Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/NoZ8MqJsdWHbRT3dKymoMUc_Sxc.roa
File:                     NoZ8MqJsdWHbRT3dKymoMUc_Sxc.roa (raw, json)
Hash identifier:          wSl7j6mNgr8TTuWvtj5QMA12vtwySkeFBSTZZIyKzm4=
Subject key identifier:   36:86:7C:32:A2:6C:75:61:DB:45:3D:DD:2B:29:A8:31:47:3F:4B:17
Certificate issuer:       /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial:       0DBD
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/NoZ8MqJsdWHbRT3dKymoMUc_Sxc.roa
Signing time:             Wed 29 Sep 2021 02:39:31 +0000
ROA not before:           Wed 29 Sep 2021 02:39:31 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     131591
IP address blocks:        203.79.206.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3517 (0xdbd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
        Validity
            Not Before: Sep 29 02:39:31 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=36867C32A26C7561DB453DDD2B29A831473F4B17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c0:5f:8c:18:89:9d:e3:53:4a:24:8e:3f:29:
                    0a:2d:09:75:d7:5f:fb:c5:26:ac:a7:d3:79:43:08:
                    d4:e3:53:94:82:66:85:f1:9c:80:2f:01:96:3f:73:
                    b7:78:c9:af:97:47:74:2c:00:86:75:89:f8:5b:27:
                    41:13:10:79:85:aa:0b:93:78:c0:1e:de:52:73:94:
                    54:6e:9b:49:74:e0:b0:b1:a8:5d:b1:84:59:5f:7d:
                    03:dc:14:9d:97:08:e4:e9:ed:f4:b7:a5:ee:65:51:
                    a9:fb:74:87:3b:2c:e4:08:39:30:a4:b2:2b:b1:46:
                    d4:da:33:b8:05:a2:cc:57:f1:5d:e1:0a:0e:fe:98:
                    6a:9c:9d:b5:3b:b7:34:f8:6b:d5:b1:f7:ef:37:cd:
                    22:fd:a0:b4:88:ed:18:69:3b:b2:f9:91:fd:18:6f:
                    82:e5:58:a0:2a:69:c5:4e:44:72:f6:29:85:eb:24:
                    c9:a4:2a:08:79:a3:6a:48:33:db:49:6d:e9:1d:9a:
                    bb:42:d2:34:f4:79:6f:ab:de:41:92:97:d3:3e:66:
                    88:80:b8:77:42:5f:c4:52:d9:c6:e8:58:ce:56:56:
                    96:e8:20:81:82:8b:74:4c:14:71:04:20:2d:18:54:
                    11:84:cd:54:1f:2f:b3:2a:0c:f2:8f:3e:d0:43:97:
                    a9:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:86:7C:32:A2:6C:75:61:DB:45:3D:DD:2B:29:A8:31:47:3F:4B:17
            X509v3 Authority Key Identifier:
                keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/NoZ8MqJsdWHbRT3dKymoMUc_Sxc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.79.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6e:5b:7c:61:f4:61:10:ea:55:1c:1c:5d:51:d9:1a:2f:34:49:
         53:7e:d3:dd:c6:3b:81:30:7b:be:6c:00:a6:f7:f0:9f:6f:9d:
         81:0a:64:04:17:22:e3:c2:06:9f:51:bc:4d:84:ad:28:57:5d:
         36:36:2a:99:ca:86:f8:47:e1:98:a8:ec:0c:c0:d3:9b:96:28:
         6f:d4:d0:d5:44:eb:08:95:ea:2d:45:55:bb:6e:e9:93:bc:b5:
         56:74:89:80:a9:1f:a4:8c:2a:f8:61:26:2a:6f:06:ea:54:8b:
         5b:1a:2f:71:ee:11:47:05:21:e7:53:f9:3c:ec:1a:f9:45:bd:
         37:8b:e7:3b:58:24:a1:47:f5:49:6e:09:a6:11:8f:b3:25:d2:
         d3:dd:13:8f:21:7b:fa:5c:56:3f:b7:cd:b6:cd:98:d5:79:63:
         7c:eb:dc:a0:1f:3a:a4:49:36:97:46:c6:dd:bc:d1:0d:c0:67:
         81:83:60:9c:2c:6c:5e:23:42:eb:69:6c:1a:23:02:0f:83:1b:
         57:12:62:b1:83:37:3a:f4:a3:c2:7d:3d:62:d9:92:a7:f3:e8:
         4a:8d:ac:94:ac:a7:07:c8:0d:cf:3a:68:c2:ad:1e:2d:47:a7:
         1b:68:a3:b8:73:d6:53:55:aa:12:9f:45:db:25:78:fa:b5:75:
         2f:90:0b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:31 2024 by rpki-client on console-fra.rpki-client.org