Route Origin Authorization

$ rpki-client -vvf rpki.august.tw/repo/localname/6/AS211358.roa
File:                     AS211358.roa (raw, json)
Hash identifier:          9nUnEtjVHL2dcy4x5PiMGhBGWKmRdJsp9l/Mwx9MKd4=
Subject key identifier:   AA:64:0E:7F:C0:D5:DA:CB:80:EA:7F:DA:1D:96:48:C1:EC:13:D8:A8
Certificate issuer:       /CN=3b30a5b6475e0ea924572f2c8bd2438815c71081
Certificate serial:       444AC81436CB749058804206C6CAD1997FECA329
Authority key identifier: 3B:30:A5:B6:47:5E:0E:A9:24:57:2F:2C:8B:D2:43:88:15:C7:10:81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OzCltkdeDqkkVy8si9JDiBXHEIE.cer
Subject info access:      rsync://rpki.august.tw/repo/localname/6/AS211358.roa
Signing time:             Sat 19 Nov 2022 07:00:10 +0000
ROA not before:           Sat 19 Nov 2022 06:55:10 +0000
ROA not after:            Sat 18 Nov 2023 07:00:10 +0000
asID:                     211358
IP address blocks:        2a12:dd47:816a::/47 maxlen: 48
                          2a12:dd47:8e30::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:4a:c8:14:36:cb:74:90:58:80:42:06:c6:ca:d1:99:7f:ec:a3:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b30a5b6475e0ea924572f2c8bd2438815c71081
        Validity
            Not Before: Nov 19 06:55:10 2022 GMT
            Not After : Nov 18 07:00:10 2023 GMT
        Subject: CN=AA640E7FC0D5DACB80EA7FDA1D9648C1EC13D8A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:99:a4:45:ab:cf:01:9a:8f:7a:4e:92:46:0b:
                    eb:95:ea:8d:45:19:b9:e7:c2:59:05:89:8c:37:96:
                    d7:db:b6:a9:f4:b1:46:8d:31:07:a9:ca:94:cd:1f:
                    fb:10:e8:fd:c3:1f:ba:0c:59:46:d9:4f:39:c2:4b:
                    e9:cc:62:c5:4f:d2:f1:0a:09:e9:53:17:bd:4d:dc:
                    47:b7:42:2e:4c:81:b1:a2:6f:2f:7d:16:61:8c:3a:
                    71:45:4f:db:69:1d:6e:13:fa:93:34:a5:6f:9f:8e:
                    71:65:2e:fa:27:1d:89:07:69:62:0e:23:60:cc:58:
                    7c:e1:6d:12:90:83:91:ca:b1:49:b3:98:89:1c:2c:
                    c2:7e:a9:68:04:c9:9b:8f:eb:69:6d:9e:31:1d:b7:
                    4a:87:fd:89:3f:9f:3e:93:71:d3:2c:59:01:51:ac:
                    fd:34:91:63:0d:58:99:f7:c7:ad:9c:32:08:45:12:
                    9e:26:fe:04:ff:73:68:2c:05:6b:4c:32:a2:48:b3:
                    83:8c:e4:3d:ff:2a:fe:d0:04:68:5b:ad:d1:3a:0d:
                    6a:57:56:86:ea:6b:59:84:55:ad:5c:9f:5b:81:4f:
                    da:c4:ef:db:14:f1:5e:93:6c:75:93:3c:1d:36:a4:
                    26:3e:e7:3c:f9:97:61:2c:c3:08:8e:a5:69:55:cf:
                    e3:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:64:0E:7F:C0:D5:DA:CB:80:EA:7F:DA:1D:96:48:C1:EC:13:D8:A8
            X509v3 Authority Key Identifier:
                keyid:3B:30:A5:B6:47:5E:0E:A9:24:57:2F:2C:8B:D2:43:88:15:C7:10:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.august.tw/repo/localname/6/3B30A5B6475E0EA924572F2C8BD2438815C71081.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzCltkdeDqkkVy8si9JDiBXHEIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.august.tw/repo/localname/6/AS211358.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:816a::/47
                  2a12:dd47:8e30::/44

    Signature Algorithm: sha256WithRSAEncryption
         13:31:b0:7b:60:ff:bc:87:92:e5:86:07:68:d0:31:b8:a5:22:
         8b:c0:e7:73:e7:54:d9:e8:91:2a:3a:7a:27:82:d5:ed:43:fc:
         07:ba:f2:35:58:4f:b8:f7:c0:60:4e:c1:41:58:00:b9:35:b0:
         10:3c:6c:48:19:23:58:b8:ac:0b:41:20:b6:f5:5f:fa:f4:f4:
         7d:a4:23:15:21:51:56:9e:cb:b2:4c:55:aa:76:17:71:5b:fd:
         08:40:a9:86:d5:e5:29:4f:4c:da:9d:45:3e:16:7e:6b:1a:ba:
         93:2a:b7:cd:bf:59:72:31:21:85:92:a7:02:5b:55:62:b1:de:
         6d:b1:c1:53:24:b1:b5:3b:d8:93:ec:90:a1:cd:96:44:5f:15:
         02:8c:ce:85:a9:18:91:76:84:c6:08:43:b5:4d:b3:d4:98:05:
         ae:bf:13:28:fd:8a:63:e3:8a:52:da:55:bd:f2:71:cc:86:a3:
         6e:f6:6c:18:a9:65:41:13:15:ad:1e:7f:be:fd:e5:f5:d4:ab:
         a7:8d:7f:2d:e2:7f:32:ef:8b:ce:25:94:63:39:9d:94:3c:1e:
         84:3c:86:87:87:93:58:41:2a:25:31:b7:30:53:f5:ac:96:d3:
         72:b2:f8:ff:34:78:59:cb:0d:b7:18:6d:04:56:d8:6c:ae:40:
         ce:82:7e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:05 2024 by rpki-client on console-ams.rpki-client.org