Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/_yrs5jJ13Gzuic6Gw572Zsjk5wA.roa
File:                     _yrs5jJ13Gzuic6Gw572Zsjk5wA.roa (raw, json)
Hash identifier:          JrkMsm36cT1Z6a4MT5qBqC8qNHJerh5fDeqoK79dxMo=
Subject key identifier:   FF:2A:EC:E6:32:75:DC:6C:EE:89:CE:86:C3:9E:F6:66:C8:E4:E7:00
Certificate issuer:       /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial:       08E7
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/_yrs5jJ13Gzuic6Gw572Zsjk5wA.roa
Signing time:             Tue 29 Sep 2020 10:01:14 +0000
ROA not before:           Tue 29 Sep 2020 10:01:14 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     131627
IP address blocks:        210.58.128.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2279 (0x8e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
        Validity
            Not Before: Sep 29 10:01:14 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=FF2AECE63275DC6CEE89CE86C39EF666C8E4E700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ab:1e:f2:fd:f6:2e:22:a5:b9:6f:b3:20:92:
                    6b:61:8e:0b:86:e1:72:0d:df:93:5d:30:38:0c:64:
                    92:bc:34:94:3e:83:05:e2:34:ff:fa:85:df:f3:b3:
                    97:f9:f2:67:b9:7c:e9:af:89:25:17:a8:28:c5:93:
                    42:0e:92:53:ca:ce:51:dd:db:a4:cc:2d:04:d9:a5:
                    9b:0c:18:9b:e6:b6:75:90:17:21:b4:5f:90:dd:c5:
                    3f:ff:3e:e3:89:58:6e:b6:47:5b:ba:80:0d:a7:b3:
                    3f:6e:93:3b:46:91:a8:0b:44:72:b8:26:1b:60:dd:
                    7e:8e:26:da:9a:39:b3:56:5e:bd:b8:0e:fb:67:3a:
                    ee:09:65:ae:e7:60:cc:f0:b4:b8:e3:a7:07:f8:a4:
                    c6:2b:37:89:ee:4b:d4:cc:85:92:90:91:56:75:e9:
                    68:3d:80:1f:fe:5a:45:4b:4c:dd:d2:8a:9b:f0:23:
                    5d:60:10:8a:e5:28:d7:69:34:09:df:c4:02:f6:2b:
                    49:e9:88:b2:84:45:f6:cf:64:66:ed:f4:f7:15:56:
                    6f:6e:fa:b3:5a:7a:cc:9c:26:c5:c3:dd:87:3f:0d:
                    d9:50:cd:98:34:55:69:03:e0:63:ac:9b:83:df:a6:
                    13:b4:0a:c8:c9:b4:6c:6f:82:1e:ed:e3:dc:98:fa:
                    4f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:2A:EC:E6:32:75:DC:6C:EE:89:CE:86:C3:9E:F6:66:C8:E4:E7:00
            X509v3 Authority Key Identifier:
                keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/_yrs5jJ13Gzuic6Gw572Zsjk5wA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.58.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b0:24:c1:64:1c:4f:f1:ad:92:83:22:4e:00:5c:b4:04:3a:d4:
         a3:60:aa:99:4f:f7:99:9e:d1:0d:8f:1c:0e:db:61:9a:6e:77:
         12:52:29:e7:99:15:b0:02:cc:fc:4a:49:e8:26:ba:0f:94:90:
         a7:84:f8:74:bf:16:c6:32:e9:fa:f5:9c:6e:3c:17:7e:74:eb:
         3d:84:18:d2:52:2b:74:b9:1a:e7:24:bf:96:5e:4c:97:6f:48:
         31:cc:f6:60:18:9d:15:ee:8b:73:25:ea:af:74:4d:dd:18:06:
         8d:ed:c4:e8:f0:1e:df:89:8d:6f:e1:24:ae:4a:4b:29:80:b6:
         f5:87:93:6d:6e:77:05:d1:9e:f2:2b:fb:3c:79:5b:fb:70:5b:
         8e:73:10:62:1f:78:d0:16:2f:f7:00:08:f4:1b:78:40:11:a8:
         e1:55:26:68:5b:e7:61:f1:e2:a9:67:ec:be:53:d9:e4:4f:32:
         23:3a:97:a2:2b:7f:97:31:cc:1e:fe:bc:39:49:c1:72:a1:fa:
         f2:d9:b1:e3:5a:48:81:0d:f1:37:4e:f6:3a:65:a2:da:28:be:
         c8:bd:7c:5f:65:71:c6:cd:f3:bb:fc:42:0c:af:7d:31:e7:24:
         de:38:cf:b5:56:e2:e4:17:d8:fc:5c:68:40:22:d4:29:ae:09:
         49:da:65:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:01 2024 by rpki-client on console-ams.rpki-client.org