Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/9_h4IhhWIW44mVTU3cJWM29RhT8.roa
File:                     9_h4IhhWIW44mVTU3cJWM29RhT8.roa (raw, json)
Hash identifier:          NSRYPeqrT9UFt7lBIOXGBsBJeMA4Rd8G+lYjq9hv1BU=
Subject key identifier:   F7:F8:78:22:18:56:21:6E:38:99:54:D4:DD:C2:56:33:6F:51:85:3F
Certificate issuer:       /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial:       092D
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/9_h4IhhWIW44mVTU3cJWM29RhT8.roa
Signing time:             Tue 29 Sep 2020 10:01:33 +0000
ROA not before:           Tue 29 Sep 2020 10:01:33 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     17709
IP address blocks:        219.91.0.0/17 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2349 (0x92d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
        Validity
            Not Before: Sep 29 10:01:33 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=F7F878221856216E389954D4DDC256336F51853F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a6:be:61:87:72:cb:76:2c:84:4b:d6:24:8e:
                    50:b9:1d:61:5c:10:40:75:4f:4e:80:d2:e2:25:45:
                    4f:ad:31:06:f6:f8:92:94:2f:1b:42:e6:9d:d6:31:
                    3b:e0:be:37:be:c9:b3:df:57:3b:5f:17:26:41:30:
                    b2:48:66:cf:dc:38:af:e3:2c:f6:5a:b2:78:df:9a:
                    e3:24:83:f9:4c:7e:c4:b1:99:bf:e7:4b:84:09:8a:
                    6e:f3:30:26:e9:58:ab:1b:7a:10:d9:6b:bc:c0:3d:
                    77:85:f9:5f:1b:81:fd:ae:ce:02:71:42:77:2e:d3:
                    ca:65:15:2b:c9:fa:4a:fe:30:5a:7c:74:f7:67:33:
                    89:be:43:1b:e6:dd:a3:bf:e6:b8:5f:ff:b9:7b:46:
                    a1:60:97:bc:6c:3e:69:47:2a:2d:57:96:e7:26:0b:
                    fb:84:66:61:e6:8c:b2:10:7c:7a:00:0d:40:ab:bf:
                    49:83:1b:4c:84:00:b5:8b:93:8a:60:47:9b:b5:02:
                    58:ec:00:06:ea:cd:cd:11:9e:74:e7:50:ff:77:d4:
                    b7:92:9f:b4:73:30:24:e0:51:1c:4a:e5:b5:f3:57:
                    67:27:73:00:0f:2c:99:2e:d2:40:b9:0d:96:de:e7:
                    24:a4:db:ad:9e:fa:af:8d:d6:84:0f:0e:c9:83:dc:
                    13:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:F8:78:22:18:56:21:6E:38:99:54:D4:DD:C2:56:33:6F:51:85:3F
            X509v3 Authority Key Identifier:
                keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/9_h4IhhWIW44mVTU3cJWM29RhT8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.91.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         4f:b0:37:82:a5:63:5c:c2:50:f8:5b:35:ad:f0:b2:3c:63:2f:
         1a:7f:a0:3e:2e:d2:4f:5a:02:49:f2:c5:6e:f4:b2:7a:b3:93:
         38:c1:d2:2d:45:db:be:aa:0a:25:b8:cf:c3:de:a1:60:58:3d:
         4e:c6:67:91:de:72:fa:4a:37:46:ea:06:96:a0:48:2f:f6:84:
         73:f7:e8:e7:24:d7:c5:c1:fe:84:68:c7:fb:72:b0:39:36:26:
         b4:9f:36:d8:31:7e:e1:ea:19:a5:0f:89:c3:1e:e3:e5:6b:05:
         fe:4a:47:47:70:d5:5f:07:d6:91:e8:90:c0:88:ca:ed:a7:f4:
         43:5a:38:73:cb:55:2c:6c:8f:58:60:60:81:83:10:24:55:aa:
         52:11:5a:fc:ca:57:b7:6f:97:94:4d:89:57:a6:92:ff:73:26:
         fb:d2:1b:f7:46:84:a9:db:06:55:08:95:dc:3d:ef:de:71:43:
         7b:f5:36:d6:82:ca:76:4c:d3:69:7f:3f:b9:02:76:6d:b0:f6:
         b9:52:06:43:34:f4:4e:db:4c:ba:6f:e8:ed:95:0d:f0:96:40:
         0d:27:d7:c0:5d:4a:81:50:a7:19:f9:29:e4:fd:d5:75:3f:fe:
         3b:90:62:b1:e6:09:f8:80:db:48:b2:2c:aa:95:48:cb:d2:37:
         4a:71:19:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:00 2024 by rpki-client on console-ams.rpki-client.org