Route Origin Authorization

$ rpki-client -vvf rpki.august.tw/repo/localname/6/AS202911.roa
File:                     AS202911.roa (raw, json)
Hash identifier:          b42Iqz/pIhQiR4brpEELFGNBydsZ+7Lg/PV+P812lKc=
Subject key identifier:   45:DA:31:67:FD:0B:AE:07:A0:0C:A1:D1:98:BC:E5:C7:62:C5:13:4A
Certificate issuer:       /CN=3b30a5b6475e0ea924572f2c8bd2438815c71081
Certificate serial:       141D4D8E246DF1E065C84EBDF85CB715A890AAEE
Authority key identifier: 3B:30:A5:B6:47:5E:0E:A9:24:57:2F:2C:8B:D2:43:88:15:C7:10:81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OzCltkdeDqkkVy8si9JDiBXHEIE.cer
Subject info access:      rsync://rpki.august.tw/repo/localname/6/AS202911.roa
Signing time:             Fri 23 Sep 2022 23:04:35 +0000
ROA not before:           Fri 23 Sep 2022 22:59:35 +0000
ROA not after:            Fri 22 Sep 2023 23:04:35 +0000
asID:                     202911
IP address blocks:        2a12:dd47:8210::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:1d:4d:8e:24:6d:f1:e0:65:c8:4e:bd:f8:5c:b7:15:a8:90:aa:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b30a5b6475e0ea924572f2c8bd2438815c71081
        Validity
            Not Before: Sep 23 22:59:35 2022 GMT
            Not After : Sep 22 23:04:35 2023 GMT
        Subject: CN=45DA3167FD0BAE07A00CA1D198BCE5C762C5134A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a8:dc:4d:17:92:85:8d:0f:24:63:ed:22:21:
                    31:15:2f:34:29:e4:d5:db:3d:e7:eb:0b:e0:d8:27:
                    ed:3f:65:a6:5d:01:5f:5c:ef:1a:84:ae:9b:8a:1a:
                    98:68:f4:cb:df:7a:78:d4:c3:9b:b2:16:1e:3b:31:
                    7a:40:b5:f2:e8:73:ff:26:bc:cc:a3:a5:ae:4f:e9:
                    82:bf:cd:26:de:c8:94:f3:0a:9f:01:cb:cb:e3:0a:
                    37:eb:8c:9f:96:93:0a:6e:48:24:0b:a5:7d:4c:ed:
                    ef:69:2d:23:c2:17:e1:3b:e3:b0:82:55:7a:f0:88:
                    85:ae:07:97:e1:17:fc:95:53:d1:f0:8f:4f:9a:86:
                    d4:7a:77:47:0d:ac:fb:6b:36:8e:f5:6b:9a:bb:e1:
                    e5:e3:72:99:a0:fd:2b:50:df:6a:9b:4e:54:a3:c7:
                    60:c9:94:e2:f9:80:79:85:c0:a8:18:87:2d:54:72:
                    53:5e:15:ca:f3:e6:f8:cb:e7:1a:61:ff:9e:a7:f1:
                    58:3e:c9:96:20:3d:33:2b:77:c9:b3:a0:a9:7d:42:
                    bf:63:32:10:23:bf:95:3a:d8:8d:14:14:69:fb:33:
                    0b:a3:49:a4:66:2c:b3:85:ed:ba:de:7c:46:bc:c1:
                    1a:cb:75:8f:2f:ba:68:f3:3a:47:e6:05:f7:b2:77:
                    07:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:DA:31:67:FD:0B:AE:07:A0:0C:A1:D1:98:BC:E5:C7:62:C5:13:4A
            X509v3 Authority Key Identifier:
                keyid:3B:30:A5:B6:47:5E:0E:A9:24:57:2F:2C:8B:D2:43:88:15:C7:10:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.august.tw/repo/localname/6/3B30A5B6475E0EA924572F2C8BD2438815C71081.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzCltkdeDqkkVy8si9JDiBXHEIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.august.tw/repo/localname/6/AS202911.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8210::/44

    Signature Algorithm: sha256WithRSAEncryption
         a7:1c:70:39:c0:96:61:7a:00:33:e3:8c:00:e3:ff:9f:bc:e4:
         a9:b6:f9:b4:fa:95:b8:6a:b6:73:a6:b3:5e:97:4f:6c:da:36:
         1b:82:f8:f6:57:d1:e9:ae:96:8e:c7:ba:99:28:66:7c:ee:dd:
         17:0b:19:59:01:21:3d:ba:cf:7a:19:98:ba:b2:7a:22:01:60:
         04:69:c9:e5:f5:e9:ba:a6:4c:4b:da:de:54:29:66:f8:c8:8e:
         10:bc:1f:34:99:e7:2a:00:5f:39:0d:05:2e:2a:ec:7a:cb:1e:
         21:77:c6:8c:19:a0:2f:8a:96:84:ab:9a:ce:9a:91:35:7b:65:
         fb:5c:2a:00:0c:e5:b9:9b:e8:c0:aa:02:fc:02:e1:aa:a3:4e:
         9a:6d:69:1d:05:eb:66:77:26:29:8f:91:19:ef:b2:54:ce:ea:
         45:06:a9:4c:13:f5:b1:26:13:96:c6:ba:80:73:60:eb:85:9d:
         56:7e:4d:11:09:5e:b0:64:76:cc:85:c1:03:2f:0d:3b:55:e8:
         56:ee:69:a1:5a:7c:96:d9:be:47:92:6a:b7:83:94:62:05:33:
         6a:5e:e4:f9:23:d3:6c:21:b5:91:83:d2:1e:f6:66:9b:6b:a2:
         dd:34:ea:49:9e:3a:76:57:c1:df:d2:06:1e:05:8f:64:92:20:
         e7:c3:a4:d0
-----BEGIN CERTIFICATE-----
MIIEpzCCA4+gAwIBAgIUFB1NjiRt8eBlyE69+Fy3FaiQqu4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2IzMGE1YjY0NzVlMGVhOTI0NTcyZjJjOGJkMjQzODgx
NWM3MTA4MTAeFw0yMjA5MjMyMjU5MzVaFw0yMzA5MjIyMzA0MzVaMDMxMTAvBgNV
BAMTKDQ1REEzMTY3RkQwQkFFMDdBMDBDQTFEMTk4QkNFNUM3NjJDNTEzNEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7qNxNF5KFjQ8kY+0iITEVLzQp
5NXbPefrC+DYJ+0/ZaZdAV9c7xqErpuKGpho9MvfenjUw5uyFh47MXpAtfLoc/8m
vMyjpa5P6YK/zSbeyJTzCp8By8vjCjfrjJ+WkwpuSCQLpX1M7e9pLSPCF+E747CC
VXrwiIWuB5fhF/yVU9Hwj0+ahtR6d0cNrPtrNo71a5q74eXjcpmg/StQ32qbTlSj
x2DJlOL5gHmFwKgYhy1UclNeFcrz5vjL5xph/56n8Vg+yZYgPTMrd8mzoKl9Qr9j
MhAjv5U62I0UFGn7MwujSaRmLLOF7brefEa8wRrLdY8vumjzOkfmBfeydwerAgMB
AAGjggGxMIIBrTAdBgNVHQ4EFgQURdoxZ/0LrgegDKHRmLzlx2LFE0owHwYDVR0j
BBgwFoAUOzCltkdeDqkkVy8si9JDiBXHEIEwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud
HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraS5hdWd1c3QudHcvcmVwby9sb2NhbG5h
bWUvNi8zQjMwQTVCNjQ3NUUwRUE5MjQ1NzJGMkM4QkQyNDM4ODE1QzcxMDgxLmNy
bDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvT3pDbHRrZGVEcWtrVnk4c2k5SkRpQlhI
RUlFLmNlcjBQBggrBgEFBQcBCwREMEIwQAYIKwYBBQUHMAuGNHJzeW5jOi8vcnBr
aS5hdWd1c3QudHcvcmVwby9sb2NhbG5hbWUvNi9BUzIwMjkxMS5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
BCoS3UeCEDANBgkqhkiG9w0BAQsFAAOCAQEApxxwOcCWYXoAM+OMAOP/n7zkqbb5
tPqVuGq2c6azXpdPbNo2G4L49lfR6a6Wjse6mShmfO7dFwsZWQEhPbrPehmYurJ6
IgFgBGnJ5fXpuqZMS9reVClm+MiOELwfNJnnKgBfOQ0FLirsesseIXfGjBmgL4qW
hKuazpqRNXtl+1wqAAzluZvowKoC/ALhqqNOmm1pHQXrZncmKY+RGe+yVM7qRQap
TBP1sSYTlsa6gHNg64WdVn5NEQlesGR2zIXBAy8NO1XoVu5poVp8ltm+R5Jqt4OU
YgUzal7k+SPTbCG1kYPSHvZmm2ui3TTqSZ46dlfB39IGHgWPZJIg58Ok0A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:00 2024 by rpki-client on console-fra.rpki-client.org