Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/A-v-OWic_6_H5ixS8w6pq_-fXng.roa
File:                     A-v-OWic_6_H5ixS8w6pq_-fXng.roa (raw, json)
Hash identifier:          jQYyRounbGyHwLpqd6xuo+RLC6fFqNbd6iv4ORmjUjc=
Subject key identifier:   03:EB:FE:39:68:9C:FF:AF:C7:E6:2C:52:F3:0E:A9:AB:FF:9F:5E:78
Certificate issuer:       /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial:       090E
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/A-v-OWic_6_H5ixS8w6pq_-fXng.roa
Signing time:             Tue 29 Sep 2020 10:01:24 +0000
ROA not before:           Tue 29 Sep 2020 10:01:24 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     18419
IP address blocks:        218.35.128.0/19 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2318 (0x90e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
        Validity
            Not Before: Sep 29 10:01:24 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=03EBFE39689CFFAFC7E62C52F30EA9ABFF9F5E78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4a:c9:e6:62:75:e4:05:fa:b8:f7:36:f6:21:
                    e5:b5:1a:98:f8:ff:7d:d7:82:7d:2c:4c:77:3b:24:
                    46:83:b3:fb:1d:30:7a:bc:7d:10:96:d5:19:1c:f1:
                    18:34:7c:bf:07:9e:1f:ae:88:8d:d1:c2:55:d8:04:
                    f5:67:36:e0:51:ed:9e:89:05:ee:01:4c:a1:41:e9:
                    4e:0d:04:1b:ef:aa:f2:f7:c8:bc:e4:d6:16:7e:ce:
                    b6:24:e6:48:7e:cd:f3:9b:ed:49:02:2f:22:1e:70:
                    21:b9:65:e1:ad:35:aa:1c:83:ed:f0:d7:69:4d:df:
                    cc:63:57:c4:98:e8:ff:96:9e:ab:cc:54:cb:b5:b0:
                    31:44:44:50:02:17:54:0d:f1:ce:62:53:23:a8:2a:
                    c5:3c:5b:2d:74:e1:23:43:70:97:2c:e8:41:ec:8e:
                    23:0e:ab:63:11:86:83:46:94:c2:ef:6f:90:a1:b9:
                    aa:93:d7:6b:79:58:67:6c:c7:75:c6:bd:87:ed:f6:
                    a7:04:0e:23:53:f6:2e:e2:dd:f8:a8:17:eb:be:4c:
                    70:9f:27:e8:2a:3d:65:89:6f:c1:97:db:86:29:1e:
                    2a:f6:e2:d9:8f:bb:c4:4f:df:69:9a:e4:1a:85:6e:
                    5c:05:76:b8:17:96:a7:16:c4:7d:20:e4:8b:7a:a4:
                    1b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:EB:FE:39:68:9C:FF:AF:C7:E6:2C:52:F3:0E:A9:AB:FF:9F:5E:78
            X509v3 Authority Key Identifier:
                keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/A-v-OWic_6_H5ixS8w6pq_-fXng.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.35.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         1c:25:81:16:ae:9e:94:4c:46:5f:35:89:57:82:fd:88:21:17:
         ee:36:47:95:a5:47:e2:64:54:cb:c4:4c:b3:1a:46:0e:3c:d7:
         19:fc:b4:a1:7c:fb:bb:d5:10:69:14:fd:6b:74:42:12:65:68:
         f0:64:89:06:09:5a:69:c5:bc:c8:62:af:1d:49:61:3f:6d:b7:
         22:33:1f:56:24:1a:34:2c:70:54:a4:3b:5d:0b:93:53:dd:91:
         81:48:eb:28:44:7e:95:b9:e1:8b:5f:0a:26:97:f3:5a:24:dc:
         ce:66:fc:d8:0e:25:18:ab:88:7d:c4:c5:c5:18:18:66:a9:df:
         f3:ce:7b:fb:49:c4:25:b9:64:d3:64:d3:e3:2c:4a:82:f8:22:
         e6:65:92:ec:22:f8:55:9b:70:11:b3:d4:54:9c:8e:dd:67:a7:
         0e:e3:dc:e6:ce:1c:90:c8:34:6b:93:b0:c1:f1:80:35:cc:fa:
         f1:f5:c6:72:65:f8:54:7d:ae:3b:37:9b:2d:d2:da:7b:35:73:
         94:de:07:6b:02:76:b2:e6:57:aa:29:4e:b1:e4:bb:ee:86:1a:
         27:ff:de:bf:03:9a:ef:b9:42:43:a0:5d:7c:5a:1c:f0:c4:93:
         23:88:9b:51:99:68:ac:68:d5:da:93:1d:2a:ee:d1:46:eb:25:
         fa:b4:9f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:31 2024 by rpki-client on console-fra.rpki-client.org