Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/c_cX4hD2L88VVvvcnKLTQT2hqVI.roa
File:                     c_cX4hD2L88VVvvcnKLTQT2hqVI.roa (raw, json)
Hash identifier:          6oKWxS6vmA4qxq2beX2GMo32JEyMqxmK2YtVlto49iM=
Subject key identifier:   73:F7:17:E2:10:F6:2F:CF:15:56:FB:DC:9C:A2:D3:41:3D:A1:A9:52
Certificate issuer:       /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial:       10EB
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/c_cX4hD2L88VVvvcnKLTQT2hqVI.roa
Signing time:             Fri 30 Aug 2024 07:59:29 +0000
ROA not before:           Fri 30 Aug 2024 07:59:29 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     18049
IP address blocks:        218.34.128.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4331 (0x10eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
        Validity
            Not Before: Aug 30 07:59:29 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=73F717E210F62FCF1556FBDC9CA2D3413DA1A952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:be:82:40:e8:c8:07:91:81:11:fe:38:6e:1c:
                    86:e9:38:bb:07:0b:be:ae:bd:df:bd:1d:c8:16:ec:
                    ee:7d:49:20:5c:e4:12:13:f7:f1:b9:5d:60:67:48:
                    71:92:4c:d0:6b:cd:8f:bd:f0:95:98:ef:97:6a:95:
                    04:33:b2:51:d2:fc:ae:16:fa:58:c7:7d:07:80:16:
                    91:20:d6:e1:69:0c:8f:6c:15:17:20:de:c8:25:e0:
                    8d:b1:e5:f8:da:93:96:99:07:7c:dc:5f:77:fa:28:
                    fd:50:3b:c3:6b:40:67:98:f3:ca:3d:f6:86:37:2e:
                    dd:d0:f3:18:45:f2:42:e5:84:30:d0:12:ee:a1:bd:
                    3e:71:7f:1c:3e:b7:ff:bd:41:3c:4f:d1:66:32:06:
                    d4:be:8d:80:75:16:dc:f7:2e:67:d3:e2:9b:b7:03:
                    58:37:7e:0b:3d:30:b5:d2:62:fc:bd:8f:eb:87:af:
                    55:14:f9:eb:25:8d:7d:23:9a:f1:83:16:5c:a9:c6:
                    4f:be:26:26:9c:40:54:71:55:9d:66:ee:1c:40:dc:
                    bb:cb:25:af:00:77:94:f5:7f:93:b8:05:74:33:e1:
                    f8:cc:2d:09:49:b4:d2:fd:f1:1b:68:af:5d:e8:8f:
                    35:82:61:54:ad:d8:9f:fe:bc:65:3b:a3:90:71:80:
                    0f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:F7:17:E2:10:F6:2F:CF:15:56:FB:DC:9C:A2:D3:41:3D:A1:A9:52
            X509v3 Authority Key Identifier:
                keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/c_cX4hD2L88VVvvcnKLTQT2hqVI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.34.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         37:b5:6d:3f:7b:c4:3d:1b:79:c5:f5:07:95:5c:18:bc:5d:11:
         bc:de:7d:d2:96:e7:eb:e9:30:4e:b4:1f:83:88:d6:2a:87:0b:
         66:d3:38:ce:f3:05:89:fa:7f:3e:f3:97:20:58:ed:f4:9f:00:
         2a:1a:5a:45:fc:f0:de:fc:c8:72:29:aa:72:a7:d5:43:73:1b:
         67:be:7b:79:5e:e4:2d:c2:63:83:60:29:22:16:a4:70:41:c5:
         56:ec:e2:c2:1d:ed:1d:01:ba:e5:0b:4e:20:44:dc:c6:3d:f8:
         18:41:3d:cf:26:f0:0d:8b:f6:b9:6d:bf:a8:63:35:5b:14:15:
         d5:d8:3f:af:4a:8b:8a:95:6c:31:0c:5a:c3:2b:30:56:c3:b1:
         f9:d6:2f:c4:4e:97:28:4f:d2:5e:4b:94:89:a4:e5:5f:22:f3:
         8e:38:e3:e7:60:8c:ca:2a:8d:f1:52:c1:d8:90:e6:d9:14:0b:
         d5:ec:90:15:f6:33:59:23:ee:93:87:eb:ea:a7:19:ab:d2:f0:
         e5:34:a2:7b:31:99:a0:34:84:28:de:25:50:79:a6:05:17:08:
         1c:8f:7a:ef:fd:ee:35:1c:16:50:91:65:e1:97:c7:4d:7e:2f:
         7d:ec:3c:81:59:c7:d0:5a:cd:b4:c4:0f:2a:48:0b:04:b9:0f:
         73:d5:d1:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----