Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/3LINK/88wQpUojh_kK268_cRW_uHsOUiI.roa
File:                     88wQpUojh_kK268_cRW_uHsOUiI.roa (raw, json)
Hash identifier:          0qkrHM3H/8kkhweUgg9qkVRu5UDD+aONy4/dPis23Dg=
Subject key identifier:   F3:CC:10:A5:4A:23:87:F9:0A:DB:AF:3F:71:15:BF:B8:7B:0E:52:22
Certificate issuer:       /CN=F221632D310D085A9390799E5A49FFF18EBDFDB4
Certificate serial:       116B
Authority key identifier: F2:21:63:2D:31:0D:08:5A:93:90:79:9E:5A:49:FF:F1:8E:BD:FD:B4
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/8iFjLTENCFqTkHmeWkn_8Y69_bQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/3LINK/88wQpUojh_kK268_cRW_uHsOUiI.roa
Signing time:             Fri 01 Sep 2023 07:41:07 +0000
ROA not before:           Fri 01 Sep 2023 07:41:07 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     17408
IP address blocks:        103.123.252.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4459 (0x116b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F221632D310D085A9390799E5A49FFF18EBDFDB4
        Validity
            Not Before: Sep  1 07:41:07 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=F3CC10A54A2387F90ADBAF3F7115BFB87B0E5222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ef:4e:f1:b9:84:a8:f4:6a:12:d1:cd:9f:ad:
                    b4:7a:f7:75:74:24:81:28:d2:9e:24:f3:fd:f0:79:
                    ec:88:55:74:bf:fb:e2:ee:df:04:a5:81:78:06:46:
                    05:d8:96:f9:48:b9:8a:33:01:c8:67:12:0b:1b:79:
                    f9:ca:5d:68:d9:ec:2b:a4:48:b5:bf:9a:88:56:cd:
                    ec:83:4e:ce:71:28:63:f8:26:12:9d:95:f5:76:ae:
                    84:b8:0e:31:7e:27:88:88:ff:99:dc:74:0b:48:71:
                    05:28:9c:a6:de:01:6d:c3:1d:31:97:c8:bf:83:c4:
                    ad:85:e4:7c:c5:5a:03:75:1c:1a:67:f6:fd:01:21:
                    f5:d9:d4:a2:eb:99:7d:ec:5e:61:70:0b:75:36:b4:
                    7b:3e:12:f2:58:c8:8a:fc:78:0a:bc:c5:fc:53:4f:
                    96:8a:1e:3f:50:00:18:4f:d2:6d:53:dd:5a:7b:25:
                    cc:10:9e:dd:24:d5:30:82:04:f2:77:38:84:35:bc:
                    ce:43:29:b7:26:cd:27:eb:ea:b1:13:c8:09:3c:9c:
                    ef:2b:9f:ba:4f:83:b4:ea:85:f4:07:eb:af:6a:46:
                    57:5f:23:46:35:2c:56:e0:93:67:c3:05:52:5a:25:
                    19:b6:58:69:c8:8c:f0:f2:cc:2d:70:28:3b:e2:58:
                    32:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:CC:10:A5:4A:23:87:F9:0A:DB:AF:3F:71:15:BF:B8:7B:0E:52:22
            X509v3 Authority Key Identifier:
                keyid:F2:21:63:2D:31:0D:08:5A:93:90:79:9E:5A:49:FF:F1:8E:BD:FD:B4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3LINK/8iFjLTENCFqTkHmeWkn_8Y69_bQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/8iFjLTENCFqTkHmeWkn_8Y69_bQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3LINK/88wQpUojh_kK268_cRW_uHsOUiI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.123.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:f6:0d:a2:e5:a0:6a:f3:eb:ee:5b:07:c1:6c:e6:2a:93:14:
         6a:ba:af:c8:30:1f:81:eb:34:1d:96:df:6e:ed:34:cd:35:2f:
         36:64:c9:c1:21:80:f5:80:31:c7:09:d3:8f:0f:c7:ba:3e:60:
         4c:c0:92:cf:29:31:48:70:66:13:b3:6b:79:58:f3:33:0e:1d:
         7b:f1:f3:65:53:78:24:03:24:6f:44:48:82:4f:f9:80:e7:fd:
         87:39:37:d5:cd:8a:ee:cb:84:1f:f7:9c:fa:6e:ad:fa:aa:72:
         22:5f:83:a3:b4:5c:f5:db:49:60:37:88:8b:7b:2f:5b:ee:bf:
         1b:ea:ad:97:4b:22:6c:46:5d:f6:ce:f3:2b:d3:f6:e5:90:80:
         4d:48:1c:cb:4e:53:30:bc:fa:cf:4b:de:5b:ac:56:1c:96:e8:
         0b:03:3e:13:e3:aa:00:7d:f9:ca:62:29:4d:ea:ce:28:f8:45:
         21:62:12:67:20:61:b8:76:fc:45:2b:80:a7:60:94:fe:23:cc:
         70:16:e3:eb:5c:0c:f4:1b:30:6e:62:7a:d6:a9:e3:61:72:2a:
         86:d2:12:da:3f:8d:4c:15:8f:99:b6:4d:8b:c7:34:8f:e8:31:
         fa:31:2c:90:32:2d:8b:60:8b:4b:44:47:0a:27:73:07:a0:c9:
         d5:77:98:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:30 2024 by rpki-client on console-fra.rpki-client.org