Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/LILIANG/HWUosQLlorbrA9CfK9juGyDm8uA.roa
File:                     HWUosQLlorbrA9CfK9juGyDm8uA.roa (raw, json)
Hash identifier:          I/NafIN0X6nL0pD71D6XI3tBcAyXmLbXZNdiU7bWBgw=
Subject key identifier:   1D:65:28:B1:02:E5:A2:B6:EB:03:D0:9F:2B:D8:EE:1B:20:E6:F2:E0
Certificate issuer:       /CN=FBE0E2FD417A37B1B56BB37DA16834229A399256
Certificate serial:       05
Authority key identifier: FB:E0:E2:FD:41:7A:37:B1:B5:6B:B3:7D:A1:68:34:22:9A:39:92:56
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/--Di_UF6N7G1a7N9oWg0Ipo5klY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/LILIANG/HWUosQLlorbrA9CfK9juGyDm8uA.roa
Signing time:             Fri 08 Sep 2023 12:07:46 +0000
ROA not before:           Fri 08 Sep 2023 12:07:46 +0000
ROA not after:            Thu 05 Sep 2024 08:24:24 +0000
asID:                     131642
IP address blocks:        2401:3060::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBE0E2FD417A37B1B56BB37DA16834229A399256
        Validity
            Not Before: Sep  8 12:07:46 2023 GMT
            Not After : Sep  5 08:24:24 2024 GMT
        Subject: CN=1D6528B102E5A2B6EB03D09F2BD8EE1B20E6F2E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:61:d0:c5:5f:0f:da:82:5d:56:3b:de:56:bf:
                    81:46:56:c3:ed:10:de:1c:b2:cd:48:d3:fe:6b:26:
                    b4:db:e6:43:22:61:74:22:65:e8:70:1f:00:05:93:
                    6d:48:6d:86:79:6d:38:00:a3:df:e3:49:ad:e3:46:
                    a9:0d:97:94:be:76:37:b7:11:80:a5:64:a4:b4:30:
                    06:ad:e9:2c:cc:8d:2e:91:3e:7d:c5:5b:d2:20:55:
                    82:04:b6:f4:74:af:b1:4f:ba:e5:39:1e:c4:ae:83:
                    4e:c6:06:8a:57:49:5d:c7:a3:c7:c2:73:5a:17:aa:
                    cd:93:64:0c:e8:45:e2:69:34:f4:6e:21:39:d9:7a:
                    73:71:61:03:6d:19:30:af:3f:1c:dc:fc:9c:3a:1b:
                    8a:a8:ae:7b:2c:2b:ac:35:d5:64:59:56:82:fb:23:
                    31:38:ca:c4:89:0e:12:4c:e2:5c:8b:4a:7d:ea:7b:
                    90:e2:97:e3:c9:d0:20:d5:b3:3e:60:6e:87:f8:83:
                    47:ec:b2:82:a4:e9:ee:f0:3d:70:b5:64:b5:72:cf:
                    81:20:4f:4b:7d:39:36:57:ff:49:03:ff:f1:16:e6:
                    aa:1a:db:1b:53:05:dd:81:fb:11:1d:62:16:a5:3a:
                    1c:f8:01:6b:6c:7c:a7:51:f2:5d:6d:41:ec:7f:8d:
                    c7:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:65:28:B1:02:E5:A2:B6:EB:03:D0:9F:2B:D8:EE:1B:20:E6:F2:E0
            X509v3 Authority Key Identifier:
                keyid:FB:E0:E2:FD:41:7A:37:B1:B5:6B:B3:7D:A1:68:34:22:9A:39:92:56

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LILIANG/--Di_UF6N7G1a7N9oWg0Ipo5klY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/--Di_UF6N7G1a7N9oWg0Ipo5klY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LILIANG/HWUosQLlorbrA9CfK9juGyDm8uA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:3060::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:e4:18:27:55:bf:45:f2:88:6a:3d:a8:f2:5f:75:09:4b:e6:
         8a:ab:0a:38:8e:c7:e0:11:c1:9e:05:6b:04:59:10:eb:8a:d7:
         93:3e:2f:01:06:4c:d5:41:9c:14:bd:65:4c:a5:d4:91:9d:d0:
         c7:f6:1b:80:64:2e:19:a2:15:8c:5b:17:94:01:f9:91:74:74:
         c3:89:1b:bb:5a:b0:c2:02:6f:80:c6:61:b0:3f:89:3a:8d:0f:
         ac:bd:1f:1d:a4:cf:c7:55:16:e0:61:c3:4f:0a:f3:a7:f2:44:
         fb:79:53:9b:c3:8b:d6:8e:81:9a:6d:ec:72:4b:76:f6:d8:34:
         d3:36:0f:b0:f3:c8:c3:a1:36:71:eb:4a:3e:62:83:a4:09:06:
         54:93:1d:18:0d:de:50:ee:bf:4b:e1:60:76:73:c1:fe:06:75:
         17:33:87:82:b8:42:6d:17:85:49:36:18:73:94:c2:c3:f0:11:
         1f:b4:15:fa:73:bf:34:c9:c4:37:97:da:1f:e7:7f:5d:ad:75:
         6a:b2:34:88:84:94:b4:36:9c:09:b2:27:f5:7f:30:dd:c7:bd:
         fc:bc:da:fc:c6:37:52:af:1b:15:e8:55:81:db:8d:29:07:b3:
         48:c7:05:57:86:26:aa:9b:0f:43:02:da:c3:1f:79:c8:61:b6:
         89:11:11:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:21 2024 by rpki-client on console-fra.rpki-client.org