Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/Ji4L_v7_08Gi0CEwxJDN3kYglak.roa
File:                     Ji4L_v7_08Gi0CEwxJDN3kYglak.roa (raw, json)
Hash identifier:          0BFXphz7dgg3V3n1k3Pg7fRCn5Dq5o3zb/Kw31U4gM4=
Subject key identifier:   26:2E:0B:FE:FE:FF:D3:C1:A2:D0:21:30:C4:90:CD:DE:46:20:95:A9
Certificate issuer:       /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial:       0933
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/Ji4L_v7_08Gi0CEwxJDN3kYglak.roa
Signing time:             Tue 29 Sep 2020 10:01:35 +0000
ROA not before:           Tue 29 Sep 2020 10:01:35 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     22787
IP address blocks:        210.58.90.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2355 (0x933)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
        Validity
            Not Before: Sep 29 10:01:35 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=262E0BFEFEFFD3C1A2D02130C490CDDE462095A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e7:ad:ce:b8:e9:67:2e:d9:87:e8:23:35:78:
                    19:67:63:fb:3e:55:9a:79:f4:1a:22:7d:3e:b4:0c:
                    74:df:db:f3:8b:12:af:9a:c1:f2:19:7d:e5:26:51:
                    ac:c4:b8:8a:b5:48:d0:3f:41:19:de:0b:04:ff:51:
                    11:ff:d0:06:5e:41:69:d3:ea:3d:01:2f:9b:a1:51:
                    9f:ba:94:3a:d9:37:a7:17:ed:fa:77:a5:c6:c7:25:
                    db:7b:8e:bd:5e:eb:a8:a2:ca:54:95:6a:3c:86:2d:
                    83:ce:cf:27:8c:87:92:7f:3b:17:54:03:d3:b5:4b:
                    3c:6b:7c:30:b1:55:46:85:a8:6c:a3:c1:0d:55:f8:
                    5e:3a:94:d6:e4:09:44:2a:4b:b1:56:b1:a0:3c:3c:
                    0a:2c:04:ed:63:01:f5:d1:1a:e3:3f:15:03:27:81:
                    50:0c:0b:f9:e3:35:40:de:90:31:d8:6a:4e:6c:13:
                    30:c4:03:64:fa:e2:ce:ee:6c:38:dd:13:a2:0d:eb:
                    71:03:a4:42:52:ba:5d:cb:a4:14:c4:25:3d:8b:b7:
                    da:8e:b2:68:48:41:a2:62:0e:9b:bc:16:1d:46:22:
                    44:01:82:49:a8:9f:5f:94:c6:6f:52:3a:72:8d:ef:
                    69:fd:1c:4c:cc:e3:a1:f7:42:c1:e2:f7:f5:e9:78:
                    aa:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:2E:0B:FE:FE:FF:D3:C1:A2:D0:21:30:C4:90:CD:DE:46:20:95:A9
            X509v3 Authority Key Identifier:
                keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/Ji4L_v7_08Gi0CEwxJDN3kYglak.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.58.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:c2:6b:00:42:b9:93:6a:3b:8c:b0:4a:0b:25:4f:ab:da:cc:
         db:fb:9a:2c:b8:33:3a:e9:59:f9:3f:5d:d7:aa:82:7c:65:32:
         a6:71:67:76:21:79:dc:02:c4:ff:da:77:01:20:ce:e9:c7:5f:
         3a:79:f5:6a:e3:03:24:8e:7c:8e:e4:9e:2b:7e:60:0d:0e:54:
         f1:e2:2f:ca:fd:5d:d6:2c:96:dd:1d:75:94:13:c5:64:2e:e4:
         7a:ff:31:ab:cf:d5:9a:3e:d1:fc:e2:34:6d:1b:39:2f:ec:d6:
         57:98:c1:3f:fd:16:c0:85:ae:d9:16:bd:e5:53:7c:0e:c3:80:
         09:bb:ef:79:8a:ee:50:ab:76:ce:1a:2a:de:a3:0d:c8:1c:7e:
         58:26:b0:bf:26:73:54:70:e3:63:ea:04:5c:8b:77:62:d9:e9:
         49:d9:64:a4:62:ab:8b:3b:ce:7e:34:23:8c:f0:68:22:9f:3e:
         52:d8:b1:39:fc:36:dd:ad:a9:77:a1:3a:40:b8:d4:c9:36:5d:
         3d:c8:49:c2:e8:0a:d9:77:3d:65:c0:81:04:3f:f4:81:26:b3:
         e8:b1:78:77:d6:96:99:2c:d7:b8:49:ff:43:eb:ba:76:5e:7a:
         f4:1b:ed:6e:55:32:a2:cd:11:73:c4:d8:69:63:ec:55:54:26:
         0e:2f:c1:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:00 2024 by rpki-client on console-ams.rpki-client.org