Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/RR4qsbjQjDjsWuwq92pxx-x8bTE.roa
File:                     RR4qsbjQjDjsWuwq92pxx-x8bTE.roa (raw, json)
Hash identifier:          kvDP2U/iNqA77NG7H5/sfXGNZtc/ji+adNALonHHAU4=
Subject key identifier:   45:1E:2A:B1:B8:D0:8C:38:EC:5A:EC:2A:F7:6A:71:C7:EC:7C:6D:31
Certificate issuer:       /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial:       1064
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/RR4qsbjQjDjsWuwq92pxx-x8bTE.roa
Signing time:             Tue 16 May 2023 08:36:08 +0000
ROA not before:           Tue 16 May 2023 08:36:08 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     7482
IP address blocks:        210.200.128.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4196 (0x1064)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
        Validity
            Not Before: May 16 08:36:08 2023 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=451E2AB1B8D08C38EC5AEC2AF76A71C7EC7C6D31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c2:12:d4:20:a6:03:f3:2c:db:df:21:3d:e2:
                    11:f0:dc:09:a7:7f:78:e6:d7:62:33:16:b5:80:35:
                    fd:f4:c7:0d:94:b4:94:0d:ae:82:89:b6:95:2f:0f:
                    e3:59:fc:85:9a:28:bc:78:9e:da:26:7d:ff:d9:ca:
                    13:47:04:1b:45:8c:4f:83:67:98:18:8f:52:a1:26:
                    4e:11:69:97:e9:87:05:08:8f:ef:57:70:ca:c0:08:
                    96:1d:71:b4:89:77:b1:5e:ce:c5:0c:1f:62:c9:24:
                    d8:0f:d9:19:ec:2f:3b:e7:9a:41:9c:06:4a:49:dd:
                    3d:37:ff:53:cc:f4:e1:e5:68:f5:04:19:73:94:a0:
                    b1:76:96:a9:e6:43:41:2e:fd:b8:fb:f2:e4:65:a8:
                    6d:0e:e0:56:0a:a2:00:3b:c1:c2:ab:8e:56:0d:1e:
                    64:73:c6:cb:c7:2a:84:38:b2:ba:c9:1d:17:bd:25:
                    a5:2c:77:d3:17:39:44:67:8b:f2:3b:c5:1b:1e:93:
                    59:c1:14:2c:47:ce:f2:b7:0d:37:2a:77:41:35:21:
                    d9:55:2f:87:19:36:aa:18:62:64:a3:09:15:99:e7:
                    db:5b:c3:96:2d:0d:f3:0a:cf:51:61:dc:2c:4d:ba:
                    c6:c1:58:7a:87:0d:4d:4c:62:00:d0:1f:0b:a4:59:
                    75:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:1E:2A:B1:B8:D0:8C:38:EC:5A:EC:2A:F7:6A:71:C7:EC:7C:6D:31
            X509v3 Authority Key Identifier:
                keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/RR4qsbjQjDjsWuwq92pxx-x8bTE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.200.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         23:c4:15:c5:a1:b1:62:e9:56:25:10:d3:d8:cd:0e:ba:47:02:
         6b:fe:6d:a0:3e:f1:a0:31:1a:79:cb:7c:8b:16:a8:54:f1:ab:
         d2:a7:af:6e:64:eb:25:8a:6a:f3:5a:c9:ec:1e:5b:ae:b1:15:
         4a:78:47:bf:11:18:fe:c9:fa:cb:7b:7b:9c:88:62:2a:2f:40:
         61:16:1c:7a:98:08:1f:06:81:0c:a5:16:0e:be:c7:f8:7b:8a:
         b7:42:e1:a1:ab:45:9f:c8:b4:60:bd:68:d9:5b:76:5b:27:6c:
         58:de:f3:10:5f:69:7c:b3:55:0b:31:b1:eb:27:25:f2:56:93:
         a8:f4:a8:37:ed:c1:30:e4:5e:af:cf:2c:67:d2:e6:00:ed:04:
         2b:55:d9:74:11:b6:44:ff:f8:89:02:14:0e:ba:84:e9:49:5e:
         02:4c:f1:bd:21:98:ce:bb:9c:01:b9:1f:b2:59:37:8c:cd:13:
         02:7b:77:59:2c:92:ac:b7:00:ea:4e:81:d4:2e:13:c0:29:7d:
         34:8d:e8:c2:92:21:89:9e:58:eb:a5:d5:b2:58:63:84:3f:b5:
         54:8d:1b:c9:10:1c:6a:0e:4c:fa:f1:34:46:67:f2:d0:13:5f:
         48:2b:c6:1f:74:aa:8b:1e:6c:23:1f:56:35:d3:24:49:04:fd:
         4b:c2:95:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:00 2024 by rpki-client on console-ams.rpki-client.org