Route Origin Authorization

$ rpki-client -vvf rpki.august.tw/repo/wFlare/0/32332e3133382e3233322e302f32342d3234203d3e20323033343533.roa
File:                     32332e3133382e3233322e302f32342d3234203d3e20323033343533.roa (raw, json)
Hash identifier:          qp+oVE7uKXqFFhZ4y+8lpneaeTZuAX28zCP8kl7+i54=
Subject key identifier:   ED:1C:08:47:D5:70:A7:DB:3A:FE:E9:B1:FB:06:EE:AC:7B:79:04:0C
Certificate issuer:       /CN=DD13281AD0CEA1353CEB97ABB8F3676A83BE5538
Certificate serial:       585C5C001B2BDB5A2D681F350BBEAC2813B18948
Authority key identifier: DD:13:28:1A:D0:CE:A1:35:3C:EB:97:AB:B8:F3:67:6A:83:BE:55:38
Authority info access:    rsync://rpki.august.tw/repo/localname/10/DD13281AD0CEA1353CEB97ABB8F3676A83BE5538.cer
Subject info access:      rsync://rpki.august.tw/repo/wFlare/0/32332e3133382e3233322e302f32342d3234203d3e20323033343533.roa
Signing time:             Thu 10 Nov 2022 22:28:55 +0000
ROA not before:           Thu 10 Nov 2022 22:23:55 +0000
ROA not after:            Thu 09 Nov 2023 22:28:55 +0000
asID:                     203453
IP address blocks:        23.138.232.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:5c:5c:00:1b:2b:db:5a:2d:68:1f:35:0b:be:ac:28:13:b1:89:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD13281AD0CEA1353CEB97ABB8F3676A83BE5538
        Validity
            Not Before: Nov 10 22:23:55 2022 GMT
            Not After : Nov  9 22:28:55 2023 GMT
        Subject: CN=ED1C0847D570A7DB3AFEE9B1FB06EEAC7B79040C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:68:a4:3e:67:b9:dd:b4:9e:6e:7b:06:35:05:
                    bd:be:ea:f9:6d:70:28:f5:2e:01:49:6d:f0:f1:95:
                    03:6b:b6:db:da:0e:07:e8:df:24:3d:79:0f:32:78:
                    20:06:0f:03:e3:3e:07:97:35:d7:45:5b:a5:6b:33:
                    f1:2a:d9:16:30:d3:72:79:f5:63:70:5a:01:02:9f:
                    1d:09:b2:b3:28:92:30:38:4e:f7:18:11:a7:ae:4f:
                    e3:4b:49:9d:c8:ab:6e:93:3e:9b:72:ae:52:c7:11:
                    4c:04:58:4a:32:d7:45:75:0d:b6:14:b9:5d:c3:56:
                    67:bc:50:2f:1a:b5:8f:22:4c:d4:a9:6b:d3:57:55:
                    a9:5d:67:8d:48:b7:b3:a1:19:19:64:7c:3e:9f:2a:
                    ae:e9:af:b0:c6:3c:c1:61:f0:8c:d8:3f:ed:a6:11:
                    3a:5c:1e:c2:64:7e:87:ad:5d:9d:c5:9d:30:4f:91:
                    ba:01:5b:4a:06:57:ae:7b:1d:8c:34:7e:7a:dd:24:
                    ff:ee:1a:16:00:d7:b5:6f:69:df:a4:a2:34:eb:88:
                    a2:44:5f:70:14:3b:b9:90:f5:c7:4c:ea:27:51:e3:
                    b7:b9:15:cb:35:9d:ce:e3:cb:2d:e6:4d:d0:44:ce:
                    00:d6:c9:54:87:9e:f7:6d:d4:7a:54:95:fe:49:72:
                    74:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:1C:08:47:D5:70:A7:DB:3A:FE:E9:B1:FB:06:EE:AC:7B:79:04:0C
            X509v3 Authority Key Identifier:
                keyid:DD:13:28:1A:D0:CE:A1:35:3C:EB:97:AB:B8:F3:67:6A:83:BE:55:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.august.tw/repo/wFlare/0/DD13281AD0CEA1353CEB97ABB8F3676A83BE5538.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.august.tw/repo/localname/10/DD13281AD0CEA1353CEB97ABB8F3676A83BE5538.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.august.tw/repo/wFlare/0/32332e3133382e3233322e302f32342d3234203d3e20323033343533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.138.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:d3:a2:32:d6:e8:ae:41:6a:80:71:2f:1d:4c:47:bd:e6:b9:
         64:e8:89:cb:fa:5b:6b:8e:a9:27:5e:2d:08:e3:2b:6b:b5:20:
         3b:90:01:8f:d5:a1:7b:c5:3e:c3:bd:11:ae:f2:b0:e5:13:d4:
         06:a1:d8:ad:79:bd:e2:20:f2:8a:39:d3:fe:2c:b3:ea:cc:10:
         b7:4c:43:65:cc:c6:86:ae:d3:d3:d7:58:6f:38:19:89:49:a8:
         95:35:5c:4a:e4:eb:fa:9f:74:88:dc:e7:81:4f:06:66:38:0b:
         14:52:f4:52:66:07:b3:bb:09:22:91:94:57:84:74:1e:3c:3a:
         2e:18:08:2c:49:03:a9:6a:27:b9:1d:2d:2d:cb:d4:65:93:73:
         15:8d:6b:d7:59:6d:b0:1e:9e:67:18:55:37:d9:1c:77:3e:09:
         59:1a:c1:95:1d:b2:b8:57:7f:27:0c:1a:57:25:4c:24:1a:a4:
         a8:67:89:f4:2c:29:43:9a:6f:b4:26:4b:b2:b4:26:cf:6f:70:
         a0:c1:aa:6b:58:ee:d8:73:55:3a:1f:3e:21:e3:8c:43:42:7e:
         81:10:78:03:3b:97:15:53:b7:46:b8:97:7e:cc:e1:4c:98:ad:
         fa:4c:9f:40:88:7a:80:0d:ed:2c:e0:3a:f7:b9:1f:87:99:a6:
         d5:54:21:82
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgIUWFxcABsr21otaB81C76sKBOxiUgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREQxMzI4MUFEMENFQTEzNTNDRUI5N0FCQjhGMzY3NkE4
M0JFNTUzODAeFw0yMjExMTAyMjIzNTVaFw0yMzExMDkyMjI4NTVaMDMxMTAvBgNV
BAMTKEVEMUMwODQ3RDU3MEE3REIzQUZFRTlCMUZCMDZFRUFDN0I3OTA0MEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/aKQ+Z7ndtJ5uewY1Bb2+6vlt
cCj1LgFJbfDxlQNrttvaDgfo3yQ9eQ8yeCAGDwPjPgeXNddFW6VrM/Eq2RYw03J5
9WNwWgECnx0JsrMokjA4TvcYEaeuT+NLSZ3Iq26TPptyrlLHEUwEWEoy10V1DbYU
uV3DVme8UC8atY8iTNSpa9NXValdZ41It7OhGRlkfD6fKq7pr7DGPMFh8IzYP+2m
ETpcHsJkfoetXZ3FnTBPkboBW0oGV657HYw0fnrdJP/uGhYA17Vvad+kojTriKJE
X3AUO7mQ9cdM6idR47e5Fcs1nc7jyy3mTdBEzgDWyVSHnvdt1HpUlf5JcnSHAgMB
AAGjggHlMIIB4TAdBgNVHQ4EFgQU7RwIR9Vwp9s6/umx+wburHt5BAwwHwYDVR0j
BBgwFoAU3RMoGtDOoTU865eruPNnaoO+VTgwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud
HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS5hdWd1c3QudHcvcmVwby93RmxhcmUv
MC9ERDEzMjgxQUQwQ0VBMTM1M0NFQjk3QUJCOEYzNjc2QTgzQkU1NTM4LmNybDBx
BggrBgEFBQcBAQRlMGMwYQYIKwYBBQUHMAKGVXJzeW5jOi8vcnBraS5hdWd1c3Qu
dHcvcmVwby9sb2NhbG5hbWUvMTAvREQxMzI4MUFEMENFQTEzNTNDRUI5N0FCQjhG
MzY3NkE4M0JFNTUzOC5jZXIwfQYIKwYBBQUHAQsEcTBvMG0GCCsGAQUFBzALhmFy
c3luYzovL3Jwa2kuYXVndXN0LnR3L3JlcG8vd0ZsYXJlLzAvMzIzMzJlMzEzMzM4
MmUzMjMzMzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzMzNDM1MzMucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAAXiugwDQYJKoZIhvcNAQELBQADggEBAJvTojLW6K5BaoBxLx1MR73m
uWToicv6W2uOqSdeLQjjK2u1IDuQAY/VoXvFPsO9Ea7ysOUT1Aah2K15veIg8oo5
0/4ss+rMELdMQ2XMxoau09PXWG84GYlJqJU1XErk6/qfdIjc54FPBmY4CxRS9FJm
B7O7CSKRlFeEdB48Oi4YCCxJA6lqJ7kdLS3L1GWTcxWNa9dZbbAenmcYVTfZHHc+
CVkawZUdsrhXfycMGlclTCQapKhnifQsKUOab7QmS7K0Js9vcKDBqmtY7thzVTof
PiHjjENCfoEQeAM7lxVTt0a4l37M4UyYrfpMn0CIeoAN7SzgOve5H4eZptVUIYI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:00 2024 by rpki-client on console-fra.rpki-client.org