Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/n1IAnboA7QX6oNfi0bzX7xhiiS4.roa
File:                     n1IAnboA7QX6oNfi0bzX7xhiiS4.roa (raw, json)
Hash identifier:          NTWVmlPGpGb4z/iQwIH6wSwXVCKV2ZPpQv0JGnhD4ew=
Subject key identifier:   9F:52:00:9D:BA:00:ED:05:FA:A0:D7:E2:D1:BC:D7:EF:18:62:89:2E
Certificate issuer:       /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial:       098A
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/n1IAnboA7QX6oNfi0bzX7xhiiS4.roa
Signing time:             Tue 29 Sep 2020 10:01:59 +0000
ROA not before:           Tue 29 Sep 2020 10:01:59 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     17709
IP address blocks:        210.63.192.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2442 (0x98a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
        Validity
            Not Before: Sep 29 10:01:59 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=9F52009DBA00ED05FAA0D7E2D1BCD7EF1862892E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:47:a4:c4:54:74:4c:cd:6b:24:0d:2c:d9:24:
                    9a:c4:e2:f0:7e:fb:8f:d6:df:5d:97:c5:71:5d:4c:
                    05:ae:d1:da:71:e4:1e:bd:ab:63:92:ba:e1:9d:d2:
                    48:20:4a:91:b5:79:0e:4d:32:45:eb:08:8c:2c:1e:
                    d9:82:1a:46:60:90:78:6d:c9:64:a9:66:6e:cd:ce:
                    8c:fd:c7:b0:01:3a:7e:8b:d1:ff:dd:0b:02:d5:00:
                    7d:a4:2e:70:13:7c:af:87:20:ac:79:40:57:12:16:
                    ce:61:b1:da:64:3d:1f:bf:01:78:b7:60:1a:0e:98:
                    5d:66:64:d1:c2:bf:ab:eb:c6:5e:e0:17:c3:5a:09:
                    f8:7c:9a:17:f0:0a:14:08:14:d6:36:92:7a:6d:7a:
                    8d:8c:ef:06:01:cd:f4:d2:e3:54:70:bb:a7:1f:92:
                    25:d3:8e:d6:1c:a5:fb:6f:50:7c:49:f5:8d:cd:87:
                    b2:d6:e9:45:01:fa:c2:9c:36:de:4f:72:02:19:a2:
                    91:b5:d5:27:f9:a7:42:bd:d5:cc:84:da:5d:79:11:
                    99:33:a2:a3:9b:7f:78:95:44:f1:17:d7:78:de:33:
                    20:3c:7f:89:00:30:2b:1a:8d:ae:29:23:fe:5e:d4:
                    20:da:67:2e:1a:f4:65:d5:df:99:74:c5:cb:a9:bb:
                    cf:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:52:00:9D:BA:00:ED:05:FA:A0:D7:E2:D1:BC:D7:EF:18:62:89:2E
            X509v3 Authority Key Identifier:
                keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/n1IAnboA7QX6oNfi0bzX7xhiiS4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.63.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         21:e8:a2:14:44:97:09:fe:eb:27:aa:cf:7d:de:86:21:3a:db:
         09:93:63:7a:dd:6a:9a:e8:34:a5:a1:7a:0d:96:04:81:fd:93:
         5c:6f:f9:d3:8c:4f:d6:4f:72:5e:53:aa:6e:ca:2f:f8:e3:74:
         1a:e6:57:f0:c3:74:65:61:77:28:fd:dd:70:e3:16:3c:7a:fc:
         55:ab:4e:b4:79:ae:5e:f2:7f:07:66:62:fb:5b:7a:3c:2a:a3:
         7b:09:f0:c1:62:40:c8:d3:58:48:97:f3:1c:c7:46:b3:48:ae:
         0e:64:f7:6a:83:e2:32:b2:65:19:9e:db:8c:d2:b6:68:11:1f:
         e8:5a:79:a4:a3:d9:6f:16:70:32:e1:4f:f0:7f:a7:d1:e4:07:
         a5:4e:a7:9d:d2:63:a9:89:2e:24:84:68:54:4a:33:b0:ba:93:
         9f:3a:11:2b:a9:4e:60:b1:a4:42:cd:01:30:38:38:06:25:fa:
         3b:c3:82:93:64:bf:64:4d:f1:a4:1e:6c:53:40:04:8e:83:d6:
         24:03:3b:f4:c7:e7:fb:f5:57:db:90:c2:20:c4:12:4e:19:de:
         16:4f:cd:bf:e4:c0:a0:79:67:98:79:48:d8:ca:fc:b6:56:f0:
         9a:a4:2d:66:70:60:c7:a9:82:dd:73:80:bf:ed:c1:7f:b3:ae:
         77:bd:68:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:01 2024 by rpki-client on console-ams.rpki-client.org