Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/DEAfmjsVaLNYZu1ooMb2haNk55k.roa
File:                     DEAfmjsVaLNYZu1ooMb2haNk55k.roa (raw, json)
Hash identifier:          c86AWwUregQh+2imnnDdFEwDE+S19ejD4IGQJIxng9I=
Subject key identifier:   0C:40:1F:9A:3B:15:68:B3:58:66:ED:68:A0:C6:F6:85:A3:64:E7:99
Certificate issuer:       /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial:       093A
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/DEAfmjsVaLNYZu1ooMb2haNk55k.roa
Signing time:             Tue 29 Sep 2020 10:01:37 +0000
ROA not before:           Tue 29 Sep 2020 10:01:37 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24154
IP address blocks:        210.63.192.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2362 (0x93a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
        Validity
            Not Before: Sep 29 10:01:37 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=0C401F9A3B1568B35866ED68A0C6F685A364E799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:16:60:e5:a5:b8:a6:27:88:af:03:08:25:bf:
                    d9:fa:92:df:17:8a:76:76:b7:d3:93:de:7a:ab:6b:
                    7d:f8:3c:4c:d9:2f:7f:79:12:35:f9:96:c6:3b:82:
                    10:8d:36:74:c1:7c:3d:99:b0:33:48:9f:bd:3d:21:
                    2f:aa:f4:d2:08:91:b0:e9:d9:19:5f:f8:dc:c4:39:
                    b0:7f:72:55:74:60:03:34:c4:15:b7:03:32:1f:23:
                    81:2e:33:7b:a8:6b:78:0a:b3:d5:a0:32:42:7e:1c:
                    25:3e:63:db:37:cb:8e:1e:7f:6f:89:46:0e:e6:b6:
                    ed:8b:ae:a2:bd:12:b7:c3:d4:39:4b:94:1f:62:6c:
                    c7:f7:74:09:ee:71:24:dc:bc:50:75:56:ba:f0:c8:
                    b3:fe:88:59:d5:29:83:55:95:73:22:97:e9:58:1b:
                    81:33:05:17:66:0a:a7:c4:b4:07:9e:8e:b0:75:71:
                    2f:a5:4e:06:13:20:bb:46:7b:83:a2:fa:6b:22:e0:
                    2f:e7:9c:e6:8f:75:4a:ba:ad:3e:ba:83:30:05:94:
                    ce:cc:b8:79:f3:1b:84:3b:b4:53:96:f2:24:3b:da:
                    bd:ce:60:84:01:7b:94:94:5f:3a:b0:4f:62:66:eb:
                    1e:27:9b:51:94:f3:13:2f:e6:b9:42:58:9b:f5:91:
                    30:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:40:1F:9A:3B:15:68:B3:58:66:ED:68:A0:C6:F6:85:A3:64:E7:99
            X509v3 Authority Key Identifier:
                keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/DEAfmjsVaLNYZu1ooMb2haNk55k.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.63.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a6:3c:a1:8b:cb:ee:f3:c4:31:70:80:31:87:41:85:7b:70:69:
         8b:b0:7f:a9:a5:58:b4:82:b9:b0:0c:6b:7b:be:d3:11:38:88:
         52:61:4a:4b:08:05:20:d9:77:fb:c4:73:10:c4:a9:6d:89:d7:
         09:bf:14:87:ad:21:1c:f3:5f:a6:05:93:84:23:da:a2:47:e9:
         d2:27:be:29:16:90:ff:bb:24:6c:7a:93:d0:af:2a:ff:ef:28:
         6d:25:3c:8c:33:05:fc:21:27:2b:a2:a4:a1:84:bf:3a:bf:96:
         7a:68:bc:5b:46:d1:ee:dc:f6:8a:41:83:a5:91:ac:29:dd:7b:
         43:ec:59:99:09:f5:80:fc:fb:95:a3:87:d4:78:8f:0a:41:6d:
         10:34:ed:97:4a:17:92:d9:89:1f:f1:fc:8d:9e:6c:8b:17:72:
         50:d4:82:81:08:2a:c0:d3:41:e6:70:be:9f:e8:9e:91:c4:6a:
         5e:a1:df:c3:8c:15:b9:9a:95:7f:fe:40:b0:f1:d8:8a:02:a3:
         db:c8:26:7d:b3:eb:11:c1:e5:c7:52:b9:28:31:a8:dc:9a:8e:
         03:b3:95:a9:54:b3:fa:bf:7f:45:55:8a:11:c5:8a:16:a5:86:
         dd:4b:d5:18:60:eb:1f:8e:86:1d:b2:7b:40:f0:42:6f:71:1c:
         7c:e8:03:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:31 2024 by rpki-client on console-fra.rpki-client.org