Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/_EqJcJRVp_yw8M7swifHZUNWR3Y.roa
File:                     _EqJcJRVp_yw8M7swifHZUNWR3Y.roa (raw, json)
Hash identifier:          jVKiyR0C6SWuM4bj969hXVqiNF5me3QQcYt+8j/6dh0=
Subject key identifier:   FC:4A:89:70:94:55:A7:FC:B0:F0:CE:EC:C2:27:C7:65:43:56:47:76
Certificate issuer:       /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial:       0C0D
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/_EqJcJRVp_yw8M7swifHZUNWR3Y.roa
Signing time:             Sun 07 Feb 2021 11:34:43 +0000
ROA not before:           Sun 07 Feb 2021 11:34:43 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24154
IP address blocks:        210.202.32.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3085 (0xc0d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
        Validity
            Not Before: Feb  7 11:34:43 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=FC4A89709455A7FCB0F0CEECC227C76543564776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ea:08:48:b3:b6:8f:a2:89:2b:62:c0:8a:9c:
                    53:92:bb:c8:dd:12:9b:b1:ab:09:eb:8d:7f:a9:37:
                    41:37:ed:b0:e7:2a:0f:4a:d9:42:2f:f7:2d:f8:26:
                    2b:48:75:2d:e1:c7:1c:19:96:fc:49:e9:c1:3d:0a:
                    f9:96:3e:ef:28:06:c1:05:e4:de:73:c3:9f:48:68:
                    6e:e8:7f:8b:7a:1a:8f:66:9a:25:e8:1d:be:8d:0c:
                    be:66:b1:72:1d:48:52:9f:29:a5:e4:20:5b:1b:7d:
                    44:96:c9:cb:77:a9:ac:6d:f3:40:36:15:42:d3:c9:
                    3a:bc:a9:df:d9:ea:7b:d8:38:c7:ad:d9:3b:84:b1:
                    d1:80:b8:78:50:ae:3d:37:97:8e:d0:6a:40:a6:5f:
                    4b:7c:91:16:96:71:fe:ea:8e:86:8c:e8:38:a4:f9:
                    42:5a:1b:79:ba:23:da:95:f8:e4:00:3f:e0:a8:25:
                    a1:d2:3d:c4:19:82:0f:f3:20:e4:b4:e9:22:97:45:
                    e4:85:f0:03:26:33:76:f1:53:8d:ea:32:77:08:14:
                    e2:dd:50:52:3e:69:17:44:72:5c:52:36:02:b1:02:
                    5c:4e:6b:11:c3:9a:95:60:73:b1:78:f1:af:c2:18:
                    ba:5a:d9:ee:3b:bf:db:bd:3e:66:b0:a1:48:1f:4d:
                    3b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:4A:89:70:94:55:A7:FC:B0:F0:CE:EC:C2:27:C7:65:43:56:47:76
            X509v3 Authority Key Identifier:
                keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/_EqJcJRVp_yw8M7swifHZUNWR3Y.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.202.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         08:ee:dc:31:de:b8:fe:1c:5c:f0:08:b0:2c:e6:2a:96:b0:a9:
         53:87:02:e2:aa:2a:6e:c4:79:84:c9:00:50:04:b1:b3:97:99:
         15:58:35:e4:30:22:dc:61:19:58:b4:b4:88:8f:53:fb:f9:bb:
         60:43:1f:fa:c9:b9:21:68:7f:9b:5c:15:f6:db:5a:69:8b:39:
         b6:ce:10:51:76:72:e5:a8:fd:44:00:34:6c:42:f7:c9:78:44:
         fa:ec:a4:fa:25:a7:0f:7a:dc:77:b9:ed:89:64:ad:14:ff:11:
         6a:c0:fd:b7:65:21:12:cd:0b:a8:31:14:45:2f:51:36:5b:3e:
         c9:55:5f:41:0b:20:16:06:0c:14:a5:62:29:4b:0a:cb:5d:6c:
         ac:24:d4:ad:8d:4d:67:2f:50:ff:4d:69:55:60:41:ba:e7:a6:
         fd:0c:f9:6d:61:cb:59:c6:8c:40:78:ae:46:e6:00:d0:32:24:
         9f:69:db:da:a5:98:b6:15:f8:86:1d:c3:ea:99:1a:60:3b:48:
         c3:ba:bf:03:3d:d5:35:95:73:82:8c:ce:ab:7a:6a:73:0b:bc:
         5b:30:37:ef:f0:d8:dc:6a:a7:92:19:1a:8d:93:d5:ee:0d:9f:
         db:2c:31:85:80:2c:30:dc:1c:1d:8c:62:2a:25:2e:63:89:fb:
         ea:dc:66:e8
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICDA0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NjQyMzBGM0UzOUJFRkJCNzNBN0Q0RERCMjZGRTJENDQ2RUUyNTAeFw0yMTAyMDcx
MTM0NDNaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEZDNEE4OTcwOTQ1NUE3
RkNCMEYwQ0VFQ0MyMjdDNzY1NDM1NjQ3NzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC06ghIs7aPookrYsCKnFOSu8jdEpuxqwnrjX+pN0E37bDnKg9K
2UIv9y34JitIdS3hxxwZlvxJ6cE9CvmWPu8oBsEF5N5zw59IaG7of4t6Go9mmiXo
Hb6NDL5msXIdSFKfKaXkIFsbfUSWyct3qaxt80A2FULTyTq8qd/Z6nvYOMet2TuE
sdGAuHhQrj03l47QakCmX0t8kRaWcf7qjoaM6Dik+UJaG3m6I9qV+OQAP+CoJaHS
PcQZgg/zIOS06SKXReSF8AMmM3bxU43qMncIFOLdUFI+aRdEclxSNgKxAlxOaxHD
mpVgc7F48a/CGLpa2e47v9u9PmawoUgfTTuvAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQU/EqJcJRVp/yw8M7swifHZUNWR3YwHwYDVR0jBBgwFoAU+wZCMPPjm++7c6fU
3bJv4tRG7iUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBPTC8t
d1pDTVBQam0tLTdjNmZVM2JKdjR0Ukc3aVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
Ly13WkNNUFBqbS0tN2M2ZlUzYkp2NHRSRzdpVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0FQT0wvX0VxSmNKUlZwX3l3OE03c3dpZkha
VU5XUjNZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBNLKIDAN
BgkqhkiG9w0BAQsFAAOCAQEACO7cMd64/hxc8AiwLOYqlrCpU4cC4qoqbsR5hMkA
UASxs5eZFVg15DAi3GEZWLS0iI9T+/m7YEMf+sm5IWh/m1wV9ttaaYs5ts4QUXZy
5aj9RAA0bEL3yXhE+uyk+iWnD3rcd7ntiWStFP8RasD9t2UhEs0LqDEURS9RNls+
yVVfQQsgFgYMFKViKUsKy11srCTUrY1NZy9Q/01pVWBBuuem/Qz5bWHLWcaMQHiu
RuYA0DIkn2nb2qWYthX4hh3D6pkaYDtIw7q/Az3VNZVzgozOq3pqcwu8WzA37/DY
3GqnkhkajZPV7g2f2ywxhYAsMNwcHYxiKiUuY4n76txm6A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:01 2024 by rpki-client on console-ams.rpki-client.org