Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wjwGwv9ndR6oRStMk6Sr2b2Gy-E.roa
File:                     wjwGwv9ndR6oRStMk6Sr2b2Gy-E.roa (raw, json)
Hash identifier:          7Ceui+Mi2/hhY+KM5zbGDJgtMM433wOhMmQ1C04kQao=
Subject key identifier:   C2:3C:06:C2:FF:67:75:1E:A8:45:2B:4C:93:A4:AB:D9:BD:86:CB:E1
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       2962
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wjwGwv9ndR6oRStMk6Sr2b2Gy-E.roa
Signing time:             Fri 01 Sep 2023 10:06:27 +0000
ROA not before:           Fri 01 Sep 2023 10:06:27 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     38841
IP address blocks:        123.194.188.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10594 (0x2962)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep  1 10:06:27 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=C23C06C2FF67751EA8452B4C93A4ABD9BD86CBE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ec:93:bc:bb:5b:5a:0b:0d:20:90:bf:3a:a4:
                    ff:07:5f:e9:d2:90:21:c8:80:95:c9:1b:11:d1:52:
                    c3:c6:a2:2b:80:13:46:63:a5:50:47:9a:0e:ce:ce:
                    e4:98:0e:d4:20:1b:99:ba:d2:f7:32:4a:51:65:78:
                    52:a2:ca:31:48:c2:f2:69:1c:67:a3:11:69:ac:77:
                    41:08:0c:82:23:af:a8:39:e4:9f:a9:f5:1f:0b:20:
                    f1:1f:2e:7b:5f:a3:2a:27:21:43:99:43:fb:c5:2b:
                    76:e3:94:9a:7e:cf:b3:47:63:91:a9:53:22:f1:0f:
                    75:07:67:bc:37:43:48:87:ca:3d:89:96:d5:72:34:
                    a1:1d:29:07:52:15:f2:e9:81:5b:7c:fe:de:fa:48:
                    e9:3e:7f:6c:b8:1f:72:a1:88:3a:8d:41:26:a0:83:
                    4f:9f:ab:47:16:f7:e5:d5:e9:3a:b4:88:61:10:7c:
                    2c:69:29:31:7d:25:f7:d6:e3:d2:b9:8e:ad:49:b1:
                    72:52:13:aa:cc:76:71:db:7c:99:75:fd:6b:b5:28:
                    ac:00:35:6e:30:d4:f8:a0:96:12:1b:44:58:e6:40:
                    27:0b:d6:d4:35:fc:77:b1:ba:b8:95:ad:1a:91:62:
                    a5:47:52:75:1a:6f:96:a3:8d:a5:38:3f:61:26:b2:
                    f3:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:3C:06:C2:FF:67:75:1E:A8:45:2B:4C:93:A4:AB:D9:BD:86:CB:E1
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wjwGwv9ndR6oRStMk6Sr2b2Gy-E.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         af:02:84:35:a3:cb:0c:21:c5:61:69:f1:11:aa:f2:f8:23:89:
         dd:33:80:ed:72:8f:42:5a:10:8d:19:a2:91:76:8e:8e:16:e3:
         da:fb:48:b6:91:b9:8b:5b:3c:e1:1e:a4:f1:a7:5f:3c:73:7d:
         98:94:ff:4b:04:12:1e:c6:df:89:9a:d1:74:a2:3c:42:76:2e:
         8e:01:dd:6f:2f:11:a4:44:77:87:dc:02:61:5f:ce:0e:37:bc:
         6f:08:c3:00:ef:42:79:7e:47:e2:66:6d:30:3c:1d:f4:a3:be:
         7c:43:12:cc:a1:4f:6d:76:7a:f6:97:5a:f6:09:ba:df:39:41:
         50:a9:56:68:0e:11:50:b2:83:3f:3b:59:e8:70:3f:4d:79:de:
         04:2c:ac:b7:15:91:9a:2e:7c:0f:0d:3b:8e:c6:78:b4:90:9c:
         54:cc:7d:97:40:f8:99:9b:0d:6c:1a:9a:c1:b8:66:86:d4:ec:
         30:83:a8:ad:9a:0a:62:b4:2c:86:d3:9d:68:83:7a:93:2c:83:
         d7:89:4d:31:59:bf:60:21:eb:9f:ce:30:55:0e:43:f8:81:ce:
         45:56:6f:71:46:89:65:d3:dd:7e:19:fa:80:10:3c:81:93:45:
         ba:af:8f:9f:d9:68:dc:71:38:f3:d2:e5:1b:d9:f8:be:eb:ff:
         99:7d:2e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:20 2024 by rpki-client on console-ams.rpki-client.org