Route Origin Authorization

$ rpki-client -vvf rpki.august.tw/repo/localname/6/AS207320.roa
File:                     AS207320.roa (raw, json)
Hash identifier:          67cBh9V9ZqDAWSDAy9D2c5FwVvnOaQyiWnFfKC2E9KQ=
Subject key identifier:   EA:57:34:5F:DC:EE:37:BE:54:FA:D1:4E:F2:40:DB:48:FC:DB:DF:11
Certificate issuer:       /CN=3b30a5b6475e0ea924572f2c8bd2438815c71081
Certificate serial:       3DEE7C2D8E5AD1D677C1DE45B1D64593F7E68F2E
Authority key identifier: 3B:30:A5:B6:47:5E:0E:A9:24:57:2F:2C:8B:D2:43:88:15:C7:10:81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OzCltkdeDqkkVy8si9JDiBXHEIE.cer
Subject info access:      rsync://rpki.august.tw/repo/localname/6/AS207320.roa
Signing time:             Sat 01 Oct 2022 08:07:23 +0000
ROA not before:           Sat 01 Oct 2022 08:02:23 +0000
ROA not after:            Sat 30 Sep 2023 08:07:23 +0000
asID:                     207320
IP address blocks:        2a12:dd47:82e0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:ee:7c:2d:8e:5a:d1:d6:77:c1:de:45:b1:d6:45:93:f7:e6:8f:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b30a5b6475e0ea924572f2c8bd2438815c71081
        Validity
            Not Before: Oct  1 08:02:23 2022 GMT
            Not After : Sep 30 08:07:23 2023 GMT
        Subject: CN=EA57345FDCEE37BE54FAD14EF240DB48FCDBDF11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0c:a1:a8:23:00:d1:25:aa:dd:37:7f:44:f2:
                    f7:2d:09:d8:19:56:9b:fb:f1:c4:8b:a2:fa:bc:42:
                    94:48:80:54:26:94:f8:6f:93:78:04:6d:80:55:35:
                    a5:19:34:c3:f0:8b:53:8b:53:ab:65:08:36:9b:cd:
                    4b:98:b8:1a:f1:0f:53:dc:12:c7:34:77:7a:9f:54:
                    e1:7d:22:d5:12:27:d5:35:c3:d2:3f:06:a9:b5:68:
                    c5:b0:d7:f3:57:26:60:54:d5:8f:6e:99:91:85:9b:
                    fb:ba:7f:a8:3e:f1:5c:43:cf:81:b9:dd:4e:9f:a4:
                    c1:c9:d0:43:5c:6e:30:c7:d9:e3:49:f0:f3:9d:ea:
                    20:87:3a:64:35:eb:54:db:31:39:c5:2c:cb:0d:b2:
                    33:52:f1:66:2b:2d:ed:52:1b:1d:8f:fa:b7:cd:e3:
                    19:3f:68:ed:bf:e6:e7:ea:47:b7:bb:a4:e4:12:8a:
                    b8:84:02:0d:38:0d:08:df:dd:0d:12:00:d7:82:06:
                    89:97:64:7b:63:d7:eb:cb:85:86:f2:dd:b5:d8:0f:
                    d1:81:c4:fc:03:f6:94:fe:86:9b:43:75:5e:b8:b1:
                    f7:f0:a2:9b:bf:4c:eb:f2:cc:a4:a4:86:52:3e:76:
                    43:3c:e0:dd:5c:af:9e:b4:ad:48:d2:c4:70:27:c0:
                    24:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:57:34:5F:DC:EE:37:BE:54:FA:D1:4E:F2:40:DB:48:FC:DB:DF:11
            X509v3 Authority Key Identifier:
                keyid:3B:30:A5:B6:47:5E:0E:A9:24:57:2F:2C:8B:D2:43:88:15:C7:10:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.august.tw/repo/localname/6/3B30A5B6475E0EA924572F2C8BD2438815C71081.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzCltkdeDqkkVy8si9JDiBXHEIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.august.tw/repo/localname/6/AS207320.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:82e0::/44

    Signature Algorithm: sha256WithRSAEncryption
         1d:1c:ae:1f:d0:1b:ca:65:85:db:44:03:7e:4a:37:7b:61:35:
         ce:fb:c3:f2:ff:00:25:ae:98:e1:f9:a1:b7:b7:a3:52:4b:9b:
         13:8f:db:0c:5d:71:a6:e8:b2:e0:2c:54:22:f7:2b:f7:40:73:
         ad:0c:b7:1a:34:05:e8:9e:dc:5f:47:69:94:3c:a9:7e:a9:ac:
         92:93:b2:66:5b:a4:42:92:23:06:35:bd:4c:cb:2e:1b:f4:36:
         b9:b1:f0:f3:29:d7:05:e1:6b:93:1a:a3:b0:b4:a7:45:9b:1b:
         97:3a:19:ff:52:d4:27:9a:73:01:e4:9d:08:0f:e9:7a:f7:5e:
         a5:78:59:30:d6:f1:3e:a0:7c:90:95:3a:07:ef:51:2d:78:d4:
         a7:51:24:59:dd:81:66:8c:ed:17:1a:d0:24:02:90:f4:a0:8d:
         a8:d2:0c:53:7b:2e:aa:14:df:c2:11:f0:db:52:6d:f3:b2:92:
         4b:f7:59:97:3a:48:11:1a:55:9c:aa:ce:8b:f5:de:65:f8:d6:
         81:8b:c1:85:aa:e4:2b:5e:77:75:50:4d:1b:b8:91:7f:01:2b:
         b8:2a:21:cf:1b:f4:aa:2c:c5:6e:3a:a0:00:f7:48:39:c3:47:
         5d:68:71:dc:35:77:9b:5d:1a:4d:6d:05:86:6c:df:11:58:26:
         c6:11:fb:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:00 2024 by rpki-client on console-fra.rpki-client.org