Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/CCMHJosMVQ1SdvWUWOiGNwm-GB0.roa
File:                     CCMHJosMVQ1SdvWUWOiGNwm-GB0.roa (raw, json)
Hash identifier:          KMGZi5WH90o68ryuZ77UwLV8p/mbtlyYSD+M7ogeaVI=
Subject key identifier:   08:23:07:26:8B:0C:55:0D:52:76:F5:94:58:E8:86:37:09:BE:18:1D
Certificate issuer:       /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial:       090A
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/CCMHJosMVQ1SdvWUWOiGNwm-GB0.roa
Signing time:             Tue 29 Sep 2020 10:01:23 +0000
ROA not before:           Tue 29 Sep 2020 10:01:23 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     17709
IP address blocks:        60.244.128.0/17 maxlen: 17

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2314 (0x90a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
        Validity
            Not Before: Sep 29 10:01:23 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=082307268B0C550D5276F59458E8863709BE181D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:73:3a:56:44:e4:a1:03:f5:58:8e:c8:6d:7f:
                    7c:30:1b:3f:5a:47:03:59:8c:f9:1c:2c:08:73:aa:
                    64:31:5a:a7:b6:30:27:c6:f9:73:f9:fa:86:de:c0:
                    6f:1a:9c:72:43:88:04:de:57:e7:9a:7f:a7:94:0c:
                    b7:e9:77:0d:3e:89:2c:c5:f7:3f:8c:16:21:19:d8:
                    44:1c:e9:16:55:bd:9e:82:50:94:9c:de:1e:e2:f0:
                    79:46:15:f4:de:37:fc:11:fe:f0:cc:da:eb:cf:77:
                    cf:73:6e:9e:7e:3f:14:55:df:17:a8:84:d0:35:0b:
                    38:ae:97:b7:eb:56:2e:08:e0:8b:b0:06:02:bc:21:
                    d3:d5:da:c4:e6:6b:a2:8a:17:7b:97:75:3c:02:98:
                    ea:88:68:b0:bc:ba:4f:14:48:59:cf:d4:7e:89:41:
                    9e:ca:9f:8d:46:ff:ce:c0:3a:b7:b2:d7:6a:aa:b4:
                    5e:c5:bd:3a:bb:c3:90:26:fb:50:18:a8:ed:3b:d8:
                    41:de:19:7f:41:cd:01:20:31:96:89:de:41:76:34:
                    cb:a9:1c:07:b9:f0:df:73:3e:b7:cb:b3:bf:04:87:
                    a5:a3:cb:9d:d2:a3:4f:69:25:d9:02:e6:64:5f:d3:
                    8e:9c:3b:53:30:14:ea:5b:86:54:8c:b6:f9:4d:c5:
                    53:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:23:07:26:8B:0C:55:0D:52:76:F5:94:58:E8:86:37:09:BE:18:1D
            X509v3 Authority Key Identifier:
                keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/CCMHJosMVQ1SdvWUWOiGNwm-GB0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  60.244.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         8f:4c:69:dc:88:c2:0a:3b:45:68:52:8c:4d:26:45:53:13:ac:
         7d:bb:69:90:91:1a:4f:f4:1c:46:a8:59:a3:64:a2:fe:d6:42:
         a6:7b:ce:74:13:85:79:62:c0:89:a7:52:7f:b5:b5:24:07:ca:
         02:76:9e:02:5b:f7:a4:a0:a1:e7:2f:fd:24:b4:ab:33:db:ff:
         86:97:bd:2e:4d:63:27:04:75:f7:c6:9a:8c:da:37:ec:8c:04:
         fe:47:1b:09:99:f5:4c:c7:2c:aa:b3:6f:1b:07:a4:35:61:94:
         08:34:60:fb:3a:c9:8d:1d:6e:60:4d:86:4f:e7:67:fb:b9:62:
         fb:57:78:91:40:6c:de:37:4e:83:27:ab:fe:6e:3c:26:07:0b:
         00:3e:c1:c3:02:ef:f1:a1:2b:c7:75:14:f4:b3:f7:ea:65:75:
         de:b1:0f:c2:bb:7d:2e:e4:c3:f7:cc:6b:f2:71:a9:15:7d:13:
         bb:70:7f:07:e8:17:22:c0:df:d4:ce:1c:59:ff:6e:8b:06:77:
         48:48:2b:0f:23:ac:a3:05:bc:b1:22:0c:62:63:80:e9:85:ea:
         f7:58:86:32:c1:25:10:85:0a:86:bb:7f:71:3c:79:66:2d:2e:
         60:b1:df:12:31:89:fe:0b:e0:a1:ef:ba:44:d3:07:34:82:11:
         6c:3d:60:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:00 2024 by rpki-client on console-ams.rpki-client.org