Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APNT/tv3-sWatn9Q1zeI5HWrTY3UfYzU.roa
File:                     tv3-sWatn9Q1zeI5HWrTY3UfYzU.roa (raw, json)
Hash identifier:          v+6obSeYZ9qssGZsv+Hog/Q9Bt56nqu7FE+v3zSen8s=
Subject key identifier:   B6:FD:FE:B1:66:AD:9F:D4:35:CD:E2:39:1D:6A:D3:63:75:1F:63:35
Certificate issuer:       /CN=C2528D8C5B676FD9A24DFDA7E9217457B7310263
Certificate serial:       1033
Authority key identifier: C2:52:8D:8C:5B:67:6F:D9:A2:4D:FD:A7:E9:21:74:57:B7:31:02:63
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/wlKNjFtnb9miTf2n6SF0V7cxAmM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/APNT/tv3-sWatn9Q1zeI5HWrTY3UfYzU.roa
Signing time:             Sun 01 May 2022 15:32:46 +0000
ROA not before:           Sun 01 May 2022 15:32:46 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     131659
IP address blocks:        103.130.29.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4147 (0x1033)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2528D8C5B676FD9A24DFDA7E9217457B7310263
        Validity
            Not Before: May  1 15:32:46 2022 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=B6FDFEB166AD9FD435CDE2391D6AD363751F6335
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a8:a5:42:23:01:30:93:3a:72:f6:f7:1f:d7:
                    ce:f9:cf:8f:f2:24:d5:cc:00:1d:fe:16:75:17:5f:
                    9b:5b:d6:bd:4c:e7:65:f3:49:3d:8c:eb:47:80:bf:
                    a8:c7:07:e2:87:df:6d:33:14:76:06:be:a2:db:21:
                    57:0f:eb:63:18:1d:bb:71:7a:c0:05:cb:b6:d7:32:
                    47:fb:4d:f1:d7:09:b9:55:47:4b:4a:19:6f:da:a5:
                    8c:dd:89:0b:cf:db:ab:40:b0:36:83:88:1b:a8:b4:
                    d1:51:23:b7:c1:db:7d:c3:c6:89:63:66:24:53:9c:
                    6a:be:53:95:45:09:22:99:54:18:b0:07:3f:dc:18:
                    2d:19:e2:82:3a:e3:77:97:c9:55:97:f5:72:ee:94:
                    95:d0:ce:48:d2:d0:27:46:6b:82:38:cc:f9:3b:87:
                    f2:eb:c8:ae:62:6f:99:7e:ab:26:c2:1c:9a:1a:95:
                    33:2e:bf:23:7b:7a:76:d1:d2:84:6f:93:0d:53:2b:
                    89:e0:87:d4:3d:b0:6f:79:0c:d4:ef:99:98:d0:1d:
                    33:93:cd:e8:24:9c:80:ec:c0:31:cd:d5:ef:06:83:
                    91:1b:6e:8e:f8:8c:b8:ea:dc:fb:18:0e:61:62:b9:
                    fb:2b:9f:2f:d8:74:6b:8a:37:be:54:c9:b3:7d:a8:
                    2b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:FD:FE:B1:66:AD:9F:D4:35:CD:E2:39:1D:6A:D3:63:75:1F:63:35
            X509v3 Authority Key Identifier:
                keyid:C2:52:8D:8C:5B:67:6F:D9:A2:4D:FD:A7:E9:21:74:57:B7:31:02:63

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APNT/wlKNjFtnb9miTf2n6SF0V7cxAmM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wlKNjFtnb9miTf2n6SF0V7cxAmM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APNT/tv3-sWatn9Q1zeI5HWrTY3UfYzU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:33:74:ea:59:1e:db:33:e7:ba:b5:8f:26:d0:8e:e2:c9:c0:
         d0:8e:5b:8a:ce:44:30:c8:8f:7f:00:d0:3f:cc:e5:5e:1c:97:
         01:35:cb:53:db:dd:41:af:6f:eb:92:f1:96:b1:13:0e:df:fe:
         78:bc:48:95:a0:9a:66:f2:2b:4d:91:da:5e:34:b0:37:6e:b4:
         aa:32:71:ea:73:8e:eb:a2:a5:2b:b0:5d:a7:3b:19:f6:43:89:
         80:f3:1a:ba:22:40:6e:7f:eb:11:03:a9:2c:a3:51:6c:4c:59:
         8f:5b:22:64:9e:80:7a:52:e2:5f:7d:b4:80:34:3b:bc:81:84:
         f0:16:3f:89:0a:08:8e:e0:30:60:7a:db:7e:fe:a0:1c:4d:e0:
         be:eb:53:0a:a5:69:e0:c7:2c:07:0b:c9:ad:96:b2:75:6a:4f:
         09:fd:9f:22:89:81:4b:3d:fc:39:2b:5b:ed:9a:00:7f:21:48:
         5d:4f:3a:69:ed:9e:99:38:9b:f2:da:1b:5f:c2:0b:44:d8:4c:
         0e:57:d8:86:a3:36:b8:03:ab:56:da:e9:6d:5a:22:77:f3:de:
         e8:b3:82:71:f3:02:8c:3b:8b:48:f3:d1:bf:7a:b3:49:d3:f4:
         5e:18:ea:0f:69:35:e6:3a:58:36:0e:d2:55:48:cb:48:d9:ef:
         fa:ed:f1:7f
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICEDMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzI1
MjhEOEM1QjY3NkZEOUEyNERGREE3RTkyMTc0NTdCNzMxMDI2MzAeFw0yMjA1MDEx
NTMyNDZaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEI2RkRGRUIxNjZBRDlG
RDQzNUNERTIzOTFENkFEMzYzNzUxRjYzMzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDLqKVCIwEwkzpy9vcf1875z4/yJNXMAB3+FnUXX5tb1r1M52Xz
ST2M60eAv6jHB+KH320zFHYGvqLbIVcP62MYHbtxesAFy7bXMkf7TfHXCblVR0tK
GW/apYzdiQvP26tAsDaDiBuotNFRI7fB233DxoljZiRTnGq+U5VFCSKZVBiwBz/c
GC0Z4oI643eXyVWX9XLulJXQzkjS0CdGa4I4zPk7h/LryK5ib5l+qybCHJoalTMu
vyN7enbR0oRvkw1TK4ngh9Q9sG95DNTvmZjQHTOTzegknIDswDHN1e8Gg5Ebbo74
jLjq3PsYDmFiufsrny/YdGuKN75UybN9qCvdAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUtv3+sWatn9Q1zeI5HWrTY3UfYzUwHwYDVR0jBBgwFoAUwlKNjFtnb9miTf2n
6SF0V7cxAmMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBOVC93
bEtOakZ0bmI5bWlUZjJuNlNGMFY3Y3hBbU0uY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L3dsS05qRnRuYjltaVRmMm42U0YwVjdjeEFtTS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0FQTlQvdHYzLXNXYXRuOVExemVJNUhXclRZ
M1VmWXpVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGeCHTAN
BgkqhkiG9w0BAQsFAAOCAQEAVTN06lke2zPnurWPJtCO4snA0I5bis5EMMiPfwDQ
P8zlXhyXATXLU9vdQa9v65LxlrETDt/+eLxIlaCaZvIrTZHaXjSwN260qjJx6nOO
66KlK7BdpzsZ9kOJgPMauiJAbn/rEQOpLKNRbExZj1siZJ6AelLiX320gDQ7vIGE
8BY/iQoIjuAwYHrbfv6gHE3gvutTCqVp4McsBwvJrZaydWpPCf2fIomBSz38OStb
7ZoAfyFIXU86ae2emTib8tobX8ILRNhMDlfYhqM2uAOrVtrpbVoid/Pe6LOCcfMC
jDuLSPPRv3qzSdP0XhjqD2k15jpYNg7SVUjLSNnv+u3xfw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:30 2024 by rpki-client on console-fra.rpki-client.org