Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APNT/JKVylpsSzdzsp5mRACEpD5tOmzA.roa
File:                     JKVylpsSzdzsp5mRACEpD5tOmzA.roa (raw, json)
Hash identifier:          afP5mnAfatSugSKiZBu2f6ERZgn0HoQHaacWASZbApU=
Subject key identifier:   24:A5:72:96:9B:12:CD:DC:EC:A7:99:91:00:21:29:0F:9B:4E:9B:30
Certificate issuer:       /CN=C2528D8C5B676FD9A24DFDA7E9217457B7310263
Certificate serial:       103C
Authority key identifier: C2:52:8D:8C:5B:67:6F:D9:A2:4D:FD:A7:E9:21:74:57:B7:31:02:63
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/wlKNjFtnb9miTf2n6SF0V7cxAmM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/APNT/JKVylpsSzdzsp5mRACEpD5tOmzA.roa
Signing time:             Sun 01 May 2022 15:35:13 +0000
ROA not before:           Sun 01 May 2022 15:35:13 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     131659
IP address blocks:        103.130.31.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4156 (0x103c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2528D8C5B676FD9A24DFDA7E9217457B7310263
        Validity
            Not Before: May  1 15:35:13 2022 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=24A572969B12CDDCECA799910021290F9B4E9B30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:5f:22:2b:50:ee:cc:7f:b2:8e:bb:fb:e2:24:
                    4a:41:35:09:ab:6c:09:62:90:fd:36:52:de:13:ba:
                    88:21:00:1e:d0:76:aa:b6:49:73:f3:85:0a:1d:94:
                    63:b4:88:bb:37:37:d9:e2:6f:c4:d9:d4:1d:8c:85:
                    bc:25:71:54:ad:24:7d:5b:07:c3:eb:0a:70:fd:45:
                    76:c5:8a:40:97:92:39:be:29:37:b5:20:b8:93:c4:
                    96:68:e3:e7:40:cf:3d:2c:16:75:de:01:ea:1f:79:
                    e5:0c:98:02:2c:d2:0d:e9:51:cb:56:a6:22:b7:9b:
                    61:a5:b4:6c:1e:9e:7d:6a:40:8d:99:01:c2:89:8d:
                    34:3c:a2:28:10:67:97:61:7b:f5:d8:e2:47:2d:7b:
                    8b:3c:5f:2c:56:49:e3:e2:ed:4e:ac:fb:31:24:60:
                    5f:16:1e:6a:7c:5d:2d:fc:f8:ab:d0:80:bf:b8:99:
                    1d:8c:6c:7b:c2:cd:e9:44:6c:f5:03:89:1e:a6:a9:
                    26:e5:66:41:bd:05:7f:d5:87:26:22:b5:eb:b7:3e:
                    ad:28:97:7a:c1:a4:88:1f:d7:22:fd:9f:39:6a:22:
                    43:82:7c:45:d0:22:7f:01:06:62:94:89:3a:b7:37:
                    1b:50:79:e5:c2:6e:30:b3:97:78:e1:68:0a:9d:d3:
                    e0:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:A5:72:96:9B:12:CD:DC:EC:A7:99:91:00:21:29:0F:9B:4E:9B:30
            X509v3 Authority Key Identifier:
                keyid:C2:52:8D:8C:5B:67:6F:D9:A2:4D:FD:A7:E9:21:74:57:B7:31:02:63

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APNT/wlKNjFtnb9miTf2n6SF0V7cxAmM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wlKNjFtnb9miTf2n6SF0V7cxAmM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APNT/JKVylpsSzdzsp5mRACEpD5tOmzA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:59:46:a4:c7:2f:36:19:3c:c8:82:a1:3d:80:ee:ba:36:17:
         6b:2f:bb:09:8d:8f:e8:a9:3c:7c:7d:56:96:3f:c2:ef:e4:d1:
         e8:6f:6a:b0:02:01:f5:d7:1e:ae:b5:1a:74:f4:5d:fb:34:d7:
         82:04:c7:f8:11:d0:98:01:90:db:b3:36:8c:90:c2:0e:04:43:
         33:62:22:af:f9:69:d9:8b:28:b7:24:6b:8a:ee:8c:e6:de:4f:
         be:a6:bd:03:ab:8b:61:d8:fc:3d:2f:98:78:10:58:dd:dc:a3:
         b2:73:73:02:5c:4f:21:7b:82:58:ac:8d:20:59:e5:b9:78:3b:
         8d:eb:fb:b3:d6:36:e0:35:ed:41:58:1c:af:29:30:92:61:37:
         3d:7d:45:16:46:b7:e2:21:8f:b8:cf:4d:e9:30:af:2f:c3:03:
         89:9a:5d:96:50:41:5c:f5:1c:fc:76:29:43:e0:f5:de:6c:be:
         1a:16:ea:e7:23:6a:e0:0a:e6:93:00:dc:db:53:6a:fd:8b:87:
         0d:84:b3:77:4c:5d:3b:20:77:94:74:8c:9a:37:c0:ba:80:23:
         05:9b:e3:dc:8a:19:5e:30:d5:2c:9a:ba:47:07:d4:5d:95:60:
         d8:23:4f:bd:0f:a8:7e:68:c0:b4:f0:02:7a:e3:cf:d3:ea:18:
         dd:5b:39:1d
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICEDwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzI1
MjhEOEM1QjY3NkZEOUEyNERGREE3RTkyMTc0NTdCNzMxMDI2MzAeFw0yMjA1MDEx
NTM1MTNaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDI0QTU3Mjk2OUIxMkNE
RENFQ0E3OTk5MTAwMjEyOTBGOUI0RTlCMzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDcXyIrUO7Mf7KOu/viJEpBNQmrbAlikP02Ut4TuoghAB7Qdqq2
SXPzhQodlGO0iLs3N9nib8TZ1B2MhbwlcVStJH1bB8PrCnD9RXbFikCXkjm+KTe1
ILiTxJZo4+dAzz0sFnXeAeofeeUMmAIs0g3pUctWpiK3m2GltGwenn1qQI2ZAcKJ
jTQ8oigQZ5dhe/XY4kcte4s8XyxWSePi7U6s+zEkYF8WHmp8XS38+KvQgL+4mR2M
bHvCzelEbPUDiR6mqSblZkG9BX/VhyYiteu3Pq0ol3rBpIgf1yL9nzlqIkOCfEXQ
In8BBmKUiTq3NxtQeeXCbjCzl3jhaAqd0+DjAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUJKVylpsSzdzsp5mRACEpD5tOmzAwHwYDVR0jBBgwFoAUwlKNjFtnb9miTf2n
6SF0V7cxAmMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBOVC93
bEtOakZ0bmI5bWlUZjJuNlNGMFY3Y3hBbU0uY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L3dsS05qRnRuYjltaVRmMm42U0YwVjdjeEFtTS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0FQTlQvSktWeWxwc1N6ZHpzcDVtUkFDRXBE
NXRPbXpBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGeCHzAN
BgkqhkiG9w0BAQsFAAOCAQEAAVlGpMcvNhk8yIKhPYDuujYXay+7CY2P6Kk8fH1W
lj/C7+TR6G9qsAIB9dcerrUadPRd+zTXggTH+BHQmAGQ27M2jJDCDgRDM2Iir/lp
2YsotyRriu6M5t5Pvqa9A6uLYdj8PS+YeBBY3dyjsnNzAlxPIXuCWKyNIFnluXg7
jev7s9Y24DXtQVgcrykwkmE3PX1FFka34iGPuM9N6TCvL8MDiZpdllBBXPUc/HYp
Q+D13my+Ghbq5yNq4ArmkwDc21Nq/YuHDYSzd0xdOyB3lHSMmjfAuoAjBZvj3IoZ
XjDVLJq6RwfUXZVg2CNPvQ+ofmjAtPACeuPP0+oY3Vs5HQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:30 2024 by rpki-client on console-fra.rpki-client.org