Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yv86EIQg56_1e6FUZLh4HP8J1IY.roa
File:                     yv86EIQg56_1e6FUZLh4HP8J1IY.roa (raw, json)
Hash identifier:          CWjPJ9uHELv+xX9eEJeTCIjulCD5OWr4V6M+aqRNKDw=
Subject key identifier:   CA:FF:3A:10:84:20:E7:AF:F5:7B:A1:54:64:B8:78:1C:FF:09:D4:86
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       2AD8
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yv86EIQg56_1e6FUZLh4HP8J1IY.roa
Signing time:             Fri 01 Sep 2023 10:08:21 +0000
ROA not before:           Fri 01 Sep 2023 10:08:21 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     38841
IP address blocks:        123.193.219.192/26 maxlen: 26

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10968 (0x2ad8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep  1 10:08:21 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=CAFF3A108420E7AFF57BA15464B8781CFF09D486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0f:c1:f6:ed:c3:e3:5e:d7:73:c4:01:be:85:
                    30:74:08:47:b1:1b:b2:4c:ba:87:0a:ec:10:a2:bc:
                    e1:4d:ca:10:a6:aa:9e:cb:bf:43:d3:2c:d4:70:46:
                    3e:1d:20:f1:bb:4c:cc:01:f0:de:23:ad:17:7c:93:
                    04:87:e0:11:db:69:f3:9a:fe:ba:5d:3f:9c:eb:56:
                    d2:e5:2e:a4:5a:7e:41:3d:b2:a8:0b:bc:b3:4a:e0:
                    17:dc:e1:45:67:fa:3c:25:8e:3a:6f:f2:2c:d4:06:
                    ae:2f:1c:fb:5b:d1:48:96:22:b5:f8:7b:31:3e:88:
                    4c:ba:bb:97:11:99:a8:6a:90:d3:bc:1c:a0:88:53:
                    0d:a8:fe:04:28:05:3e:98:86:1e:72:0e:ad:22:b2:
                    c3:70:d7:1f:c2:b0:0b:97:a7:cc:0c:be:82:c0:cf:
                    5e:7d:ac:8f:89:fc:63:8d:13:f9:14:b1:c5:c6:ed:
                    2c:ae:e4:f1:b6:e3:25:c5:98:0e:d1:1c:f2:5b:59:
                    bf:03:aa:33:a7:85:7f:f6:24:d0:62:32:81:4b:ec:
                    dd:c4:90:21:df:a1:73:d6:b1:5b:38:49:ad:96:b9:
                    5d:46:9a:63:a1:28:75:5e:a6:f6:db:74:56:c8:f0:
                    af:70:9e:1b:c6:c1:be:06:47:eb:a9:d3:a7:dd:4b:
                    6d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:FF:3A:10:84:20:E7:AF:F5:7B:A1:54:64:B8:78:1C:FF:09:D4:86
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yv86EIQg56_1e6FUZLh4HP8J1IY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.219.192/26

    Signature Algorithm: sha256WithRSAEncryption
         05:78:51:3c:39:03:b8:46:08:78:fc:24:97:8f:a0:0d:80:1e:
         a5:db:76:99:53:84:17:67:39:80:ef:5b:5c:24:98:37:6c:fd:
         3e:76:4b:ff:bf:0f:61:a9:58:ec:32:80:7e:65:48:df:cc:5a:
         eb:19:7c:1b:f8:f7:f6:a4:34:cf:59:0f:cd:47:c5:b5:12:2c:
         7f:5a:67:cc:be:9a:9b:e6:a2:73:04:72:e9:a7:8d:8c:ce:c3:
         91:39:2c:19:a6:6f:74:f1:77:e7:40:2d:04:ab:44:63:24:ff:
         43:5d:10:c5:74:ed:d2:61:78:6a:88:91:38:de:34:42:7d:fe:
         89:02:8e:42:30:12:7f:2d:c5:18:0c:8d:f9:0a:69:85:51:4d:
         0d:9b:80:46:b3:85:c4:aa:19:fe:c7:e5:f3:27:6e:c6:34:b2:
         26:ca:1d:7e:b9:f1:ae:f7:b8:3e:ed:2b:7e:78:8b:83:94:47:
         f2:7e:48:4e:04:38:01:c4:c3:66:ff:bd:28:6b:c6:a3:94:20:
         0e:2b:26:e8:e8:1d:b2:56:10:5a:10:8b:1b:28:e4:4d:aa:c7:
         d3:b9:7a:c3:d0:dd:3c:df:7c:d5:52:69:48:9b:1e:2f:d4:f1:
         ad:02:6f:6d:45:e9:bd:83:aa:0a:86:13:89:33:88:b8:fc:74:
         f5:94:3e:20
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgICKtgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx
MDA4MjFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKENBRkYzQTEwODQyMEU3
QUZGNTdCQTE1NDY0Qjg3ODFDRkYwOUQ0ODYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCyD8H27cPjXtdzxAG+hTB0CEexG7JMuocK7BCivOFNyhCmqp7L
v0PTLNRwRj4dIPG7TMwB8N4jrRd8kwSH4BHbafOa/rpdP5zrVtLlLqRafkE9sqgL
vLNK4Bfc4UVn+jwljjpv8izUBq4vHPtb0UiWIrX4ezE+iEy6u5cRmahqkNO8HKCI
Uw2o/gQoBT6Yhh5yDq0issNw1x/CsAuXp8wMvoLAz159rI+J/GONE/kUscXG7Syu
5PG24yXFmA7RHPJbWb8DqjOnhX/2JNBiMoFL7N3EkCHfoXPWsVs4Sa2WuV1GmmOh
KHVepvbbdFbI8K9wnhvGwb4GR+up06fdS21BAgMBAAGjggHvMIIB6zAdBgNVHQ4E
FgQUyv86EIQg56/1e6FUZLh4HP8J1IYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3l2ODZFSVFnNTZfMWU2RlVa
TGg0SFA4SjFJWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQZ7
wdvAMA0GCSqGSIb3DQEBCwUAA4IBAQAFeFE8OQO4Rgh4/CSXj6ANgB6l23aZU4QX
ZzmA71tcJJg3bP0+dkv/vw9hqVjsMoB+ZUjfzFrrGXwb+Pf2pDTPWQ/NR8W1Eix/
WmfMvpqb5qJzBHLpp42MzsOROSwZpm908XfnQC0Eq0RjJP9DXRDFdO3SYXhqiJE4
3jRCff6JAo5CMBJ/LcUYDI35CmmFUU0Nm4BGs4XEqhn+x+XzJ27GNLImyh1+ufGu
97g+7St+eIuDlEfyfkhOBDgBxMNm/70oa8ajlCAOKybo6B2yVhBaEIsbKORNqsfT
uXrD0N0833zVUmlImx4v1PGtAm9tRem9g6oKhhOJM4i4/HT1lD4g
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:27 2024 by rpki-client on console-fra.rpki-client.org