Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/OwR_MbiP1LJuUegc6UOYBOYDiAI.roa
File:                     OwR_MbiP1LJuUegc6UOYBOYDiAI.roa (raw, json)
Hash identifier:          CRIqTdNWaAoazxbzPR6imyywE2tKYEbq2qNFE9091A0=
Subject key identifier:   3B:04:7F:31:B8:8F:D4:B2:6E:51:E8:1C:E9:43:98:04:E6:03:88:02
Certificate issuer:       /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial:       094D
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/OwR_MbiP1LJuUegc6UOYBOYDiAI.roa
Signing time:             Tue 29 Sep 2020 10:01:41 +0000
ROA not before:           Tue 29 Sep 2020 10:01:41 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     17709
IP address blocks:        210.201.72.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2381 (0x94d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
        Validity
            Not Before: Sep 29 10:01:41 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=3B047F31B88FD4B26E51E81CE9439804E6038802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3a:91:8e:a1:b6:6e:23:26:54:ab:fa:08:b4:
                    03:c9:ca:ef:6c:5b:98:ce:46:10:f0:8c:16:de:0e:
                    b4:bb:c6:fc:dd:b4:29:b3:23:80:13:84:a0:20:01:
                    2f:cb:1b:1b:25:ba:31:37:e1:ea:ad:85:d6:0a:28:
                    e5:93:9b:a3:34:a0:e6:0a:ef:6a:a4:d8:83:79:e1:
                    92:78:a8:74:2e:ed:40:c4:59:9c:13:b5:01:34:c1:
                    5b:43:f8:16:77:bd:b5:9d:6d:52:64:28:ea:f7:d1:
                    86:9c:45:06:9d:d5:9f:fd:cd:8e:e6:9b:30:ec:b8:
                    32:59:b2:03:dd:0f:d5:b4:7f:7b:a1:b7:cf:40:bf:
                    81:59:c5:7e:be:27:ea:ab:79:9e:37:8e:ac:63:0b:
                    3a:ac:78:9e:b4:7c:ff:64:b1:cb:a5:b2:eb:20:f2:
                    ad:83:4f:a8:52:96:af:35:de:e1:6f:c3:dc:f1:d5:
                    b3:a8:0b:6d:94:ef:a9:f7:7d:6b:f9:02:65:fa:67:
                    b5:09:a3:4d:45:80:43:eb:9a:6c:03:50:fc:6a:67:
                    1d:19:6e:aa:84:58:0a:5e:e6:bf:a0:82:e9:59:3c:
                    60:1c:5b:dc:a9:b5:af:f2:4f:bb:5e:3d:4d:b5:70:
                    87:35:40:86:a0:ef:3d:1a:72:50:66:1b:81:02:f5:
                    d0:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:04:7F:31:B8:8F:D4:B2:6E:51:E8:1C:E9:43:98:04:E6:03:88:02
            X509v3 Authority Key Identifier:
                keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/OwR_MbiP1LJuUegc6UOYBOYDiAI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.201.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2c:92:7c:8a:02:a0:c5:09:c0:09:86:7b:76:f9:c3:2c:0c:30:
         1a:db:57:0a:01:59:8e:b4:96:8d:59:f7:30:14:15:5f:15:7e:
         f1:ee:16:6e:a6:2b:8f:14:57:78:36:e7:00:57:f4:6d:7c:46:
         5b:03:f3:81:7b:39:e7:5d:9f:6a:38:12:eb:f4:a9:1b:ee:2e:
         61:c5:d0:90:c1:01:8a:5f:e4:bd:59:a2:51:46:9d:9d:e8:9b:
         29:b8:f4:54:8a:2d:ec:f8:43:29:c5:3b:3e:05:70:b1:1a:f2:
         0c:3d:a7:74:01:7f:5f:ec:ce:f3:90:73:26:cd:2a:e8:a8:aa:
         f8:9a:f5:43:4b:51:34:1c:bc:e7:90:c0:dd:0d:bc:ed:5e:8b:
         eb:b6:7c:c9:6e:35:b7:6e:f2:ee:53:14:f9:f9:40:f9:fc:76:
         15:18:da:ee:43:8b:95:7a:19:3f:80:ca:9b:3e:d1:cd:4a:ad:
         0c:b9:25:80:c4:35:c1:c8:a1:2c:6c:b8:30:d9:e2:39:d9:8d:
         cd:b4:be:d3:32:40:a2:d5:ac:fb:17:a9:c2:98:d8:af:38:e2:
         1c:f3:bd:2f:0b:4a:c7:9b:b3:e0:1a:27:b0:05:48:28:4c:d2:
         5a:b1:c9:60:49:8f:be:60:14:8f:d1:22:95:6f:b3:33:f0:bd:
         03:cd:01:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:31 2024 by rpki-client on console-fra.rpki-client.org