Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/05UoGZEXyiHwi67leXQGkcCm4so.roa
File:                     05UoGZEXyiHwi67leXQGkcCm4so.roa (raw, json)
Hash identifier:          PXfyJikMN54+kYTmAmj0eBHaeS30Gi/YCafMd+ZB7jw=
Subject key identifier:   D3:95:28:19:91:17:CA:21:F0:8B:AE:E5:79:74:06:91:C0:A6:E2:CA
Certificate issuer:       /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial:       0F63
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/05UoGZEXyiHwi67leXQGkcCm4so.roa
Signing time:             Thu 15 Sep 2022 02:39:56 +0000
ROA not before:           Thu 15 Sep 2022 02:39:56 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     7482
IP address blocks:        210.200.128.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3939 (0xf63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
        Validity
            Not Before: Sep 15 02:39:56 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=D39528199117CA21F08BAEE579740691C0A6E2CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a0:48:70:21:81:2b:64:c7:b2:a1:85:7b:77:
                    79:bc:cc:f9:e3:e4:04:0c:a8:ed:5e:54:d3:e5:73:
                    64:01:74:86:47:fe:3b:8a:22:8d:71:ed:e0:14:ea:
                    32:98:ca:41:5c:e6:ae:66:61:66:33:a9:87:73:55:
                    d9:a9:b2:46:6b:ef:66:20:ab:42:39:0f:a9:8d:c1:
                    2d:aa:f7:f7:b3:74:2f:51:e4:fb:95:51:7a:eb:a7:
                    0e:cf:c6:8f:2e:cc:a0:8a:c3:dc:fb:de:0a:cf:01:
                    62:c5:6c:82:4f:df:94:64:a9:25:d1:d9:cf:6f:52:
                    17:d2:f7:14:ff:55:7d:76:2d:41:eb:d6:d5:34:9f:
                    a7:04:97:6d:d9:c4:c4:41:a3:46:37:e5:71:63:8f:
                    de:16:42:dd:76:d1:fd:9d:06:28:2d:6e:f6:02:c4:
                    8c:18:49:46:f5:ae:6f:eb:0b:6c:2f:79:f6:1a:20:
                    92:48:4e:46:cc:b5:fa:44:46:47:c5:bb:76:b9:4c:
                    85:02:13:28:76:03:45:d3:c5:1b:84:55:71:9a:5b:
                    b5:74:6c:da:89:9c:4a:b6:f2:62:92:00:e7:cc:33:
                    51:30:d7:5c:44:b7:12:6d:1f:e7:ca:9a:f4:5f:19:
                    e5:f2:87:ea:ea:00:bd:e3:5a:4e:fa:fb:31:f7:ba:
                    98:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:95:28:19:91:17:CA:21:F0:8B:AE:E5:79:74:06:91:C0:A6:E2:CA
            X509v3 Authority Key Identifier:
                keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/05UoGZEXyiHwi67leXQGkcCm4so.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.200.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         58:6f:5b:c8:68:5b:97:1e:ab:fd:b8:3a:e6:fb:00:e5:5e:01:
         ec:b2:dc:47:b5:d2:3b:59:8d:36:3e:84:46:d1:3a:cd:2e:5a:
         ff:c8:5d:18:f5:7e:4a:93:e7:8d:7c:a7:f6:76:90:2e:23:fd:
         95:a0:ba:b1:2c:65:48:08:f9:f7:77:de:12:64:34:b1:3d:fd:
         7f:3e:77:a5:32:39:36:a4:7e:d9:04:b2:8b:6f:44:2f:21:9c:
         5d:14:80:66:41:a0:ed:3b:bd:93:d3:49:b2:e6:72:11:0f:64:
         c4:a6:21:ad:61:de:3b:11:2a:f4:44:5e:c7:6b:f6:39:06:f4:
         98:7a:95:3b:2f:2b:62:5d:c7:9a:56:b8:de:2e:60:4b:d3:45:
         ae:69:38:c2:98:1c:c1:ed:13:ec:e4:15:13:75:60:e3:5f:e6:
         0a:38:4a:e0:40:e2:dc:49:3a:55:eb:cb:eb:3c:b8:7e:66:8e:
         08:0c:d8:4b:2e:16:fb:0b:3e:7c:66:d3:98:d8:76:58:99:b0:
         a8:b7:3b:d4:c3:6e:b1:6f:f5:99:d3:8d:13:77:78:e4:b9:18:
         54:87:5c:85:d7:89:ca:86:cf:7c:4f:13:f3:12:48:90:a0:03:
         74:5d:03:90:50:38:6b:52:6a:3a:c2:ae:fd:40:d9:09:c2:ac:
         5e:cf:ea:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:31 2024 by rpki-client on console-fra.rpki-client.org