Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/F_eVFdBF5VP0WS0CWcC0Z8F95tc.roa
File:                     F_eVFdBF5VP0WS0CWcC0Z8F95tc.roa (raw, json)
Hash identifier:          Qb/ZXlXPv/a4UNp7GsmedQkYur+MJEM7GuNhz5vYFJQ=
Subject key identifier:   17:F7:95:15:D0:45:E5:53:F4:59:2D:02:59:C0:B4:67:C1:7D:E6:D7
Certificate issuer:       /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial:       10B3
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/F_eVFdBF5VP0WS0CWcC0Z8F95tc.roa
Signing time:             Tue 16 May 2023 08:36:31 +0000
ROA not before:           Tue 16 May 2023 08:36:31 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     7482
IP address blocks:        218.184.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4275 (0x10b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
        Validity
            Not Before: May 16 08:36:31 2023 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=17F79515D045E553F4592D0259C0B467C17DE6D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:15:7b:20:fc:c5:9c:bf:dc:19:a2:f8:f3:f9:
                    4e:d9:73:db:c9:56:4a:82:e1:a5:26:ac:8c:7b:02:
                    3b:94:eb:3a:27:57:01:e6:88:b7:4a:e0:f6:64:d5:
                    76:30:25:6a:52:4e:e5:39:46:36:ec:7b:9a:2c:92:
                    d1:15:0e:0a:f4:ea:3f:4c:d7:06:e1:c0:5a:ce:4d:
                    52:86:a3:1c:f3:07:4f:b9:e8:78:9e:5a:28:a6:b8:
                    f5:70:a1:7a:11:c8:c0:dd:9c:41:db:8b:83:e6:83:
                    7e:c4:d7:ad:62:b3:64:82:0f:9e:be:82:2e:2c:86:
                    43:e2:f7:84:76:e4:5d:8a:d6:78:90:f8:f1:f2:85:
                    b4:d5:37:da:7d:77:50:3a:66:90:f1:ef:50:73:ad:
                    2f:2f:9b:d0:e6:b9:05:a7:fa:03:ae:37:38:47:69:
                    1b:ed:6e:d6:cd:fb:5d:86:46:f0:c4:c5:66:19:68:
                    77:f1:0b:d5:3c:72:3a:47:8b:a5:5a:6d:51:de:9b:
                    88:94:f5:d2:f8:85:85:8b:e1:40:c1:d2:cb:d0:f2:
                    7d:a2:4e:95:81:6e:bb:04:24:dc:6a:02:0a:6c:e3:
                    3c:58:b4:95:56:2b:c2:53:22:cd:91:bd:33:5b:e8:
                    22:3d:f8:92:26:97:ec:47:10:4d:18:17:2a:46:db:
                    8f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:F7:95:15:D0:45:E5:53:F4:59:2D:02:59:C0:B4:67:C1:7D:E6:D7
            X509v3 Authority Key Identifier:
                keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/F_eVFdBF5VP0WS0CWcC0Z8F95tc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.184.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         81:8c:24:d2:b9:89:fb:18:2f:24:90:6b:9d:79:3f:ac:78:a9:
         aa:42:41:d0:07:4b:96:cf:37:2b:b4:6d:2e:e0:b5:33:2b:69:
         cd:6e:24:96:eb:aa:c4:1a:d0:ef:9d:df:d1:45:1e:e0:a0:fc:
         32:02:7e:6c:45:c6:94:60:c9:41:31:93:a6:44:58:bb:26:1f:
         d9:55:92:6e:59:be:3a:db:48:9d:6e:7c:f4:f8:90:70:35:90:
         77:8f:86:bd:24:9d:ad:42:3b:60:0c:de:8f:20:87:a2:11:71:
         f5:02:79:f3:05:4e:78:55:8b:7c:a8:15:a8:7e:47:1a:71:73:
         68:e7:26:2f:4c:60:6d:1e:e7:3f:59:da:c3:67:94:f8:39:f5:
         63:82:86:41:96:d0:a1:12:9b:df:7e:a3:c9:9c:cc:85:af:45:
         5a:cf:a1:a1:a7:da:c2:dc:61:52:0f:24:97:64:7f:8f:32:2e:
         a7:33:90:76:e8:72:27:f4:70:4e:d8:cf:8b:ab:8a:39:88:18:
         ed:08:08:2e:e3:8b:1b:30:b1:f3:a9:e9:a6:b2:75:3c:83:16:
         9f:7e:4e:f7:37:7f:56:d6:6c:74:a5:a7:53:45:7f:2f:9c:bd:
         23:5b:23:d6:1d:75:2a:5b:3c:c2:41:40:db:2e:e0:b9:1f:39:
         03:4b:01:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:00 2024 by rpki-client on console-ams.rpki-client.org