Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/W78BoYmays7lVr5cqRaiMOHZyCY.roa
File:                     W78BoYmays7lVr5cqRaiMOHZyCY.roa (raw, json)
Hash identifier:          SkaKP0DG/i8lCJCIlilfLZiOcA6F5M1PhsDI9yg5wbs=
Subject key identifier:   5B:BF:01:A1:89:9A:CA:CE:E5:56:BE:5C:A9:16:A2:30:E1:D9:C8:26
Certificate issuer:       /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial:       0F63
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/W78BoYmays7lVr5cqRaiMOHZyCY.roa
Signing time:             Thu 15 Sep 2022 02:40:31 +0000
ROA not before:           Thu 15 Sep 2022 02:40:31 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24154
IP address blocks:        60.244.64.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3939 (0xf63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
        Validity
            Not Before: Sep 15 02:40:31 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=5BBF01A1899ACACEE556BE5CA916A230E1D9C826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:10:3b:5b:9a:cb:db:73:d6:e1:3b:58:60:f9:
                    16:08:35:6a:06:fa:14:e9:03:e3:96:77:3f:59:09:
                    42:ef:26:fa:b7:ec:a9:d1:e0:6f:5a:b7:05:fa:70:
                    a2:c5:0f:ba:d6:42:0a:d1:7e:c8:fc:a3:56:e1:d1:
                    20:2a:32:27:07:5e:29:02:a0:36:44:2a:da:54:f8:
                    8e:4e:38:5d:63:b8:b0:7c:05:ad:90:70:9f:ea:f2:
                    12:ea:f8:b7:78:49:53:dc:5c:4a:d2:79:63:36:cd:
                    85:9d:79:7d:80:2d:18:77:fc:3c:69:c9:4c:8a:62:
                    63:da:b6:41:dc:0c:13:c5:4b:0f:bb:90:aa:76:3b:
                    47:0e:78:e9:02:67:47:64:4f:59:2d:04:9b:3a:99:
                    4d:1b:15:3d:ce:d8:2d:1f:7c:ec:c7:63:db:d7:10:
                    61:ef:e7:58:f1:70:64:29:51:2c:40:8c:a4:1d:c3:
                    69:9b:f5:54:64:49:02:e9:ec:75:16:d8:3e:d3:58:
                    07:60:0e:c3:fd:21:6c:ac:db:f6:19:ec:9f:60:3a:
                    01:43:c5:16:65:b9:37:b2:31:d8:50:3b:61:bc:e1:
                    a2:45:61:7d:21:1c:a7:fe:c9:a2:0a:21:35:c2:ec:
                    7e:33:71:e7:cb:db:77:a3:0c:35:90:0a:6a:c1:4c:
                    2e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:BF:01:A1:89:9A:CA:CE:E5:56:BE:5C:A9:16:A2:30:E1:D9:C8:26
            X509v3 Authority Key Identifier:
                keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/W78BoYmays7lVr5cqRaiMOHZyCY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  60.244.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         b0:4a:d2:d1:ee:81:d5:32:72:65:27:f4:61:28:05:96:ba:6a:
         4d:20:28:d8:37:4a:ae:36:f8:6a:39:f6:39:06:76:6d:7b:4a:
         80:d7:bc:b1:45:d1:56:c3:98:73:ba:e1:0f:87:53:f5:2e:3b:
         4a:d1:e3:2b:f0:4c:85:76:78:82:d3:4e:80:b6:a0:0a:69:b9:
         cb:91:25:96:8e:53:b1:05:7b:a7:3b:63:56:ad:ee:66:45:37:
         64:c2:41:dc:ad:96:af:38:7d:3e:ec:d1:16:fe:51:2f:fe:81:
         28:ce:8e:b8:4a:e5:ef:d1:8f:79:d0:0b:35:a5:8b:f6:df:b8:
         26:f4:3a:70:4c:d3:98:1b:51:83:4d:1b:6b:eb:24:a1:cb:c7:
         b6:ba:c6:00:3d:10:43:df:14:94:9e:8e:44:8e:ae:df:73:86:
         13:a2:9e:86:f1:1d:8b:2f:da:06:09:75:2e:dd:98:23:36:29:
         ab:8b:c8:c5:6e:59:56:64:2d:4b:26:af:f1:66:ff:e7:b0:f6:
         7e:0c:a5:b4:eb:31:1c:fb:d7:b0:db:11:1f:86:b8:da:85:04:
         7f:8f:82:98:75:46:fa:31:a3:c2:97:fa:08:49:b8:10:2e:78:
         dd:5e:99:99:94:ce:94:5c:20:ef:78:50:35:4c:d6:2f:65:52:
         14:b3:6f:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:01 2024 by rpki-client on console-ams.rpki-client.org