Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/fpyRauwUiPT1Tx3dw2N6gMelny0.roa
File:                     fpyRauwUiPT1Tx3dw2N6gMelny0.roa (raw, json)
Hash identifier:          26jrMWA4ZWIdcZ8c49dnABxySOejj6q8SKda6ChmYUA=
Subject key identifier:   7E:9C:91:6A:EC:14:88:F4:F5:4F:1D:DD:C3:63:7A:80:C7:A5:9F:2D
Certificate issuer:       /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial:       12AD
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/fpyRauwUiPT1Tx3dw2N6gMelny0.roa
Signing time:             Fri 01 Sep 2023 08:04:50 +0000
ROA not before:           Fri 01 Sep 2023 08:04:50 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     7482
IP address blocks:        210.201.64.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4781 (0x12ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
        Validity
            Not Before: Sep  1 08:04:50 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=7E9C916AEC1488F4F54F1DDDC3637A80C7A59F2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c5:86:a3:fd:c8:7d:17:26:b6:6b:46:36:c3:
                    7a:09:2a:bc:11:bd:d1:33:f4:a4:0d:2f:46:7a:7d:
                    c0:a0:35:20:f3:1e:d9:3a:4b:ff:7b:bf:c0:d6:29:
                    5e:d4:64:42:ee:dd:07:62:4a:94:ba:e9:e9:46:47:
                    a1:86:dc:9e:4c:0a:05:d0:d5:80:0e:05:b6:d4:f1:
                    62:38:bf:d0:a8:57:fc:80:1a:a4:5b:e9:da:dd:d8:
                    2f:96:88:28:08:ab:2d:a1:5e:4f:91:20:12:79:85:
                    27:ef:b0:e3:13:ed:14:86:7d:44:d2:9e:5d:51:b3:
                    b5:d8:f4:15:ee:f2:1c:fc:3d:5c:ba:f9:8d:3f:dc:
                    54:9e:ba:41:41:d2:81:b4:bc:5b:31:29:aa:b3:93:
                    26:99:54:97:83:c9:ec:00:26:4c:ac:53:19:d2:b1:
                    c8:5f:f2:42:2a:76:d3:13:eb:5a:03:e3:69:f8:c0:
                    b8:5d:a2:27:19:b0:43:52:8b:03:9e:4c:e2:e4:ad:
                    47:eb:ec:a5:a6:1f:b6:a8:9f:bc:1a:63:1b:60:8f:
                    c4:7c:0e:05:e5:45:8c:75:70:ea:eb:04:01:fd:78:
                    ca:76:22:88:12:3f:d4:e2:83:17:9b:8a:8b:4f:ce:
                    fd:1c:59:e3:05:50:d6:bc:6d:2a:81:5f:8b:ad:ec:
                    0c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:9C:91:6A:EC:14:88:F4:F5:4F:1D:DD:C3:63:7A:80:C7:A5:9F:2D
            X509v3 Authority Key Identifier:
                keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/fpyRauwUiPT1Tx3dw2N6gMelny0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.201.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         a1:82:3a:21:2a:98:ea:00:43:92:71:25:7a:b0:ed:c4:da:6d:
         ef:7b:b5:0c:bb:bd:6a:1d:c3:39:c0:f4:c5:6f:f3:1d:f4:45:
         0c:f4:40:d4:2c:89:97:48:9c:2d:77:06:d0:46:9e:f9:35:c6:
         c2:bf:39:a7:7e:76:c2:69:d2:12:32:5c:db:d9:2a:f4:a5:76:
         03:6d:aa:12:32:78:66:92:d7:74:73:b2:0a:e0:48:8a:42:dd:
         35:ad:78:e3:7e:b4:e6:25:e9:32:ba:e1:95:1d:2a:b7:91:75:
         d7:c3:76:12:a8:4f:14:e8:a5:4d:16:91:28:ca:17:bc:d7:c9:
         26:d8:19:67:be:b5:e3:77:08:80:75:bc:27:4e:09:bc:91:e2:
         34:45:11:8a:0f:72:ab:d7:b4:4d:66:21:78:1e:72:fd:e0:42:
         ad:7d:c1:62:09:c0:f2:eb:a4:34:7b:22:1d:46:8b:8a:f5:68:
         25:20:b5:a8:09:b6:46:71:c5:97:89:a3:d2:2c:cf:f7:4b:25:
         30:98:d6:09:87:48:39:a1:b5:73:4f:59:57:50:c0:e5:9b:e9:
         1b:24:11:7e:90:26:a2:5e:c4:ed:d9:c8:20:56:3b:73:8e:b1:
         31:ac:86:a6:3e:43:9d:6c:b5:b2:93:8a:b0:b3:5a:c7:8a:e0:
         6f:96:e1:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:32 2024 by rpki-client on console-fra.rpki-client.org