Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/mF2fTpC6cSBw-8uoZuRZkcnUdhI.roa
File:                     mF2fTpC6cSBw-8uoZuRZkcnUdhI.roa (raw, json)
Hash identifier:          88rXSf0FHyP9anmeiUSstnzMmYijAmvEvzb5Y8xbrmY=
Subject key identifier:   98:5D:9F:4E:90:BA:71:20:70:FB:CB:A8:66:E4:59:91:C9:D4:76:12
Certificate issuer:       /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial:       0F63
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/mF2fTpC6cSBw-8uoZuRZkcnUdhI.roa
Signing time:             Thu 15 Sep 2022 02:40:31 +0000
ROA not before:           Thu 15 Sep 2022 02:40:31 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     131591
IP address blocks:        103.231.49.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3939 (0xf63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
        Validity
            Not Before: Sep 15 02:40:31 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=985D9F4E90BA712070FBCBA866E45991C9D47612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:64:52:f9:95:1e:50:49:7e:4c:f9:a1:99:9b:
                    b7:37:89:55:9b:00:11:86:e8:57:a8:14:79:49:f9:
                    4f:2d:54:be:c4:f1:ba:9c:c4:91:3d:80:2a:87:a8:
                    b2:50:f8:70:60:bb:b5:f6:d8:f6:78:f0:3d:59:12:
                    cc:c3:05:de:63:3b:95:e1:e1:3c:3d:b0:0f:50:70:
                    31:4c:81:c9:20:7c:47:eb:ec:e3:b6:7b:db:ca:ab:
                    36:91:e9:25:2c:32:0c:11:59:e7:1c:8c:4c:c2:e0:
                    c4:7b:11:80:e7:43:e3:85:66:46:48:36:0e:c8:c1:
                    15:d7:f4:09:b1:6c:e7:ce:2c:40:bc:79:33:28:60:
                    d7:b5:73:e2:e1:58:18:d0:03:9d:8e:26:90:33:fc:
                    e6:c6:9d:ff:b8:91:b2:b2:26:23:ef:5d:33:82:4b:
                    4a:fb:ca:22:34:40:f9:b0:b6:59:bf:cb:f6:66:d7:
                    a7:65:75:65:cd:60:d0:90:54:2b:8c:c1:be:46:7d:
                    f8:86:d0:bf:1f:00:d8:b0:3c:d7:ba:04:94:43:cb:
                    d0:5a:ce:dd:c5:7b:cf:b4:a1:1c:18:7b:9a:c5:38:
                    ea:a7:4b:de:f3:db:b8:9d:64:d6:2f:aa:70:27:0c:
                    dd:68:0c:d3:80:a6:1d:88:a7:3e:27:c5:63:c3:52:
                    67:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:5D:9F:4E:90:BA:71:20:70:FB:CB:A8:66:E4:59:91:C9:D4:76:12
            X509v3 Authority Key Identifier:
                keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/mF2fTpC6cSBw-8uoZuRZkcnUdhI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.231.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:24:b0:f2:a3:67:cd:42:10:4d:7f:ad:ad:f3:24:0c:bd:85:
         aa:7d:d6:f2:c4:14:4b:9c:4b:97:e3:cc:42:ce:95:41:1e:69:
         0c:60:8f:56:85:47:ef:15:e4:f0:c3:30:8c:76:c8:20:dc:41:
         3a:7f:0e:a8:d8:fb:0e:df:92:8e:2a:90:90:65:d6:c6:1b:02:
         38:b2:ad:1d:d5:c4:24:6d:75:00:81:d1:b4:9a:cb:10:5d:0c:
         20:d3:4c:7c:5f:06:47:5f:20:04:a9:2a:62:5f:de:53:fc:85:
         14:e5:a4:fd:c1:91:46:1b:7f:eb:64:f0:fd:68:dd:32:3e:8a:
         79:bd:38:d1:de:3c:a5:72:93:a7:cf:9a:1f:ca:b2:5c:1c:2c:
         4f:cb:4b:af:8c:6c:1b:52:c9:96:86:2a:c5:1c:51:e9:49:aa:
         80:25:ea:fb:bb:4a:e8:6e:10:1c:e8:fd:96:1a:08:f3:e9:b7:
         9f:14:bb:ac:40:be:08:3e:d4:25:a8:31:65:a6:27:2d:b4:af:
         75:74:22:b3:4d:e9:71:e6:fe:45:4a:66:38:a9:70:e1:dd:0f:
         64:20:eb:54:5a:b1:cf:18:84:ca:89:90:a8:99:40:d9:6c:e0:
         8b:7e:4d:ad:4e:dd:b6:1d:b7:08:8b:46:bb:ae:e2:a9:1f:94:
         78:a7:13:8e
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICD2MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NjQyMzBGM0UzOUJFRkJCNzNBN0Q0RERCMjZGRTJENDQ2RUUyNTAeFw0yMjA5MTUw
MjQwMzFaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDk4NUQ5RjRFOTBCQTcx
MjA3MEZCQ0JBODY2RTQ1OTkxQzlENDc2MTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDlZFL5lR5QSX5M+aGZm7c3iVWbABGG6FeoFHlJ+U8tVL7E8bqc
xJE9gCqHqLJQ+HBgu7X22PZ48D1ZEszDBd5jO5Xh4Tw9sA9QcDFMgckgfEfr7OO2
e9vKqzaR6SUsMgwRWeccjEzC4MR7EYDnQ+OFZkZINg7IwRXX9AmxbOfOLEC8eTMo
YNe1c+LhWBjQA52OJpAz/ObGnf+4kbKyJiPvXTOCS0r7yiI0QPmwtlm/y/Zm16dl
dWXNYNCQVCuMwb5GffiG0L8fANiwPNe6BJRDy9Bazt3Fe8+0oRwYe5rFOOqnS97z
27idZNYvqnAnDN1oDNOAph2Ipz4nxWPDUmcvAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUmF2fTpC6cSBw+8uoZuRZkcnUdhIwHwYDVR0jBBgwFoAU+wZCMPPjm++7c6fU
3bJv4tRG7iUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBPTC8t
d1pDTVBQam0tLTdjNmZVM2JKdjR0Ukc3aVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
Ly13WkNNUFBqbS0tN2M2ZlUzYkp2NHRSRzdpVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0FQT0wvbUYyZlRwQzZjU0J3LTh1b1p1Ulpr
Y25VZGhJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGfnMTAN
BgkqhkiG9w0BAQsFAAOCAQEAfySw8qNnzUIQTX+trfMkDL2Fqn3W8sQUS5xLl+PM
Qs6VQR5pDGCPVoVH7xXk8MMwjHbIINxBOn8OqNj7Dt+SjiqQkGXWxhsCOLKtHdXE
JG11AIHRtJrLEF0MINNMfF8GR18gBKkqYl/eU/yFFOWk/cGRRht/62Tw/WjdMj6K
eb040d48pXKTp8+aH8qyXBwsT8tLr4xsG1LJloYqxRxR6UmqgCXq+7tK6G4QHOj9
lhoI8+m3nxS7rEC+CD7UJagxZaYnLbSvdXQis03pceb+RUpmOKlw4d0PZCDrVFqx
zxiEyomQqJlA2Wzgi35NrU7dth23CItGu67iqR+UeKcTjg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:32 2024 by rpki-client on console-fra.rpki-client.org