Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/Mwp_YEF2fQIrUFVOCP9LfZEIJO8.roa
File:                     Mwp_YEF2fQIrUFVOCP9LfZEIJO8.roa (raw, json)
Hash identifier:          JV93y9wUtb3tU48KLjM6LY1NxdMdddF4XpHo3GP9Eak=
Subject key identifier:   33:0A:7F:60:41:76:7D:02:2B:50:55:4E:08:FF:4B:7D:91:08:24:EF
Certificate issuer:       /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial:       0F63
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/Mwp_YEF2fQIrUFVOCP9LfZEIJO8.roa
Signing time:             Thu 15 Sep 2022 02:40:08 +0000
ROA not before:           Thu 15 Sep 2022 02:40:08 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     16625
IP address blocks:        210.203.8.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3939 (0xf63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
        Validity
            Not Before: Sep 15 02:40:08 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=330A7F6041767D022B50554E08FF4B7D910824EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:84:b2:c8:22:e4:76:ed:cf:5c:80:3c:4a:d7:
                    8d:fb:24:d7:22:64:f2:6a:4e:b8:fe:37:23:c6:b9:
                    34:d8:37:57:9b:46:3a:de:18:f7:68:80:ef:33:a0:
                    cc:34:f5:51:7e:fd:51:3a:99:2c:03:6d:7a:3a:a3:
                    5c:fd:6f:ad:bc:fb:de:fd:84:42:d5:e0:e7:be:74:
                    8c:6f:6c:8b:0e:4b:a4:d7:af:79:8b:f4:57:bd:05:
                    07:10:41:b3:b2:75:d4:4a:0f:97:7d:e1:51:16:66:
                    1b:3c:01:b3:11:14:04:cd:26:f0:e1:f4:8c:31:d1:
                    13:2b:d8:05:81:27:68:44:86:2e:78:8d:cb:6b:de:
                    ac:34:f8:c8:54:84:55:ba:f4:ad:78:28:58:c7:ea:
                    ee:44:a3:41:04:6f:ab:f9:5b:56:7b:a6:7a:ab:0b:
                    7d:85:6f:f0:a2:f7:c8:35:2c:17:69:72:26:67:93:
                    6b:b5:bc:ff:a3:22:64:25:d6:bc:d9:41:4b:96:24:
                    03:a9:7c:2b:7a:38:6f:89:21:6d:d5:4f:9a:6e:04:
                    f7:2f:f0:5f:d4:f8:67:17:93:d3:f0:d5:75:63:ee:
                    89:a1:0f:f3:bc:6f:f3:4e:61:e2:d5:60:06:e8:2d:
                    2e:d3:64:04:bd:b2:f9:3f:ae:3d:9e:b7:79:d0:a8:
                    d0:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:0A:7F:60:41:76:7D:02:2B:50:55:4E:08:FF:4B:7D:91:08:24:EF
            X509v3 Authority Key Identifier:
                keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/Mwp_YEF2fQIrUFVOCP9LfZEIJO8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.203.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         43:35:0e:c4:43:eb:11:12:53:4f:2e:63:a3:f9:15:f7:61:cc:
         2c:67:a9:92:1f:c7:e8:16:10:6a:cd:b5:13:16:1d:7d:08:02:
         ec:a6:f8:2b:b7:0a:00:f4:8c:26:dd:9b:5f:c4:4a:f4:a9:90:
         94:80:fc:47:0e:f2:e2:d6:07:c5:5a:a7:e4:1a:91:33:94:ac:
         7e:1c:5b:9b:b6:cc:e2:79:cd:0a:9f:8b:ba:5c:23:a8:61:cd:
         c2:27:31:61:49:3d:1d:d9:ab:49:da:72:78:cb:d0:57:47:99:
         e0:ac:7e:6a:83:48:d5:84:18:86:c9:65:4f:72:54:bf:51:85:
         43:05:3b:3d:8f:19:bd:fc:f8:00:2f:0a:6c:eb:29:33:20:c0:
         e4:25:c2:e0:86:e2:33:ff:c8:47:58:45:7e:94:73:e4:4a:c7:
         9b:f2:69:05:0a:a5:19:fa:a4:3b:1a:85:98:de:1c:28:79:53:
         61:ce:b1:83:ee:e0:bd:bd:5a:da:b9:f0:ca:cf:b2:1b:6c:0b:
         59:89:4a:11:82:0b:4b:45:8f:03:2d:ec:29:53:3f:bf:37:11:
         8e:1a:18:7c:d5:cf:88:47:81:b7:2d:08:96:84:67:14:a5:2b:
         0b:05:57:e7:73:65:f2:24:db:3a:c8:d8:44:54:00:7b:29:ec:
         ab:71:ed:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:00 2024 by rpki-client on console-ams.rpki-client.org