Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/910gb_KbvWKTV8ok0NLr-4DdqFg.roa
File:                     910gb_KbvWKTV8ok0NLr-4DdqFg.roa (raw, json)
Hash identifier:          tafShDsokOJCK3tjqSULabP3/ETBYzf5uJpARBXR018=
Subject key identifier:   F7:5D:20:6F:F2:9B:BD:62:93:57:CA:24:D0:D2:EB:FB:80:DD:A8:58
Certificate issuer:       /CN=57A994BD60555145CB6452DC6A980FC851136BDA
Certificate serial:       0440
Authority key identifier: 57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/910gb_KbvWKTV8ok0NLr-4DdqFg.roa
Signing time:             Fri 01 Sep 2023 08:03:46 +0000
ROA not before:           Fri 01 Sep 2023 08:03:46 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     38136
IP address blocks:        2406:8dc0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1088 (0x440)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A994BD60555145CB6452DC6A980FC851136BDA
        Validity
            Not Before: Sep  1 08:03:46 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=F75D206FF29BBD629357CA24D0D2EBFB80DDA858
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:90:e9:1f:d2:58:de:47:77:d7:a6:0d:ff:f9:
                    2c:49:7c:8e:73:0b:c6:c8:3e:61:55:a7:dc:54:5b:
                    7d:cb:16:77:3c:10:64:83:68:3b:6e:57:af:e0:2d:
                    18:77:3f:48:22:9f:6c:2b:f9:86:07:e5:b2:51:d4:
                    ab:6f:e4:69:45:11:0c:72:70:f7:ab:34:05:3f:6e:
                    82:a7:58:f9:d4:2f:99:3e:39:a6:a5:00:59:6d:e5:
                    ef:b2:c4:95:62:99:45:d8:18:e2:37:4a:48:e3:da:
                    40:d4:f9:45:79:59:d4:e0:75:0c:cf:24:d3:14:f9:
                    1b:37:7b:95:75:92:19:47:37:88:ee:cf:29:17:41:
                    83:de:a6:27:ae:da:c2:8f:ed:37:95:2c:da:71:65:
                    95:33:43:0c:6e:ce:88:58:72:69:31:0a:b6:d5:e6:
                    6c:79:aa:9e:54:9d:09:40:d4:c3:0a:ef:78:4a:6b:
                    8e:29:59:9a:bb:26:fe:b4:ae:11:61:67:1a:41:2c:
                    fc:3b:74:fd:16:d2:ea:01:61:d0:0e:6a:97:95:e1:
                    cf:02:4b:3b:6a:81:f4:8e:27:86:e3:b3:48:f2:8d:
                    61:37:28:de:85:49:19:50:8e:4b:73:a7:45:27:96:
                    4f:f0:67:01:0d:af:2e:e9:6c:4b:5a:f0:3e:8b:31:
                    31:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:5D:20:6F:F2:9B:BD:62:93:57:CA:24:D0:D2:EB:FB:80:DD:A8:58
            X509v3 Authority Key Identifier:
                keyid:57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/910gb_KbvWKTV8ok0NLr-4DdqFg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:8dc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:00:a4:1d:07:84:d4:30:6c:2d:84:31:ce:c9:bf:5e:6a:77:
         e4:a7:22:1c:df:5d:92:a8:cb:77:43:37:26:7e:4f:b7:c1:6b:
         46:02:57:64:72:65:a0:2a:5b:73:04:d5:58:be:d4:b5:50:97:
         bf:2f:97:71:99:2f:ff:2d:bc:99:c0:7d:a3:61:97:40:d8:55:
         6d:83:9d:c7:a5:41:79:ae:ba:98:14:97:b4:61:b1:c8:ff:33:
         8d:02:72:43:2c:0a:3e:78:e3:56:d7:73:24:cb:ec:9c:6f:2e:
         7d:18:17:1a:05:42:31:f1:66:24:8c:62:ba:d5:d2:9c:73:de:
         a3:56:d5:c8:4f:b8:46:e9:63:32:ac:f6:c4:46:d9:76:af:82:
         72:b6:9a:83:d8:b8:d1:90:be:a7:34:e0:22:49:45:d9:12:0c:
         fb:5d:cf:f0:a5:34:22:3e:28:3e:44:f8:be:bc:d1:c9:e9:e5:
         53:60:71:80:2b:e2:2b:cc:71:e5:73:12:04:5b:5c:8e:13:86:
         c3:9f:0e:ab:84:68:b7:9e:e7:62:57:93:5a:31:d2:5e:52:df:
         9d:df:de:f0:4c:f6:af:a9:7f:72:76:39:e0:bf:29:39:80:f6:
         bf:dc:63:b1:40:74:23:49:58:7b:d7:37:77:56:e3:c4:2d:78:
         65:d0:a9:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:10 2024 by rpki-client on console-ams.rpki-client.org