:b5:23:40:65:
                    ff:50:c8:d3:a1:63:c0:55:52:11:1c:93:69:a2:31:
                    d6:88:c8:7d:18:a5:e4:76:a5:24:8c:65:7d:a6:4a:
                    1e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:C9:E2:E2:04:70:92:5A:2C:96:D1:0D:D6:ED:F1:FB:30:95:2F:00
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/w8ni4gRwklosltEN1u3x-zCVLwA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:55:e3:e8:b3:70:8e:84:32:d6:26:4a:31:84:05:5b:90:c4:
         12:cc:e3:43:2a:03:77:bf:2c:1c:3b:99:d4:02:5d:9f:40:82:
         df:de:e2:5a:d2:7b:e0:bf:05:fc:43:5d:24:ab:2c:03:f3:ee:
         63:58:ee:b6:53:60:c2:30:30:54:b3:57:b6:d5:12:97:8e:4b:
         d8:e6:61:9a:ae:80:de:1a:ad:f0:69:dd:d2:83:13:33:dd:ad:
         62:76:38:df:86:11:75:c8:1d:81:ed:a1:81:72:31:c4:01:81:
         69:ae:da:6b:a1:a4:53:e3:29:7a:fa:31:9c:a0:07:0b:80:5f:
         5a:37:8c:cb:0f:4d:51:30:e3:f5:12:b4:3e:9f:44:4d:2a:08:
         c4:05:ff:c5:a2:b5:8c:0e:f3:45:54:0b:d1:01:8a:8d:45:ed:
         5d:83:08:ce:9f:4f:a9:c8:a3:8d:b5:f2:22:3c:37:80:ab:85:
         db:6b:cb:fc:db:dc:70:c7:99:51:7a:f1:93:1c:d4:38:f7:ba:
         9d:4e:ec:95:e4:47:d1:d2:8a:c1:48:80:52:bd:85:8d:b6:61:
         a8:d3:79:71:25:9e:7f:08:1d:bf:cb:d5:ae:b0:1c:f5:d8:4d:
         d0:2d:73:35:5a:3a:4b:3c:03:58:a0:ba:42:64:b5:dc:8d:2c:
         12:c7:62:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:26 2024 by rpki-client on console-fra.rpki-client.org