Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/0-JzbSIcILVfMh5-lp-fFuWKDjI.roa
File:                     0-JzbSIcILVfMh5-lp-fFuWKDjI.roa (raw, json)
Hash identifier:          bSnJHG+tQ8XfOAyybsR0wLBrMr87M5U6GsbzK73utd4=
Subject key identifier:   D3:E2:73:6D:22:1C:20:B5:5F:32:1E:7E:96:9F:9F:16:E5:8A:0E:32
Certificate issuer:       /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial:       0F63
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/0-JzbSIcILVfMh5-lp-fFuWKDjI.roa
Signing time:             Thu 15 Sep 2022 02:39:52 +0000
ROA not before:           Thu 15 Sep 2022 02:39:52 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     9922
IP address blocks:        124.218.128.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3939 (0xf63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
        Validity
            Not Before: Sep 15 02:39:52 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=D3E2736D221C20B55F321E7E969F9F16E58A0E32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:2d:6a:4d:fc:ef:d0:79:b0:a6:e2:4d:83:4c:
                    8f:88:36:8a:6c:6e:fd:d2:16:44:ed:86:80:1b:2e:
                    7c:5a:89:7a:06:b7:20:2c:b2:a0:5f:ed:4b:f9:89:
                    e7:81:de:31:8b:4f:32:36:38:d6:60:36:15:d5:6e:
                    ab:11:71:47:2f:03:53:e6:a8:b5:0d:1d:20:d6:39:
                    70:e6:d6:ab:ac:16:3e:d4:64:6d:71:74:e0:cc:00:
                    82:30:ba:4c:fd:0f:6e:8e:f0:9b:96:66:47:f8:b9:
                    8b:68:8f:07:48:d2:fe:ca:26:a9:90:08:06:34:8c:
                    ec:99:9b:68:43:2f:a2:93:18:b8:f3:f6:f0:b2:3d:
                    ec:41:1f:c3:1a:38:6d:e2:f7:42:77:3b:d3:75:07:
                    42:ba:4b:72:29:49:f5:e0:6e:9e:1d:d3:95:38:03:
                    23:f7:13:25:90:c8:c6:a1:19:09:48:fa:31:61:80:
                    81:a4:b7:95:23:47:8e:fb:43:1a:11:79:2e:17:32:
                    11:c7:0b:a0:2d:4b:7e:7a:a0:7c:38:2b:a3:65:5a:
                    bf:13:3a:2b:21:d4:45:4c:2a:5e:e8:b9:0b:35:a0:
                    bb:d2:87:66:bd:54:df:3b:df:52:34:ab:69:05:52:
                    f8:d6:37:85:0a:9c:44:a6:50:ac:6b:b1:9a:a4:00:
                    d8:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:E2:73:6D:22:1C:20:B5:5F:32:1E:7E:96:9F:9F:16:E5:8A:0E:32
            X509v3 Authority Key Identifier:
                keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/0-JzbSIcILVfMh5-lp-fFuWKDjI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.218.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         a6:6b:9d:fb:63:20:03:81:e7:41:45:dd:80:80:c6:57:f5:c9:
         95:08:c7:a1:54:0f:6b:76:1e:94:71:1e:8d:dc:20:42:6e:0a:
         60:1f:f3:9c:a2:0b:e7:a4:af:86:fa:6e:09:c1:7e:6a:41:ad:
         c1:b2:2e:f6:a3:e8:59:69:42:35:db:13:c1:fb:c5:e3:24:cc:
         49:ee:3e:fa:14:f3:c3:4e:19:6a:e3:b0:35:a5:95:c8:f1:02:
         91:ac:42:44:b0:bd:88:a0:23:c4:2a:b6:67:81:65:ab:3b:56:
         c3:b2:73:d4:05:20:bd:06:de:fd:bd:21:d5:69:f8:92:9f:39:
         80:80:7b:06:0d:4a:b9:db:a2:08:f4:fd:0b:6b:c2:3d:84:30:
         e5:59:65:56:19:d3:80:b0:95:85:69:44:56:32:6a:5b:5e:82:
         4b:da:4f:72:62:63:12:9c:dc:38:b0:9f:5c:6e:7f:c6:36:80:
         ed:06:c0:ca:ae:05:36:76:ca:72:85:38:ae:79:01:ef:26:df:
         61:98:45:d6:37:32:31:43:ae:29:96:89:8e:e5:28:c7:53:17:
         f0:bb:59:50:ce:56:18:23:89:a7:3b:76:5d:0c:c5:7c:3f:0d:
         37:be:62:6c:50:a6:47:84:c9:86:89:46:73:42:67:82:0d:34:
         7d:76:b6:65
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICD2MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NjQyMzBGM0UzOUJFRkJCNzNBN0Q0RERCMjZGRTJENDQ2RUUyNTAeFw0yMjA5MTUw
MjM5NTJaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEQzRTI3MzZEMjIxQzIw
QjU1RjMyMUU3RTk2OUY5RjE2RTU4QTBFMzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCVLWpN/O/QebCm4k2DTI+INopsbv3SFkTthoAbLnxaiXoGtyAs
sqBf7Uv5ieeB3jGLTzI2ONZgNhXVbqsRcUcvA1PmqLUNHSDWOXDm1qusFj7UZG1x
dODMAIIwukz9D26O8JuWZkf4uYtojwdI0v7KJqmQCAY0jOyZm2hDL6KTGLjz9vCy
PexBH8MaOG3i90J3O9N1B0K6S3IpSfXgbp4d05U4AyP3EyWQyMahGQlI+jFhgIGk
t5UjR477QxoReS4XMhHHC6AtS356oHw4K6NlWr8TOish1EVMKl7ouQs1oLvSh2a9
VN8731I0q2kFUvjWN4UKnESmUKxrsZqkANgNAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQU0+JzbSIcILVfMh5+lp+fFuWKDjIwHwYDVR0jBBgwFoAU+wZCMPPjm++7c6fU
3bJv4tRG7iUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBPTC8t
d1pDTVBQam0tLTdjNmZVM2JKdjR0Ukc3aVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
Ly13WkNNUFBqbS0tN2M2ZlUzYkp2NHRSRzdpVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0FQT0wvMC1KemJTSWNJTFZmTWg1LWxwLWZG
dVdLRGpJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBnzagDAN
BgkqhkiG9w0BAQsFAAOCAQEApmud+2MgA4HnQUXdgIDGV/XJlQjHoVQPa3YelHEe
jdwgQm4KYB/znKIL56SvhvpuCcF+akGtwbIu9qPoWWlCNdsTwfvF4yTMSe4++hTz
w04ZauOwNaWVyPECkaxCRLC9iKAjxCq2Z4FlqztWw7Jz1AUgvQbe/b0h1Wn4kp85
gIB7Bg1KuduiCPT9C2vCPYQw5VllVhnTgLCVhWlEVjJqW16CS9pPcmJjEpzcOLCf
XG5/xjaA7QbAyq4FNnbKcoU4rnkB7ybfYZhF1jcyMUOuKZaJjuUox1MX8LtZUM5W
GCOJpzt2XQzFfD8NN75ibFCmR4TJholGc0Jngg00fXa2ZQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:31 2024 by rpki-client on console-fra.rpki-client.org