Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/dpoRe-3EgebzM-30Ci1X712j8T4.roa
File:                     dpoRe-3EgebzM-30Ci1X712j8T4.roa (raw, json)
Hash identifier:          6qIZoNDhNpO3ZorMC3Gz3/UAc4qqS9/qwAokpmxVlJY=
Subject key identifier:   76:9A:11:7B:ED:C4:81:E6:F3:33:ED:F4:0A:2D:57:EF:5D:A3:F1:3E
Certificate issuer:       /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial:       0C77
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/dpoRe-3EgebzM-30Ci1X712j8T4.roa
Signing time:             Sun 07 Feb 2021 11:39:42 +0000
ROA not before:           Sun 07 Feb 2021 11:39:42 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     7482
IP address blocks:        210.200.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3191 (0xc77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
        Validity
            Not Before: Feb  7 11:39:42 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=769A117BEDC481E6F333EDF40A2D57EF5DA3F13E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:5d:b2:b0:3d:d3:6f:2f:ce:21:d2:57:a4:b0:
                    f1:7b:b6:ba:7c:8e:26:bc:ab:f6:1a:cd:54:12:f9:
                    87:06:d6:50:d4:34:0f:92:fc:03:8a:ab:8d:5f:31:
                    49:33:0a:cd:68:4c:b4:21:0f:91:ab:9a:95:43:ff:
                    53:01:ed:8c:01:06:25:52:83:4b:8d:d0:d0:b3:a4:
                    27:39:b6:8e:53:c2:3d:14:2a:b9:12:d9:1c:0b:f1:
                    f9:9c:ed:2a:12:97:bf:dd:ad:a1:f6:12:9e:4d:bb:
                    ee:78:fd:6c:1e:34:bc:70:7e:80:bd:db:95:75:e6:
                    bc:2e:73:78:d6:ee:31:74:45:dd:48:c5:fd:23:6a:
                    a4:4e:d9:a7:87:87:eb:44:ef:b6:49:51:79:e6:ca:
                    6c:a7:5c:f5:cf:a2:93:f9:f3:15:ee:dd:ae:bc:2d:
                    f2:a5:7b:f9:4d:93:59:b0:04:d4:2f:12:1f:e3:6d:
                    98:a3:52:68:2b:bd:da:8f:45:28:e1:0f:6c:c3:2a:
                    6d:bf:e7:cd:9f:83:e6:73:0d:00:ed:90:a8:71:cc:
                    4a:18:d3:f6:5f:e5:7b:54:de:e1:c0:06:6a:df:d7:
                    94:1e:bd:50:86:7b:98:bf:2f:2f:dd:a4:91:7e:82:
                    21:c3:d6:e9:a0:4c:74:3c:89:9d:4a:4f:c8:f6:c6:
                    38:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:9A:11:7B:ED:C4:81:E6:F3:33:ED:F4:0A:2D:57:EF:5D:A3:F1:3E
            X509v3 Authority Key Identifier:
                keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/dpoRe-3EgebzM-30Ci1X712j8T4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.200.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a7:a4:87:c6:39:d8:6d:4b:2e:f5:c2:6e:ee:58:5d:de:aa:f5:
         e1:7e:48:ae:11:a3:8f:aa:7c:af:3d:28:4b:3b:6a:6e:e5:48:
         e2:18:d6:38:f7:ab:a2:da:94:f8:cd:70:9a:3f:45:a6:a3:2c:
         a8:70:c9:12:18:0f:67:27:90:23:d7:f9:2d:5a:a7:e1:32:b2:
         6f:4a:31:bb:cc:4b:3b:bf:ba:80:12:c8:b2:ef:b2:56:4b:c9:
         35:52:7e:b4:4a:f0:5c:b8:f6:38:f6:f0:bb:96:83:e6:18:3a:
         ac:70:c0:21:2f:42:6f:7f:79:ad:7c:f5:34:10:32:14:4d:7d:
         0f:0c:e2:45:b2:64:d1:e4:90:03:bd:79:9c:59:77:e4:31:5f:
         3d:64:3a:e7:96:00:15:49:10:8f:ff:08:55:d3:d2:e1:16:d6:
         d4:59:35:13:48:55:af:0a:1d:6c:00:60:3d:a9:b8:1a:18:7c:
         1c:43:0b:21:b8:f2:7d:fd:76:51:66:c4:bc:a2:39:00:fd:67:
         20:40:7c:52:53:51:45:79:b5:61:58:d7:d4:1e:3e:44:ee:c8:
         10:a6:1e:c5:d9:fb:34:bd:be:93:49:67:3a:1c:31:1c:22:6d:
         9c:52:62:8e:42:08:b9:66:21:8e:9d:4a:d1:71:f2:9b:f5:39:
         26:dc:68:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:01 2024 by rpki-client on console-ams.rpki-client.org