Route Origin Authorization

$ rpki-client -vvf rpki.august.tw/repo/localname/6/AS203913.roa
File:                     AS203913.roa (raw, json)
Hash identifier:          PjwPc3fz8/kPvTnCI9XthToURddKfUWf0AATfdrSjQk=
Subject key identifier:   1C:F9:C8:86:22:72:30:35:B9:E9:37:99:FB:DD:1C:9C:B6:06:B8:42
Certificate issuer:       /CN=3b30a5b6475e0ea924572f2c8bd2438815c71081
Certificate serial:       22510B640370E1A7737E272BB20F51AE4562AD3B
Authority key identifier: 3B:30:A5:B6:47:5E:0E:A9:24:57:2F:2C:8B:D2:43:88:15:C7:10:81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OzCltkdeDqkkVy8si9JDiBXHEIE.cer
Subject info access:      rsync://rpki.august.tw/repo/localname/6/AS203913.roa
Signing time:             Sun 16 Oct 2022 03:06:48 +0000
ROA not before:           Sun 16 Oct 2022 03:01:48 +0000
ROA not after:            Sun 15 Oct 2023 03:06:48 +0000
asID:                     203913
IP address blocks:        2a12:dd47:8045::/48 maxlen: 48
                          2a12:dd47:8800::/39 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:51:0b:64:03:70:e1:a7:73:7e:27:2b:b2:0f:51:ae:45:62:ad:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b30a5b6475e0ea924572f2c8bd2438815c71081
        Validity
            Not Before: Oct 16 03:01:48 2022 GMT
            Not After : Oct 15 03:06:48 2023 GMT
        Subject: CN=1CF9C88622723035B9E93799FBDD1C9CB606B842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:02:e7:ba:87:3d:bf:67:fe:07:e3:60:53:bf:
                    0c:3b:11:0b:79:ca:a2:e8:b0:a8:36:e9:8b:44:dc:
                    37:b6:d9:e3:d0:4d:5c:33:c3:fd:31:a1:68:fe:49:
                    00:a4:96:10:88:51:74:60:57:a0:03:7d:f9:86:00:
                    ba:5e:61:55:f2:8d:8f:52:fe:1e:65:74:3c:db:19:
                    aa:45:36:79:48:9f:65:c6:a4:20:56:a7:dc:f9:0a:
                    0a:c3:df:ca:27:57:62:0e:0c:3b:fc:26:f5:03:35:
                    15:81:54:6f:42:3f:17:22:36:3d:6a:c8:f4:05:b3:
                    75:52:d8:c6:c9:7b:b8:cf:d0:c2:7d:23:fe:82:b4:
                    cd:76:82:c7:24:95:41:7c:d2:ee:f7:79:c6:64:78:
                    07:0e:64:9e:17:f4:8e:cc:ce:c4:9d:96:4f:de:99:
                    44:4d:bc:29:f3:99:fd:47:ad:e5:f5:1a:d2:7d:c8:
                    33:9a:d7:d3:77:d3:b8:79:49:19:97:0d:a5:1c:72:
                    47:24:58:fa:86:59:b4:aa:af:b0:d9:75:41:ed:e2:
                    90:25:aa:71:66:1c:e3:1f:60:4a:8a:69:f4:d5:ec:
                    e1:92:1e:9e:6a:00:5a:e9:c9:03:50:69:e6:ec:44:
                    21:dd:5c:90:c3:17:99:36:0b:e1:ae:5e:6b:f8:5e:
                    25:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:F9:C8:86:22:72:30:35:B9:E9:37:99:FB:DD:1C:9C:B6:06:B8:42
            X509v3 Authority Key Identifier:
                keyid:3B:30:A5:B6:47:5E:0E:A9:24:57:2F:2C:8B:D2:43:88:15:C7:10:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.august.tw/repo/localname/6/3B30A5B6475E0EA924572F2C8BD2438815C71081.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzCltkdeDqkkVy8si9JDiBXHEIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.august.tw/repo/localname/6/AS203913.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8045::/48
                  2a12:dd47:8800::/39

    Signature Algorithm: sha256WithRSAEncryption
         4f:bf:64:bb:91:57:4e:7e:15:92:0f:93:42:dd:7a:9e:4d:e3:
         b7:4a:25:6a:1d:b4:c3:98:10:6f:5f:e4:e6:58:cc:96:42:86:
         51:b3:53:5b:db:0d:d1:c5:82:0d:34:c2:82:b8:c8:c3:af:b9:
         81:3c:6e:d3:d3:31:0c:50:74:3f:3b:4c:d6:a8:18:97:da:ed:
         a6:ea:e2:cf:7f:2c:34:1f:0b:c7:9e:0b:47:8f:19:4d:91:02:
         1d:21:9a:fb:f7:02:32:60:b5:c5:77:51:f9:9b:78:15:f2:23:
         b4:75:24:63:ce:ac:03:4b:4d:7d:9c:27:73:4a:e1:3d:b3:40:
         5e:98:c9:00:33:5c:ac:80:4a:81:30:d0:c9:31:d3:df:28:bc:
         39:b4:54:cc:29:18:35:ac:20:52:0e:65:f3:93:30:48:a3:92:
         2d:be:5e:96:b7:51:94:36:35:45:b7:6a:c1:ab:22:d0:ee:75:
         17:ef:57:36:12:20:7f:33:13:7a:7c:2c:c7:b5:3a:5a:7b:cf:
         41:91:32:10:19:7a:71:f3:c4:77:c2:67:72:2c:ad:71:d8:b0:
         7b:fe:b5:e8:57:4d:97:3b:3f:75:84:83:e9:c9:26:2c:b7:b1:
         8d:af:5c:b0:5b:10:9a:1f:04:44:35:41:97:df:94:e6:64:5a:
         e2:30:c4:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:05 2024 by rpki-client on console-ams.rpki-client.org