Route Origin Authorization

$ rpki-client -vvf rpki.august.tw/repo/localname/6/AS970.roa
File:                     AS970.roa (raw, json)
Hash identifier:          RqoySLtxXpM+R/YxIdJglsny10kJiIorXlLO4xZYADg=
Subject key identifier:   5B:D1:C4:B5:88:0B:54:76:EE:82:E8:26:B2:E2:FD:B9:2C:DA:32:F3
Certificate issuer:       /CN=3b30a5b6475e0ea924572f2c8bd2438815c71081
Certificate serial:       6EF429A3C3B5A3C0463C9D2E263DB8B3B0A2DAC6
Authority key identifier: 3B:30:A5:B6:47:5E:0E:A9:24:57:2F:2C:8B:D2:43:88:15:C7:10:81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OzCltkdeDqkkVy8si9JDiBXHEIE.cer
Subject info access:      rsync://rpki.august.tw/repo/localname/6/AS970.roa
Signing time:             Sun 25 Sep 2022 02:14:46 +0000
ROA not before:           Sun 25 Sep 2022 02:09:46 +0000
ROA not after:            Sun 24 Sep 2023 02:14:46 +0000
asID:                     970
IP address blocks:        2a12:dd47:8077::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:f4:29:a3:c3:b5:a3:c0:46:3c:9d:2e:26:3d:b8:b3:b0:a2:da:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b30a5b6475e0ea924572f2c8bd2438815c71081
        Validity
            Not Before: Sep 25 02:09:46 2022 GMT
            Not After : Sep 24 02:14:46 2023 GMT
        Subject: CN=5BD1C4B5880B5476EE82E826B2E2FDB92CDA32F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b7:a1:f4:84:2a:8c:93:74:e6:52:f5:ed:32:
                    8e:8d:e1:de:ed:51:9f:50:d3:f0:04:4e:69:a3:9e:
                    42:33:fa:1b:31:17:e2:e7:80:ed:cd:9c:fa:4b:84:
                    15:55:e1:9f:3e:66:bd:28:74:24:a8:54:af:2f:58:
                    35:00:10:a8:14:f5:79:a8:08:f0:fe:66:5e:a0:6f:
                    00:f4:07:9a:2d:4a:2f:5d:2d:bf:14:08:7a:7d:7c:
                    5f:f0:89:99:2c:a0:31:4e:ec:f4:99:32:c5:c9:4c:
                    ca:94:26:e5:5d:f3:31:7f:2c:04:ee:f5:db:44:98:
                    82:ed:e8:f0:ed:ca:c3:90:d7:58:b7:69:88:d9:74:
                    35:bb:e9:f4:37:fa:db:42:1f:0c:c8:d0:73:54:94:
                    30:ea:78:6d:f1:11:fd:62:56:15:f9:10:f1:7b:a6:
                    e0:c0:42:bc:a8:3d:ac:5c:a8:15:22:cc:e7:8f:b2:
                    6e:c5:90:40:04:22:87:ef:9f:7d:4a:8b:da:38:d4:
                    66:b9:c6:49:91:2c:e1:ae:27:42:13:59:46:d3:c3:
                    f9:5e:7b:af:af:d1:ca:f9:7d:53:b2:29:ea:2c:28:
                    13:6a:0d:6b:c8:1b:41:da:6d:25:8b:02:be:e5:03:
                    6f:fc:e5:92:88:7d:9b:70:0c:ac:80:09:1a:b3:66:
                    d8:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:D1:C4:B5:88:0B:54:76:EE:82:E8:26:B2:E2:FD:B9:2C:DA:32:F3
            X509v3 Authority Key Identifier:
                keyid:3B:30:A5:B6:47:5E:0E:A9:24:57:2F:2C:8B:D2:43:88:15:C7:10:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.august.tw/repo/localname/6/3B30A5B6475E0EA924572F2C8BD2438815C71081.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzCltkdeDqkkVy8si9JDiBXHEIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.august.tw/repo/localname/6/AS970.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8077::/48

    Signature Algorithm: sha256WithRSAEncryption
         17:5a:c0:7d:ec:c5:87:6c:b0:df:22:c7:c6:53:ef:f3:18:27:
         03:75:ca:18:52:e0:7c:96:f2:ad:85:7e:a2:31:a3:81:85:86:
         9d:5b:35:2e:67:25:10:b8:57:ec:28:fb:3b:ee:e3:a1:fe:2f:
         bc:07:55:12:69:ea:b5:04:5c:c8:15:94:a5:a9:42:c2:95:61:
         35:b4:4c:81:fe:7c:5f:fe:69:ae:5d:c3:93:30:ed:a1:cc:2f:
         52:36:d3:e0:29:ce:2b:e0:40:67:45:d0:68:51:d0:43:f9:22:
         89:23:31:2c:62:e8:43:5d:56:9d:22:3a:a1:79:f2:55:b2:5d:
         7c:11:dd:f8:f9:93:1e:0e:9f:08:f2:f6:91:76:1f:9f:02:fc:
         94:aa:b4:60:17:25:c8:06:a6:f4:59:54:0b:ee:02:90:f9:49:
         e0:fc:0c:1b:4d:cc:27:58:bf:19:38:ce:9b:a2:50:8b:df:a4:
         de:4f:57:17:fc:33:08:79:51:cc:6f:00:6b:b7:cd:17:38:8c:
         56:72:c3:bd:71:0e:33:f5:a4:ed:46:4b:01:56:ee:ec:67:61:
         b9:ea:5e:da:f5:a9:37:73:ec:71:7c:a3:a8:e9:9d:98:87:95:
         bd:cd:83:67:8c:06:ef:5a:ab:e8:e2:09:94:da:81:0a:2e:b2:
         eb:f4:8c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:05 2024 by rpki-client on console-ams.rpki-client.org