Route Origin Authorization

$ rpki-client -vvf rpki.august.tw/repo/localname/6/AS945.roa
File:                     AS945.roa (raw, json)
Hash identifier:          Umdia+9A8Wxbh+xstz7iGx5lVN08BK/8Z97quG7sbso=
Subject key identifier:   E7:A3:DE:6C:FB:12:EA:A7:B5:38:F0:31:46:20:64:8B:57:DC:FC:CD
Certificate issuer:       /CN=3b30a5b6475e0ea924572f2c8bd2438815c71081
Certificate serial:       5E531B6EAEA329F40079D5D446E63AE610127A1F
Authority key identifier: 3B:30:A5:B6:47:5E:0E:A9:24:57:2F:2C:8B:D2:43:88:15:C7:10:81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OzCltkdeDqkkVy8si9JDiBXHEIE.cer
Subject info access:      rsync://rpki.august.tw/repo/localname/6/AS945.roa
Signing time:             Mon 14 Nov 2022 01:50:13 +0000
ROA not before:           Mon 14 Nov 2022 01:45:13 +0000
ROA not after:            Mon 13 Nov 2023 01:50:13 +0000
asID:                     945
IP address blocks:        2001:67c:aa0::/48 maxlen: 48
                          2a12:dd42:b00b::/48 maxlen: 48
                          2a12:dd44::/32 maxlen: 32
                          2a12:dd44:b00b::/48 maxlen: 48
                          2a12:dd45:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:53:1b:6e:ae:a3:29:f4:00:79:d5:d4:46:e6:3a:e6:10:12:7a:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b30a5b6475e0ea924572f2c8bd2438815c71081
        Validity
            Not Before: Nov 14 01:45:13 2022 GMT
            Not After : Nov 13 01:50:13 2023 GMT
        Subject: CN=E7A3DE6CFB12EAA7B538F0314620648B57DCFCCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:3e:e1:0f:4d:8e:2c:41:e1:a2:14:5c:54:50:
                    8b:df:88:9c:3f:3d:55:30:0f:57:82:01:53:cb:b7:
                    59:d1:b5:3e:00:8c:a8:34:f9:8b:2b:eb:00:93:1b:
                    bc:1e:1b:59:b8:f9:c3:71:3b:ec:30:d0:0b:34:f7:
                    8a:52:cd:78:46:c9:31:b9:76:33:c0:31:0f:6a:3d:
                    38:46:6d:92:c9:e4:2c:cf:2b:b1:3a:60:9f:79:61:
                    1a:a3:1d:fa:94:a2:49:00:b9:8f:fd:73:95:55:98:
                    95:3e:2f:a5:47:55:a7:33:2c:e3:ba:5b:d0:5b:a9:
                    fe:01:0a:c2:4e:21:10:0f:06:24:35:92:43:53:e7:
                    2f:e9:02:95:ad:6d:07:87:69:9d:5f:a9:d1:55:a6:
                    70:44:db:83:6c:24:0e:e0:ac:5a:29:a0:3a:f4:e6:
                    0f:89:a1:ba:62:ee:21:f0:84:2a:3b:f4:08:de:cf:
                    f5:a4:49:21:02:e3:73:aa:77:50:39:a3:61:a3:5e:
                    d8:52:6a:ae:6e:d9:a0:e3:ae:52:b3:c0:5f:91:70:
                    c4:72:4a:fb:d2:3c:80:48:50:df:54:f6:4d:cd:19:
                    ec:f4:b0:88:ed:ef:74:b4:93:be:8b:bf:96:99:5a:
                    e2:56:d0:63:26:79:e3:64:b6:ab:6e:c2:d4:6d:fb:
                    0c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:A3:DE:6C:FB:12:EA:A7:B5:38:F0:31:46:20:64:8B:57:DC:FC:CD
            X509v3 Authority Key Identifier:
                keyid:3B:30:A5:B6:47:5E:0E:A9:24:57:2F:2C:8B:D2:43:88:15:C7:10:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.august.tw/repo/localname/6/3B30A5B6475E0EA924572F2C8BD2438815C71081.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzCltkdeDqkkVy8si9JDiBXHEIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.august.tw/repo/localname/6/AS945.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:aa0::/48
                  2a12:dd42:b00b::/48
                  2a12:dd44::/32
                  2a12:dd45:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         4c:ca:0f:20:36:a1:7f:c1:41:b8:6b:6f:f6:bb:d7:54:47:8b:
         cc:b9:41:58:15:e9:fc:8b:de:83:ef:3e:30:d7:3e:95:06:d3:
         51:97:84:98:44:5d:d3:76:97:32:df:05:00:b8:de:81:1f:df:
         d9:f0:60:20:44:fe:ef:b3:2c:a0:73:7e:cb:50:8e:01:63:61:
         e3:32:13:e8:93:a9:f5:9b:21:7f:2c:f2:95:02:ba:2e:b0:53:
         ad:df:f7:08:2b:87:c8:45:aa:71:97:d8:2d:af:26:70:c5:cc:
         be:a0:50:ee:7f:2d:7c:89:95:1e:52:0f:45:bd:6d:ac:42:33:
         be:83:fd:1f:26:e0:9d:d6:29:67:72:4f:97:38:ee:d0:1c:79:
         9e:63:bd:10:bb:94:4b:e1:69:6e:45:41:87:c0:12:d0:93:9d:
         65:19:6d:8d:7b:a2:da:7f:87:13:2f:d4:54:a3:ec:b0:a6:ac:
         77:7a:f8:45:72:06:f4:82:c6:e9:3e:a2:f7:95:07:21:f5:6c:
         de:62:fd:f4:f8:3a:92:b8:ab:70:d0:54:fd:f2:e0:99:86:e1:
         c6:71:fd:a3:81:24:88:76:29:3e:67:c7:02:43:50:a2:92:19:
         64:cd:d6:b6:a8:f7:c4:f2:3e:7a:b2:c5:0e:5d:da:e5:54:6a:
         71:64:2e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:05 2024 by rpki-client on console-ams.rpki-client.org