Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/jLO_l1lzNlK64jN4WeZ1_sj7Uvw.roa
File:                     jLO_l1lzNlK64jN4WeZ1_sj7Uvw.roa (raw, json)
Hash identifier:          gPIRI/w+oMQ0Ufg00x/AZdVNID1zX25RKwxb+US9KaU=
Subject key identifier:   8C:B3:BF:97:59:73:36:52:BA:E2:33:78:59:E6:75:FE:C8:FB:52:FC
Certificate issuer:       /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial:       0F63
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/jLO_l1lzNlK64jN4WeZ1_sj7Uvw.roa
Signing time:             Thu 15 Sep 2022 02:40:19 +0000
ROA not before:           Thu 15 Sep 2022 02:40:19 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     9311
IP address blocks:        203.79.224.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3939 (0xf63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
        Validity
            Not Before: Sep 15 02:40:19 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=8CB3BF9759733652BAE2337859E675FEC8FB52FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:99:08:ea:2b:1f:e1:08:89:d5:da:0a:da:42:
                    7d:70:d6:0a:ed:29:bb:dd:82:c7:03:02:97:e4:df:
                    db:b7:36:04:8f:bd:74:34:14:ca:55:e2:54:4b:53:
                    1f:bc:79:3e:44:83:f6:3d:62:bd:37:77:0f:54:48:
                    44:18:36:1f:33:50:27:ea:0e:17:2d:29:77:29:22:
                    41:4b:54:81:fc:fd:f3:4f:5a:06:cb:b9:b2:51:98:
                    82:ef:48:6f:dc:93:dc:71:c3:55:09:ea:b2:7f:bf:
                    cd:23:4b:42:a3:db:81:03:a4:db:65:97:4f:f0:95:
                    53:82:7f:e7:4e:04:f7:99:c6:a5:4e:63:fc:f0:8d:
                    47:68:f3:d1:fb:38:7f:e9:41:84:37:59:ba:b5:39:
                    5f:13:75:67:8f:17:7f:13:44:59:9a:6f:a1:27:3a:
                    a2:7d:d9:21:ec:b6:ab:77:4f:9c:a6:14:b8:69:60:
                    ab:81:2f:d6:7c:86:01:bd:9a:c2:be:5a:2b:bd:bb:
                    5b:69:7f:8f:5b:21:55:a3:ff:32:a3:54:a7:7b:db:
                    24:44:0e:ab:03:82:2f:bc:1f:15:95:a4:5f:60:52:
                    40:49:f9:70:d7:93:d3:b5:8a:5a:79:2c:59:14:56:
                    0f:f0:28:7b:b6:89:5c:84:01:02:fe:4a:f7:2d:94:
                    35:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:B3:BF:97:59:73:36:52:BA:E2:33:78:59:E6:75:FE:C8:FB:52:FC
            X509v3 Authority Key Identifier:
                keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/jLO_l1lzNlK64jN4WeZ1_sj7Uvw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.79.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a9:ca:84:53:ed:4b:e5:77:e4:6a:e7:16:fb:16:c0:f5:6f:22:
         f5:9b:86:62:1b:90:eb:af:57:b1:b4:b4:00:4a:a3:c8:b7:33:
         7b:6e:84:23:f5:80:27:bd:05:59:89:32:0a:4a:5b:92:0b:e3:
         e5:0e:14:9e:4a:ca:d4:83:d9:8f:b5:d7:32:7e:2f:f8:73:e7:
         6a:57:85:8f:9e:09:fb:45:6f:b4:ec:19:67:a2:4e:d2:4b:27:
         d7:13:29:3d:9f:31:bf:cd:e3:e2:50:9c:42:73:d2:7b:97:93:
         9e:18:b8:2f:e2:2a:6c:dd:02:64:0f:83:2d:9d:54:db:98:40:
         aa:cb:69:d5:a6:f1:09:7d:3e:0f:3e:dd:a8:c2:aa:dc:67:b5:
         e6:4e:80:37:c8:0d:17:64:98:13:fe:98:dc:f5:27:34:1f:57:
         b6:a4:f9:3f:84:0a:0d:91:c2:7c:39:b5:62:95:ec:53:75:10:
         29:1c:2d:68:5f:58:8f:c9:24:25:8d:0d:ea:ad:88:a4:2a:02:
         3b:a5:2a:26:e4:1b:84:ea:fa:62:a9:15:b6:da:87:f5:fe:0b:
         2f:b5:83:f5:b2:07:8a:9a:a7:45:ee:e9:e7:14:99:a0:de:c0:
         c2:48:91:66:0e:11:e8:30:60:c9:5a:92:fb:0a:d9:bc:9e:f2:
         49:77:56:47
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICD2MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NjQyMzBGM0UzOUJFRkJCNzNBN0Q0RERCMjZGRTJENDQ2RUUyNTAeFw0yMjA5MTUw
MjQwMTlaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDhDQjNCRjk3NTk3MzM2
NTJCQUUyMzM3ODU5RTY3NUZFQzhGQjUyRkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDimQjqKx/hCInV2graQn1w1grtKbvdgscDApfk39u3NgSPvXQ0
FMpV4lRLUx+8eT5Eg/Y9Yr03dw9USEQYNh8zUCfqDhctKXcpIkFLVIH8/fNPWgbL
ubJRmILvSG/ck9xxw1UJ6rJ/v80jS0Kj24EDpNtll0/wlVOCf+dOBPeZxqVOY/zw
jUdo89H7OH/pQYQ3Wbq1OV8TdWePF38TRFmab6EnOqJ92SHstqt3T5ymFLhpYKuB
L9Z8hgG9msK+Wiu9u1tpf49bIVWj/zKjVKd72yREDqsDgi+8HxWVpF9gUkBJ+XDX
k9O1ilp5LFkUVg/wKHu2iVyEAQL+SvctlDVVAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUjLO/l1lzNlK64jN4WeZ1/sj7UvwwHwYDVR0jBBgwFoAU+wZCMPPjm++7c6fU
3bJv4tRG7iUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBPTC8t
d1pDTVBQam0tLTdjNmZVM2JKdjR0Ukc3aVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
Ly13WkNNUFBqbS0tN2M2ZlUzYkp2NHRSRzdpVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0FQT0wvakxPX2wxbHpObEs2NGpONFdlWjFf
c2o3VXZ3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAstP4DAN
BgkqhkiG9w0BAQsFAAOCAQEAqcqEU+1L5XfkaucW+xbA9W8i9ZuGYhuQ669XsbS0
AEqjyLcze26EI/WAJ70FWYkyCkpbkgvj5Q4UnkrK1IPZj7XXMn4v+HPnaleFj54J
+0VvtOwZZ6JO0ksn1xMpPZ8xv83j4lCcQnPSe5eTnhi4L+IqbN0CZA+DLZ1U25hA
qstp1abxCX0+Dz7dqMKq3Ge15k6AN8gNF2SYE/6Y3PUnNB9XtqT5P4QKDZHCfDm1
YpXsU3UQKRwtaF9Yj8kkJY0N6q2IpCoCO6UqJuQbhOr6YqkVttqH9f4LL7WD9bIH
ipqnRe7p5xSZoN7AwkiRZg4R6DBgyVqS+wrZvJ7ySXdWRw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:01 2024 by rpki-client on console-ams.rpki-client.org