Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/HS_DrVfVgiOcJ9caaJHvvOui1tc.roa
File:                     HS_DrVfVgiOcJ9caaJHvvOui1tc.roa (raw, json)
Hash identifier:          Y/1sg2133SaBUd8bOocfz9ObUE+u5SP1ae5I68DxImI=
Subject key identifier:   1D:2F:C3:AD:57:D5:82:23:9C:27:D7:1A:68:91:EF:BC:EB:A2:D6:D7
Certificate issuer:       /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial:       0926
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/HS_DrVfVgiOcJ9caaJHvvOui1tc.roa
Signing time:             Tue 29 Sep 2020 10:01:31 +0000
ROA not before:           Tue 29 Sep 2020 10:01:31 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24155
IP address blocks:        203.201.32.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2342 (0x926)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
        Validity
            Not Before: Sep 29 10:01:31 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=1D2FC3AD57D582239C27D71A6891EFBCEBA2D6D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7f:d5:fa:8e:b7:e0:5a:cd:bc:0a:83:8e:64:
                    02:3c:43:18:9a:1c:6d:e0:ff:0b:cc:59:3e:73:22:
                    4a:9b:ac:e4:f5:08:3d:45:e2:ea:1e:e3:fd:76:19:
                    47:c7:e0:b3:c8:ea:9f:ad:1f:9e:81:96:e8:d3:04:
                    9a:3e:68:64:f0:c2:7a:22:9f:a0:62:f7:13:99:7e:
                    34:65:08:ab:21:63:58:17:48:1a:ef:1f:b8:89:e7:
                    dd:94:a3:86:f2:19:28:35:7a:b1:e7:e1:ae:f0:39:
                    a3:aa:3d:a8:57:b8:70:47:72:fe:3f:e0:51:78:99:
                    ad:03:74:80:99:5e:ff:74:b3:b5:45:19:b0:8d:7e:
                    df:08:62:72:05:d7:69:a5:15:86:12:e9:c5:5c:34:
                    c3:3d:4f:f8:c5:20:f0:6c:a2:70:89:53:45:b1:ee:
                    ce:50:f8:1a:46:e5:57:5f:a7:2b:12:ae:b9:cc:62:
                    7d:b8:8a:3c:84:57:71:02:27:2d:91:4a:d1:08:67:
                    34:38:aa:21:02:e3:4f:58:01:9b:0c:92:48:11:bc:
                    fd:73:87:eb:d1:dd:f8:c8:4e:e4:47:ca:9d:be:06:
                    5f:45:0d:38:f9:c0:3e:df:f9:a2:da:52:86:ff:4d:
                    90:3f:e1:a0:8c:73:67:18:93:9b:69:68:3a:39:4a:
                    f9:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:2F:C3:AD:57:D5:82:23:9C:27:D7:1A:68:91:EF:BC:EB:A2:D6:D7
            X509v3 Authority Key Identifier:
                keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/HS_DrVfVgiOcJ9caaJHvvOui1tc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.201.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         02:fa:d0:e5:16:2f:ad:70:25:5b:68:29:3d:1c:73:26:90:55:
         a1:ff:2d:4b:43:73:e7:55:6d:8e:bb:42:8f:e1:e6:a9:7f:5b:
         b4:7f:89:94:81:2d:52:bd:52:59:8f:be:56:cc:4f:22:e8:f8:
         ec:d6:c8:4d:d9:c1:26:69:f3:62:3f:d3:0e:1d:df:70:0d:8d:
         71:2d:de:21:13:68:83:35:55:38:81:65:11:90:cb:69:c4:01:
         62:54:15:af:09:10:66:2f:47:9d:4c:00:90:42:ea:c5:7e:e5:
         ee:8c:ad:13:50:e0:ed:69:f8:a7:e0:a1:be:74:23:2d:dd:e1:
         4a:4b:81:70:35:9b:28:8c:7c:c0:87:51:92:cb:e7:45:4d:81:
         32:69:a3:e6:fe:1b:67:95:03:fb:04:0a:ca:6f:09:b7:d2:8a:
         84:71:14:42:f5:c9:cc:f9:bf:9f:a9:48:57:db:76:5a:3b:27:
         7d:24:c3:b1:38:9f:c7:9a:05:af:a9:6b:41:a2:a3:15:c8:29:
         a0:d5:fd:65:0e:3d:ef:59:da:15:bb:72:95:86:fa:32:a3:3b:
         d1:d1:32:58:af:7e:6c:99:ef:65:c5:a5:b7:d7:46:5b:50:9b:
         45:b6:1a:53:a4:00:62:67:2c:f6:88:3e:7c:8c:15:79:01:64:
         6d:de:63:73
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICCSYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NjQyMzBGM0UzOUJFRkJCNzNBN0Q0RERCMjZGRTJENDQ2RUUyNTAeFw0yMDA5Mjkx
MDAxMzFaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDFEMkZDM0FENTdENTgy
MjM5QzI3RDcxQTY4OTFFRkJDRUJBMkQ2RDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDGf9X6jrfgWs28CoOOZAI8QxiaHG3g/wvMWT5zIkqbrOT1CD1F
4uoe4/12GUfH4LPI6p+tH56BlujTBJo+aGTwwnoin6Bi9xOZfjRlCKshY1gXSBrv
H7iJ592Uo4byGSg1erHn4a7wOaOqPahXuHBHcv4/4FF4ma0DdICZXv90s7VFGbCN
ft8IYnIF12mlFYYS6cVcNMM9T/jFIPBsonCJU0Wx7s5Q+BpG5VdfpysSrrnMYn24
ijyEV3ECJy2RStEIZzQ4qiEC409YAZsMkkgRvP1zh+vR3fjITuRHyp2+Bl9FDTj5
wD7f+aLaUob/TZA/4aCMc2cYk5tpaDo5SvnNAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUHS/DrVfVgiOcJ9caaJHvvOui1tcwHwYDVR0jBBgwFoAU+wZCMPPjm++7c6fU
3bJv4tRG7iUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBPTC8t
d1pDTVBQam0tLTdjNmZVM2JKdjR0Ukc3aVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
Ly13WkNNUFBqbS0tN2M2ZlUzYkp2NHRSRzdpVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0FQT0wvSFNfRHJWZlZnaU9jSjljYWFKSHZ2
T3VpMXRjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBMvJIDAN
BgkqhkiG9w0BAQsFAAOCAQEAAvrQ5RYvrXAlW2gpPRxzJpBVof8tS0Nz51VtjrtC
j+HmqX9btH+JlIEtUr1SWY++VsxPIuj47NbITdnBJmnzYj/TDh3fcA2NcS3eIRNo
gzVVOIFlEZDLacQBYlQVrwkQZi9HnUwAkELqxX7l7oytE1Dg7Wn4p+ChvnQjLd3h
SkuBcDWbKIx8wIdRksvnRU2BMmmj5v4bZ5UD+wQKym8Jt9KKhHEUQvXJzPm/n6lI
V9t2WjsnfSTDsTifx5oFr6lrQaKjFcgpoNX9ZQ4971naFbtylYb6MqM70dEyWK9+
bJnvZcWlt9dGW1CbRbYaU6QAYmcs9og+fIwVeQFkbd5jcw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:31 2024 by rpki-client on console-fra.rpki-client.org