Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/7bGy7lXO0ty8AFmaJj1EV3f_3OI.roa
File:                     7bGy7lXO0ty8AFmaJj1EV3f_3OI.roa (raw, json)
Hash identifier:          P1rRIR1p/N2KvCcScYXcSbXfT18lw4LLWAwZDjvDPVk=
Subject key identifier:   ED:B1:B2:EE:55:CE:D2:DC:BC:00:59:9A:26:3D:44:57:77:FF:DC:E2
Certificate issuer:       /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial:       0F63
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/7bGy7lXO0ty8AFmaJj1EV3f_3OI.roa
Signing time:             Thu 15 Sep 2022 02:40:22 +0000
ROA not before:           Thu 15 Sep 2022 02:40:22 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     7482
IP address blocks:        60.244.128.0/17 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3939 (0xf63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
        Validity
            Not Before: Sep 15 02:40:22 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=EDB1B2EE55CED2DCBC00599A263D445777FFDCE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:31:0f:4d:de:62:47:7b:16:7f:a6:8d:00:ec:
                    7e:d2:23:f8:13:a3:81:bc:88:11:af:3e:5a:c7:36:
                    7f:d8:bd:49:8c:ff:7d:08:94:84:0a:c4:0e:d7:03:
                    71:ef:d6:75:ab:af:9a:ef:e2:ad:6f:be:a1:e1:11:
                    aa:d1:ef:41:8a:15:f5:c5:e2:a3:52:cc:70:63:0b:
                    91:3b:38:63:19:ec:8a:80:55:c7:5f:80:67:bb:ff:
                    35:ee:6c:8e:ed:0e:4d:9e:d7:2b:1f:c6:a6:1c:90:
                    80:8d:f0:5e:03:14:8e:d8:e5:1b:dc:99:6b:2f:74:
                    c7:8a:74:04:ef:96:09:57:d0:71:c8:2c:07:60:ea:
                    df:78:b5:63:cc:e2:3c:9b:62:1c:f5:34:4e:a1:51:
                    19:5e:cf:79:aa:e0:dd:08:d4:29:21:5e:50:5f:9d:
                    99:5b:ab:16:e8:c2:28:ff:a1:c5:11:e1:09:bb:88:
                    c4:88:b0:54:a3:1f:24:32:e1:ab:6a:bd:47:52:48:
                    c7:28:93:25:2a:58:2a:bc:55:65:64:96:a2:d0:84:
                    7d:58:23:e7:bc:5c:16:69:d0:6d:0e:13:b2:28:d9:
                    b6:15:e1:89:15:02:e2:ba:01:7d:4d:8e:0b:d9:84:
                    07:48:3d:a2:e5:6e:9e:ad:36:2d:eb:ae:c4:27:ff:
                    11:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:B1:B2:EE:55:CE:D2:DC:BC:00:59:9A:26:3D:44:57:77:FF:DC:E2
            X509v3 Authority Key Identifier:
                keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/7bGy7lXO0ty8AFmaJj1EV3f_3OI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  60.244.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         3d:31:c6:b7:b6:f5:92:51:2d:c0:af:56:39:96:52:e3:0c:da:
         b6:24:08:e7:f5:bb:63:0d:fe:ba:27:9c:d9:6f:1a:0d:af:56:
         37:03:f6:da:5c:3d:81:12:f5:0f:0c:97:9a:fa:d3:4f:f7:44:
         85:f4:e7:b8:d2:43:aa:56:4c:e7:e0:77:82:5c:4c:8a:49:1d:
         5b:6e:cf:19:b6:b8:53:18:0c:81:3d:7f:73:0a:04:ee:5b:8b:
         26:20:b8:41:3c:1b:67:64:d4:50:80:6b:75:ce:00:6e:75:26:
         bd:23:e7:e6:7f:27:9e:89:44:f5:b7:bf:16:92:f6:4c:d5:ee:
         74:95:ff:4f:5e:e5:97:e9:fb:6e:01:93:de:d9:f1:83:aa:29:
         2f:0a:2a:f1:7f:e1:94:5d:50:f6:a6:9c:0b:55:fb:07:94:83:
         7c:9c:15:29:00:b9:ed:9e:4a:8d:61:93:a7:3d:8b:e0:21:7a:
         f4:b1:cf:00:c3:b6:20:6c:94:a5:b9:30:f2:18:8c:66:f4:83:
         9c:5a:48:ea:af:03:60:8b:e9:4c:06:b1:d5:c0:7b:05:90:7f:
         42:83:ad:72:28:ad:36:b0:ed:02:7d:cd:5c:ee:b8:1e:44:a9:
         43:77:9c:66:dd:9f:24:be:6e:6e:15:3c:8e:6b:b9:12:7c:68:
         30:6a:71:ae
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICD2MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NjQyMzBGM0UzOUJFRkJCNzNBN0Q0RERCMjZGRTJENDQ2RUUyNTAeFw0yMjA5MTUw
MjQwMjJaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEVEQjFCMkVFNTVDRUQy
RENCQzAwNTk5QTI2M0Q0NDU3NzdGRkRDRTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDfMQ9N3mJHexZ/po0A7H7SI/gTo4G8iBGvPlrHNn/YvUmM/30I
lIQKxA7XA3Hv1nWrr5rv4q1vvqHhEarR70GKFfXF4qNSzHBjC5E7OGMZ7IqAVcdf
gGe7/zXubI7tDk2e1ysfxqYckICN8F4DFI7Y5RvcmWsvdMeKdATvlglX0HHILAdg
6t94tWPM4jybYhz1NE6hURlez3mq4N0I1CkhXlBfnZlbqxbowij/ocUR4Qm7iMSI
sFSjHyQy4atqvUdSSMcokyUqWCq8VWVklqLQhH1YI+e8XBZp0G0OE7Io2bYV4YkV
AuK6AX1NjgvZhAdIPaLlbp6tNi3rrsQn/xG7AgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQU7bGy7lXO0ty8AFmaJj1EV3f/3OIwHwYDVR0jBBgwFoAU+wZCMPPjm++7c6fU
3bJv4tRG7iUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBPTC8t
d1pDTVBQam0tLTdjNmZVM2JKdjR0Ukc3aVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
Ly13WkNNUFBqbS0tN2M2ZlUzYkp2NHRSRzdpVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0FQT0wvN2JHeTdsWE8wdHk4QUZtYUpqMUVW
M2ZfM09JLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBzz0gDAN
BgkqhkiG9w0BAQsFAAOCAQEAPTHGt7b1klEtwK9WOZZS4wzatiQI5/W7Yw3+uiec
2W8aDa9WNwP22lw9gRL1DwyXmvrTT/dEhfTnuNJDqlZM5+B3glxMikkdW27PGba4
UxgMgT1/cwoE7luLJiC4QTwbZ2TUUIBrdc4AbnUmvSPn5n8nnolE9be/FpL2TNXu
dJX/T17ll+n7bgGT3tnxg6opLwoq8X/hlF1Q9qacC1X7B5SDfJwVKQC57Z5KjWGT
pz2L4CF69LHPAMO2IGyUpbkw8hiMZvSDnFpI6q8DYIvpTAax1cB7BZB/QoOtciit
NrDtAn3NXO64HkSpQ3ecZt2fJL5ubhU8jmu5EnxoMGpxrg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:00 2024 by rpki-client on console-ams.rpki-client.org