Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wTQMdnRoAGSjVtf3bMmdJIQJuAY.roa
File:                     wTQMdnRoAGSjVtf3bMmdJIQJuAY.roa (raw, json)
Hash identifier:          V1w0mE+ivwiImTfiyZmZUIwnfwQwoCWDoxa7Ev+cXbk=
Subject key identifier:   C1:34:0C:76:74:68:00:64:A3:56:D7:F7:6C:C9:9D:24:84:09:B8:06
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       2AC7
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wTQMdnRoAGSjVtf3bMmdJIQJuAY.roa
Signing time:             Fri 01 Sep 2023 10:08:17 +0000
ROA not before:           Fri 01 Sep 2023 10:08:17 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     38841
IP address blocks:        123.195.8.64/26 maxlen: 26

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10951 (0x2ac7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep  1 10:08:17 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=C1340C7674680064A356D7F76CC99D248409B806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e9:01:8b:a7:5f:ff:fd:34:d1:60:00:d4:fa:
                    91:b2:03:c1:b8:ca:ba:82:56:00:e8:04:c9:f5:9d:
                    95:78:46:36:20:95:e9:8c:42:9a:6d:44:89:98:41:
                    2f:a4:22:eb:8f:bf:ed:a8:0c:25:d8:11:b1:89:e7:
                    25:88:e2:4e:3d:bb:29:d9:f7:81:46:c0:63:65:a7:
                    ca:4e:e2:db:8b:59:09:f1:47:10:40:19:37:6c:9f:
                    1c:ef:4e:7e:cb:6d:4b:0e:c3:3f:f5:6b:c3:7b:fc:
                    31:ab:9b:7f:59:9e:3c:aa:6a:99:e8:16:26:ba:97:
                    4e:82:1e:c1:26:48:28:9e:09:dc:6a:73:e8:8d:5c:
                    8f:d1:35:2c:8a:bb:22:04:8f:22:05:a2:6a:30:5c:
                    e6:93:a4:c8:bf:85:24:11:3c:87:7b:a2:5b:28:ac:
                    8d:f0:e1:96:bf:56:56:b0:42:1d:90:e2:51:0e:50:
                    c3:69:98:b4:43:09:91:50:ca:5c:13:9d:eb:26:dc:
                    86:9c:6b:05:9c:9f:bc:fc:b8:60:bd:4d:e4:a1:0e:
                    40:00:57:97:6d:63:d4:38:08:ff:71:53:58:09:3e:
                    ca:6c:d1:10:e0:9e:9e:c2:a7:6e:78:3c:b4:eb:26:
                    dc:48:4e:02:a5:c2:e2:62:6d:3a:8e:a4:ce:71:c9:
                    d9:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:34:0C:76:74:68:00:64:A3:56:D7:F7:6C:C9:9D:24:84:09:B8:06
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wTQMdnRoAGSjVtf3bMmdJIQJuAY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.8.64/26

    Signature Algorithm: sha256WithRSAEncryption
         67:fa:cb:fe:58:30:40:3a:90:3d:f9:bb:b1:cb:f3:67:d2:cb:
         0f:be:09:d3:8b:05:e2:e2:31:7c:b8:72:70:0d:cb:f6:63:a7:
         ce:a2:e4:8f:ff:9b:d6:8b:4e:1a:90:aa:91:21:b2:eb:32:59:
         b4:0a:1d:46:76:7f:a2:28:0e:c7:c5:1b:20:39:ce:99:ee:db:
         b0:41:9a:8e:61:f4:7b:ab:d5:e0:6b:a5:11:b5:2b:f3:87:6d:
         10:57:11:a2:54:7e:ca:01:c9:d1:42:6c:78:be:0c:b9:3c:f9:
         e0:44:0e:bd:d9:77:65:f1:f2:d3:e2:1f:f1:38:98:d5:9d:7f:
         bd:d8:51:66:f5:af:1d:a9:a5:c5:e6:e4:12:b7:e5:d2:0a:f5:
         7f:6c:ea:65:43:a7:64:eb:9e:db:4b:f6:ae:4f:4a:68:a1:96:
         2a:96:44:58:db:ad:d7:d2:c4:d2:15:d9:87:9f:bc:cd:45:10:
         0b:be:ab:50:3c:03:7a:8e:14:ab:78:a5:7c:3c:91:86:52:9f:
         72:61:37:54:03:f7:44:13:3e:02:21:3d:26:42:d4:ea:5c:f1:
         38:7f:b8:55:d4:a5:69:fb:ac:79:30:8e:75:1c:41:d8:fe:43:
         97:08:bd:99:7a:23:79:dd:0f:20:b9:36:1d:9f:94:45:da:81:
         8c:37:cc:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:20 2024 by rpki-client on console-ams.rpki-client.org