Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/o6-d8zCY12FVM2pg1ptyBYo7aLk.roa
File:                     o6-d8zCY12FVM2pg1ptyBYo7aLk.roa (raw, json)
Hash identifier:          ePUfhR83+bAIqVFA9UkF0LdMQ12urJ/P+GFFvebRw6Y=
Subject key identifier:   A3:AF:9D:F3:30:98:D7:61:55:33:6A:60:D6:9B:72:05:8A:3B:68:B9
Certificate issuer:       /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial:       08F7
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/o6-d8zCY12FVM2pg1ptyBYo7aLk.roa
Signing time:             Tue 29 Sep 2020 10:01:17 +0000
ROA not before:           Tue 29 Sep 2020 10:01:17 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     7482
IP address blocks:        210.202.64.0/18 maxlen: 18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2295 (0x8f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
        Validity
            Not Before: Sep 29 10:01:17 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=A3AF9DF33098D76155336A60D69B72058A3B68B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a5:ca:cb:30:3f:26:88:ff:e4:1a:9c:c6:55:
                    1a:9c:fb:a8:ab:8c:b6:ba:6d:7f:17:a3:eb:5c:4b:
                    d7:7a:66:fd:5f:5e:18:05:e2:64:7d:08:3b:3e:cf:
                    cb:df:38:23:f6:dc:d1:f2:34:06:14:cc:4e:b3:b4:
                    21:63:50:25:44:90:45:26:3a:d7:ae:3e:43:eb:f2:
                    31:7a:85:3d:94:06:75:b4:6f:25:c2:17:5a:b4:7e:
                    39:97:f9:04:e6:0e:ab:1f:29:3e:6f:f3:aa:ea:e9:
                    0d:3f:c9:23:5c:e2:be:e1:33:41:51:04:a7:70:a5:
                    ac:cc:da:f6:4a:f1:7b:c5:ef:d1:5f:14:b7:e0:05:
                    b4:99:67:9a:c3:6e:5e:24:12:a5:13:97:23:7b:8d:
                    c4:37:7e:10:a1:fb:e2:40:2d:2c:3f:5f:02:5a:b7:
                    4c:f8:db:2e:09:dd:fd:13:e5:bf:24:3c:34:aa:08:
                    68:a7:1b:c2:1c:c4:0c:1b:98:3e:ad:53:9d:95:43:
                    f1:dd:75:20:07:1b:dc:83:94:8f:eb:7e:6f:84:34:
                    6b:dd:3f:d5:ae:23:03:35:4b:21:4f:c9:bd:89:5e:
                    09:2a:83:cc:5f:2e:44:95:b2:a3:59:41:3a:0c:6a:
                    7f:7a:ea:99:a8:c3:8a:88:ec:d3:20:74:0a:d7:90:
                    e9:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:AF:9D:F3:30:98:D7:61:55:33:6A:60:D6:9B:72:05:8A:3B:68:B9
            X509v3 Authority Key Identifier:
                keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/o6-d8zCY12FVM2pg1ptyBYo7aLk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.202.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         9d:73:ef:c2:4a:c8:98:af:fd:2a:42:70:b2:f0:de:3a:66:54:
         e2:72:1a:6c:e2:cc:b0:50:2a:d4:05:2a:ac:e1:c8:08:86:b1:
         72:61:77:15:87:34:49:8f:e8:06:a1:c3:a2:c5:2f:bf:b8:d7:
         98:d2:33:1b:43:39:5b:61:ad:1f:a0:3c:d2:68:0c:43:32:e0:
         d1:30:4b:5f:84:66:f9:37:7c:9e:17:fd:b7:30:1b:c4:ce:d0:
         cd:22:16:5c:5f:93:52:14:02:ba:78:71:86:a9:23:7b:dd:fa:
         1e:1b:9d:d9:ca:2f:b8:2b:c2:43:92:30:9d:d6:51:61:76:5f:
         ff:41:9b:2f:01:c8:e1:46:15:b6:30:21:08:c4:ae:3a:10:63:
         25:f2:42:c2:0b:78:b4:6c:a3:34:ad:7f:c5:dd:1a:26:43:ab:
         02:1e:06:2d:da:a6:6a:7f:f8:3c:57:88:93:b1:fa:c6:1f:fc:
         b7:f8:a3:dd:3c:4a:c8:e9:55:34:70:fe:35:56:6f:99:45:a5:
         58:7e:11:1c:a9:04:4a:21:4e:be:8c:f4:26:e0:40:20:e8:6d:
         d4:7e:08:f3:a2:4b:74:98:82:ed:59:fd:86:e2:16:ad:ca:a9:
         5c:c5:ee:a6:96:30:2d:fa:cc:dc:3a:c3:4e:ab:3f:69:52:c9:
         c8:49:79:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:32 2024 by rpki-client on console-fra.rpki-client.org