Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/TB8TgFdMdMi175m_fr9fqFt729Y.roa
File:                     TB8TgFdMdMi175m_fr9fqFt729Y.roa (raw, json)
Hash identifier:          WCPq9/CegDVSo15kuMLVLqhFMwe5BWHZUXTR09uU+dg=
Subject key identifier:   4C:1F:13:80:57:4C:74:C8:B5:EF:99:BF:7E:BF:5F:A8:5B:7B:DB:D6
Certificate issuer:       /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial:       08E0
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/TB8TgFdMdMi175m_fr9fqFt729Y.roa
Signing time:             Tue 29 Sep 2020 10:01:11 +0000
ROA not before:           Tue 29 Sep 2020 10:01:11 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     17709
IP address blocks:        210.202.128.0/17 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2272 (0x8e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
        Validity
            Not Before: Sep 29 10:01:11 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=4C1F1380574C74C8B5EF99BF7EBF5FA85B7BDBD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:50:3a:18:02:48:e3:14:04:e9:c9:f3:f4:15:
                    d5:9a:e1:82:00:2c:d2:38:58:e7:64:95:53:02:c7:
                    1f:4a:6b:be:f4:90:3c:64:19:f9:d5:65:ef:67:51:
                    5d:22:b6:be:db:a7:6e:19:8b:7d:cb:f7:b2:ad:b1:
                    b0:5d:54:fb:2a:df:bb:8a:31:7f:87:18:e6:01:86:
                    60:a2:b1:3d:70:67:41:c2:55:91:27:b0:ae:ba:b0:
                    0c:83:71:3a:55:e6:49:84:ab:b6:4e:60:e9:6e:76:
                    64:e3:01:62:2c:56:17:d3:98:65:b7:e8:85:da:a1:
                    ae:64:27:77:06:94:52:3b:ef:7e:ac:2f:ab:8d:f8:
                    b9:4c:3f:1f:a5:3b:bd:4e:dc:42:6f:43:9b:05:17:
                    36:6a:42:a9:53:c5:9f:97:76:4a:e3:f5:0e:6d:22:
                    9d:83:0b:7b:97:b9:1b:19:3a:b7:38:9f:be:4f:7b:
                    bd:d9:63:e8:de:6e:b0:1f:f4:10:2e:1c:d3:a5:1a:
                    05:d8:5c:d7:23:68:5b:eb:e5:98:d7:b0:07:59:8c:
                    02:5b:4f:6c:e3:54:e5:1b:80:36:01:5e:e8:b3:c2:
                    18:5b:6c:04:01:a6:f2:e9:62:5e:2e:e1:b2:f1:ce:
                    2e:cc:8d:f9:f4:5d:cd:9b:b3:1e:fe:7c:85:66:90:
                    fb:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:1F:13:80:57:4C:74:C8:B5:EF:99:BF:7E:BF:5F:A8:5B:7B:DB:D6
            X509v3 Authority Key Identifier:
                keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/TB8TgFdMdMi175m_fr9fqFt729Y.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.202.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         97:ac:65:20:a5:b4:64:90:5e:85:ed:7d:76:87:30:61:95:28:
         d5:2b:e4:e7:f2:54:ab:f8:33:2d:ca:36:cd:40:36:82:71:f5:
         74:0b:cf:4e:b9:53:0c:6c:96:1f:b6:07:68:19:70:fd:36:21:
         17:e3:3d:26:f6:95:10:ec:9d:a0:b8:df:2c:45:37:ca:85:cb:
         1c:4c:05:70:da:40:d4:fe:69:78:25:f7:96:95:ba:a1:20:b3:
         17:89:2a:cb:7e:03:cb:76:1b:c0:08:c8:ae:8e:cc:9b:67:ac:
         63:48:5a:b3:19:7d:4f:74:c1:23:04:04:e0:e3:0c:55:1c:ae:
         8b:46:32:32:80:75:72:ef:6a:58:9e:25:a6:9c:99:f7:46:f1:
         b2:8c:a3:88:bf:8e:8c:ba:3e:19:be:c1:ab:12:e1:80:61:52:
         d6:27:48:36:dd:ea:bd:b6:d4:be:54:b7:a3:87:fe:15:7b:9d:
         ee:0d:35:f1:c3:00:63:97:13:1d:fc:37:cf:e4:02:fd:e0:93:
         2e:67:d5:94:6a:43:c8:f7:d9:84:3a:b4:a9:25:7a:47:34:72:
         f1:28:1c:10:37:6b:d7:6c:84:00:a9:c2:e7:57:5d:9f:ad:da:
         3d:53:f7:b6:ea:19:c4:1e:7f:fc:20:ac:07:89:bd:0c:d4:20:
         3b:d9:4e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:00 2024 by rpki-client on console-ams.rpki-client.org