Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wSRc5lsd3wPMyEBgBj2_zCmkVQE.roa
File:                     wSRc5lsd3wPMyEBgBj2_zCmkVQE.roa (raw, json)
Hash identifier:          G+0MPMBUTMspIWmKKL2+xvmna/p96ox3ujGd1aR46Ks=
Subject key identifier:   C1:24:5C:E6:5B:1D:DF:03:CC:C8:40:60:06:3D:BF:CC:29:A4:55:01
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       2A73
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wSRc5lsd3wPMyEBgBj2_zCmkVQE.roa
Signing time:             Fri 01 Sep 2023 10:07:55 +0000
ROA not before:           Fri 01 Sep 2023 10:07:55 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     9924
IP address blocks:        180.176.0.0/15 maxlen: 15

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10867 (0x2a73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep  1 10:07:55 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=C1245CE65B1DDF03CCC84060063DBFCC29A45501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:1a:56:5d:6a:19:f6:a8:a3:e0:cd:76:f2:bc:
                    1f:3d:91:ff:18:e9:a0:76:d8:8b:3a:99:dd:bc:63:
                    76:a4:7e:55:9e:69:ad:ef:c8:77:13:51:7f:1b:5a:
                    5a:58:9c:bd:4f:0d:ee:38:5e:e8:86:1c:9a:c8:db:
                    eb:b9:aa:b5:d5:b9:86:11:54:05:fa:f7:4b:d4:f2:
                    2b:b3:50:41:c2:97:d4:e5:44:7b:c1:90:86:b8:b6:
                    d0:d8:dd:25:1f:7b:80:49:eb:cf:d5:30:7e:c8:03:
                    21:fc:0e:b6:a3:55:36:16:0a:39:10:27:ed:ee:af:
                    73:9e:0d:9f:8c:53:8c:89:a9:b0:47:83:b4:5c:a7:
                    a2:99:31:e3:43:bb:6c:b5:1a:c6:aa:91:fd:94:ad:
                    d3:53:45:43:0d:00:a2:da:c5:8c:9a:04:4f:dc:e1:
                    4e:b1:f6:b9:56:77:73:5e:0e:40:dd:68:11:92:97:
                    02:3c:90:a3:d4:e4:bc:63:65:94:1c:4a:e0:90:8e:
                    f2:e4:ff:6f:fb:06:5c:b7:af:2c:31:77:d3:8e:f3:
                    07:5e:fc:1c:fe:af:3c:ea:12:bc:c8:4f:d2:96:61:
                    a9:e9:43:ee:7c:21:ac:c6:1f:9d:48:3c:96:0b:da:
                    41:d1:cd:e1:dd:0f:b3:50:71:59:c6:e5:4a:d5:24:
                    2c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:24:5C:E6:5B:1D:DF:03:CC:C8:40:60:06:3D:BF:CC:29:A4:55:01
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wSRc5lsd3wPMyEBgBj2_zCmkVQE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         1e:df:ce:8c:af:ea:65:03:53:fd:3a:2a:33:cd:d2:dd:9d:75:
         4d:eb:d5:64:7d:87:59:3a:6a:ea:0a:4b:d9:73:fd:20:c7:b9:
         32:33:70:c7:dd:11:6a:74:51:0a:7f:f4:98:a1:29:0c:23:b5:
         db:0d:49:8a:91:34:b0:c2:d7:91:e5:b6:c0:64:b0:07:fb:b1:
         a3:53:a1:89:ab:24:5c:ed:30:2d:2c:0e:e7:ee:4d:bd:08:9f:
         73:0d:69:1b:e9:2b:a1:13:e1:9f:2a:0b:2b:7f:90:01:10:98:
         d5:45:96:4a:ef:c8:a0:82:a9:18:ef:79:af:ee:d2:65:51:3d:
         d7:a8:73:3c:56:e8:7a:05:7f:d7:58:2f:bc:a3:98:8e:c4:33:
         8f:12:9d:6f:ac:38:45:70:de:1d:7a:34:c6:3b:c1:ff:9d:83:
         29:9c:e8:24:65:bb:1d:99:3d:b4:04:64:54:dd:9e:2f:06:14:
         d5:6a:ca:9c:11:cf:dd:b4:86:ba:40:6c:ad:c7:f6:0a:c0:c9:
         76:99:be:14:01:2f:ea:50:2f:3f:5a:67:61:4d:1d:ec:4a:10:
         ff:4c:ce:e5:86:05:82:32:2f:2e:76:b2:95:67:ce:0d:74:9b:
         30:8e:22:c6:77:0e:c0:30:01:54:cb:14:0c:cb:f2:80:4b:bd:
         f7:4c:c4:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:20 2024 by rpki-client on console-ams.rpki-client.org