Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/dVibS2AWWgAKM17V4qf0FebfjbA.roa
File:                     dVibS2AWWgAKM17V4qf0FebfjbA.roa (raw, json)
Hash identifier:          GsyG8mCTm+YHAr9msr0yLhz6TByzIa1Np9/3/Y/yGFE=
Subject key identifier:   75:58:9B:4B:60:16:5A:00:0A:33:5E:D5:E2:A7:F4:15:E6:DF:8D:B0
Certificate issuer:       /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial:       0F63
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/dVibS2AWWgAKM17V4qf0FebfjbA.roa
Signing time:             Thu 15 Sep 2022 02:40:10 +0000
ROA not before:           Thu 15 Sep 2022 02:40:10 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     7482
IP address blocks:        210.58.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3939 (0xf63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
        Validity
            Not Before: Sep 15 02:40:10 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=75589B4B60165A000A335ED5E2A7F415E6DF8DB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:85:0d:18:b2:a5:5d:50:eb:31:07:41:f7:4a:
                    be:3f:81:1a:ea:44:4e:60:51:07:05:84:30:b4:76:
                    33:7c:ff:4e:b5:1f:e5:cb:aa:d3:b1:9d:26:c2:b1:
                    e0:bb:8d:ab:a4:19:1c:88:c5:e4:30:40:dd:c4:8d:
                    8e:7b:47:4c:f4:e4:32:4f:ed:46:7b:6c:22:b8:bf:
                    9f:6c:2e:db:05:a2:7e:25:55:af:63:0c:b2:6f:9b:
                    bb:71:19:62:9e:ba:e0:5d:ad:4b:de:d7:dd:62:b8:
                    01:23:41:de:65:25:c3:40:24:5b:48:15:27:64:3b:
                    18:3c:07:73:f4:16:b5:b0:cc:ff:c3:f8:27:60:e3:
                    da:24:75:78:6b:c7:5b:99:a7:55:6b:d3:54:b5:83:
                    4d:ae:e3:f8:7f:93:86:ba:90:cb:69:86:79:82:18:
                    fd:a6:e8:6b:a2:bf:4b:f7:86:f3:40:ba:d6:41:04:
                    5d:7f:7f:8a:4a:d6:5b:bf:e1:7d:5b:37:a7:e1:32:
                    bd:d0:a8:c8:4f:f3:19:07:58:d7:5a:67:6c:89:af:
                    f0:1d:71:d5:65:7c:5f:08:6f:42:87:fa:04:2e:31:
                    f4:a6:2f:a7:d9:d5:14:18:97:8a:03:11:69:85:ea:
                    e9:96:72:20:b8:24:36:f9:3c:ac:d5:71:2e:8c:77:
                    06:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:58:9B:4B:60:16:5A:00:0A:33:5E:D5:E2:A7:F4:15:E6:DF:8D:B0
            X509v3 Authority Key Identifier:
                keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/dVibS2AWWgAKM17V4qf0FebfjbA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.58.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a5:72:c7:48:15:08:9d:37:ff:a5:45:3b:cf:9b:2d:93:80:67:
         8a:fd:92:78:c7:0e:c7:a7:3b:3a:52:c6:2c:28:19:35:2d:dd:
         41:85:e1:60:7d:b0:0d:b2:8f:4c:dd:e6:91:c5:4a:ed:9b:91:
         be:37:dc:f3:d0:75:81:e8:73:2f:0b:c4:a1:73:c6:a0:42:d7:
         c3:22:2f:ec:9d:99:36:ef:70:a5:c5:69:6f:c4:f8:24:2a:c5:
         a6:08:dd:4e:ac:3e:65:1a:3f:29:b5:89:ef:96:50:de:94:64:
         a7:17:0a:6c:ff:57:40:fb:cb:0a:9f:53:b3:7b:8e:d3:f8:e1:
         89:1a:62:28:47:52:22:fe:1c:01:81:04:cb:85:83:aa:d1:19:
         4e:e2:04:8f:78:26:6b:ab:96:dc:85:94:3e:16:ab:18:62:a7:
         91:f3:8b:f3:1c:7c:3d:76:8a:13:18:e7:b6:53:47:24:ff:f2:
         62:1f:5a:05:92:77:fa:eb:9e:5f:4b:61:54:95:4d:de:43:95:
         34:23:6b:dd:5b:13:5d:a6:77:98:dc:63:8a:25:cc:1c:47:9d:
         e4:ef:f1:d7:52:38:a7:6f:3b:5d:66:c4:1d:e7:f2:f7:2d:9a:
         69:a3:b4:e3:33:62:27:0a:1f:bd:e4:81:ff:6b:d9:d1:56:84:
         2d:a3:39:90
-----BEGIN CERTIFICATE-----
MIIEzTCCA7WgAwIBAgICD2MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NjQyMzBGM0UzOUJFRkJCNzNBN0Q0RERCMjZGRTJENDQ2RUUyNTAeFw0yMjA5MTUw
MjQwMTBaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDc1NTg5QjRCNjAxNjVB
MDAwQTMzNUVENUUyQTdGNDE1RTZERjhEQjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDZhQ0YsqVdUOsxB0H3Sr4/gRrqRE5gUQcFhDC0djN8/061H+XL
qtOxnSbCseC7jaukGRyIxeQwQN3EjY57R0z05DJP7UZ7bCK4v59sLtsFon4lVa9j
DLJvm7txGWKeuuBdrUve191iuAEjQd5lJcNAJFtIFSdkOxg8B3P0FrWwzP/D+Cdg
49okdXhrx1uZp1Vr01S1g02u4/h/k4a6kMtphnmCGP2m6Guiv0v3hvNAutZBBF1/
f4pK1lu/4X1bN6fhMr3QqMhP8xkHWNdaZ2yJr/AdcdVlfF8Ib0KH+gQuMfSmL6fZ
1RQYl4oDEWmF6umWciC4JDb5PKzVcS6Mdwa1AgMBAAGjggHpMIIB5TAdBgNVHQ4E
FgQUdVibS2AWWgAKM17V4qf0FebfjbAwHwYDVR0jBBgwFoAU+wZCMPPjm++7c6fU
3bJv4tRG7iUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBPTC8t
d1pDTVBQam0tLTdjNmZVM2JKdjR0Ukc3aVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
Ly13WkNNUFBqbS0tN2M2ZlUzYkp2NHRSRzdpVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0FQT0wvZFZpYlMyQVdXZ0FLTTE3VjRxZjBG
ZWJmamJBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDANI6MA0G
CSqGSIb3DQEBCwUAA4IBAQClcsdIFQidN/+lRTvPmy2TgGeK/ZJ4xw7Hpzs6UsYs
KBk1Ld1BheFgfbANso9M3eaRxUrtm5G+N9zz0HWB6HMvC8Shc8agQtfDIi/snZk2
73ClxWlvxPgkKsWmCN1OrD5lGj8ptYnvllDelGSnFwps/1dA+8sKn1Oze47T+OGJ
GmIoR1Ii/hwBgQTLhYOq0RlO4gSPeCZrq5bchZQ+FqsYYqeR84vzHHw9dooTGOe2
U0ck//JiH1oFknf6655fS2FUlU3eQ5U0I2vdWxNdpneY3GOKJcwcR53k7/HXUjin
bztdZsQd5/L3LZppo7TjM2InCh+95IH/a9nRVoQtozmQ
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:01 2024 by rpki-client on console-ams.rpki-client.org