Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zQeJ-qrIgd1ddmNGGS-07A-L5eA.roa
File:                     zQeJ-qrIgd1ddmNGGS-07A-L5eA.roa (raw, json)
Hash identifier:          fSkC0r4TRCOz2AgbN6bvwMRUPf92pPE4ATMAQZZabn8=
Subject key identifier:   CD:07:89:FA:AA:C8:81:DD:5D:76:63:46:19:2F:B4:EC:0F:8B:E5:E0
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       2804
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zQeJ-qrIgd1ddmNGGS-07A-L5eA.roa
Signing time:             Fri 01 Sep 2023 10:04:50 +0000
ROA not before:           Fri 01 Sep 2023 10:04:50 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     38841
IP address blocks:        106.1.106.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10244 (0x2804)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep  1 10:04:50 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=CD0789FAAAC881DD5D766346192FB4EC0F8BE5E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7d:21:28:11:21:27:4a:b6:37:f8:94:ee:25:
                    e6:3f:36:8e:60:a8:74:64:af:96:09:77:26:9f:92:
                    23:cc:ba:76:28:b6:a3:0a:51:10:c8:4b:b9:8a:7b:
                    8a:9e:2c:ad:bc:a3:c9:ca:3e:23:02:fe:f7:b3:19:
                    0a:06:34:06:44:fe:18:0c:5c:1c:fb:1f:06:f4:6b:
                    78:8d:c9:19:f3:a5:90:09:79:99:b9:d7:76:64:73:
                    b7:47:d2:39:11:a0:97:4f:c8:07:be:6e:53:83:ba:
                    9d:1f:46:6f:ab:ad:67:47:1c:cb:b3:fa:91:4a:fa:
                    53:b6:d1:38:b4:bf:67:52:38:d7:87:c7:63:1e:74:
                    81:4b:cf:79:03:e6:c0:af:85:44:97:75:41:4b:d0:
                    89:ac:04:08:95:b6:fe:88:21:1e:4a:59:76:f3:2a:
                    21:d2:40:91:99:2d:ae:2f:9d:7a:63:92:e8:2e:fd:
                    6f:13:e5:1b:dc:be:95:e7:13:bb:18:e2:b8:2c:cb:
                    52:25:f1:81:ae:bd:b8:a9:23:f2:95:fc:ac:12:83:
                    34:46:66:b8:d0:6c:1b:13:bf:7c:e2:51:d3:ae:92:
                    0c:63:25:59:41:41:ae:4f:b5:c4:e1:61:fc:91:bc:
                    fb:69:33:1f:d1:e2:89:d3:33:52:49:ec:ad:e0:cb:
                    ef:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:07:89:FA:AA:C8:81:DD:5D:76:63:46:19:2F:B4:EC:0F:8B:E5:E0
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zQeJ-qrIgd1ddmNGGS-07A-L5eA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b3:04:91:ad:16:02:11:57:ca:e6:6c:a1:9e:3d:be:5a:5d:c8:
         5c:c5:a7:d2:a1:1b:04:25:97:79:94:9d:c9:7b:5e:34:9e:02:
         36:ab:e2:3a:e5:95:c2:3f:f0:dd:b9:02:9d:f2:8a:e5:23:86:
         0f:3a:6c:f5:47:1e:05:33:59:4a:5c:e3:e1:e4:a6:9c:80:1d:
         22:b6:25:55:45:72:f9:ea:6e:a9:cb:7b:e7:c3:63:56:99:ed:
         44:86:e6:d3:a0:60:de:2f:a3:a9:ff:2b:a4:89:80:98:07:67:
         36:22:44:88:2e:59:bd:80:cc:52:5e:8d:1a:b9:c5:a4:bf:22:
         9d:c9:a0:ba:17:ef:80:f9:45:e3:0a:35:44:5a:56:07:63:d4:
         85:b3:d3:f7:7c:53:6b:d4:44:14:bf:be:64:09:13:d5:bb:b1:
         40:08:10:9c:3d:76:2e:df:13:57:3c:82:df:75:7b:4a:8b:0f:
         41:91:b2:c1:2e:0c:6e:00:b2:ee:76:29:64:97:e8:d1:ca:a3:
         78:fc:08:f2:0d:a7:5b:22:bc:1f:5f:4c:88:ab:40:ab:f3:86:
         da:ff:a4:33:32:1a:ea:c4:c2:2b:05:00:9a:32:eb:5d:0b:2a:
         f9:ed:97:cb:b0:a7:88:cc:d8:1a:5a:06:3b:f6:b1:77:2f:dd:
         ac:9a:01:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:20 2024 by rpki-client on console-ams.rpki-client.org