Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/oQuuDbC8aPoMlPCYDLSpZdPMIK8.roa
File:                     oQuuDbC8aPoMlPCYDLSpZdPMIK8.roa (raw, json)
Hash identifier:          YeFr843t5hfUYIkmzJmsrOdmRk0bOaO/3qDo/CjMSCk=
Subject key identifier:   A1:0B:AE:0D:B0:BC:68:FA:0C:94:F0:98:0C:B4:A9:65:D3:CC:20:AF
Certificate issuer:       /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial:       0DAF
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/oQuuDbC8aPoMlPCYDLSpZdPMIK8.roa
Signing time:             Wed 29 Sep 2021 02:39:26 +0000
ROA not before:           Wed 29 Sep 2021 02:39:26 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     17709
IP address blocks:        60.244.128.0/17 maxlen: 17

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3503 (0xdaf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
        Validity
            Not Before: Sep 29 02:39:26 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=A10BAE0DB0BC68FA0C94F0980CB4A965D3CC20AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:8a:74:ad:78:7a:4e:9e:46:8a:c7:56:64:46:
                    45:45:1d:27:a2:b3:dc:4f:90:9b:28:9d:8e:e6:98:
                    90:84:d4:42:c0:80:8a:e6:2a:4b:05:4f:4c:c9:ca:
                    1b:64:14:35:5d:92:ff:57:81:e2:e4:3b:77:f3:5b:
                    65:d6:19:c9:86:26:8c:23:33:7b:c6:fa:24:74:be:
                    13:17:01:86:78:01:61:af:0c:ee:23:d1:c1:ba:2a:
                    1b:3a:5a:83:27:2d:8c:c6:3e:ac:36:be:dd:84:19:
                    92:01:de:ac:2e:6b:5a:82:49:b2:3e:7e:82:5d:60:
                    0c:7f:24:25:c7:cd:97:67:c4:0e:b2:5a:d1:b5:7d:
                    cd:20:45:53:53:78:98:aa:fe:92:96:66:16:2e:2c:
                    7e:ce:a7:6e:44:7d:39:1b:6d:26:d2:cc:9d:ec:d1:
                    8e:4c:32:d5:64:e8:36:f5:73:7e:8d:75:cf:9b:a1:
                    ba:47:06:0f:02:8c:24:ab:20:d2:c9:13:a5:0f:56:
                    5d:0f:a5:a6:b8:50:09:54:09:b7:bc:d2:9e:28:8e:
                    16:5a:8c:1f:63:54:1b:65:c6:f0:92:67:58:b8:2f:
                    36:f4:c0:0f:74:e1:80:57:c4:56:50:ca:d0:06:0f:
                    36:cd:9f:e4:1b:b6:93:30:9d:fe:13:33:7b:0b:b3:
                    d8:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:0B:AE:0D:B0:BC:68:FA:0C:94:F0:98:0C:B4:A9:65:D3:CC:20:AF
            X509v3 Authority Key Identifier:
                keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/oQuuDbC8aPoMlPCYDLSpZdPMIK8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  60.244.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         88:81:e3:26:7f:ec:b2:a8:32:2a:d6:2a:22:55:c9:02:a7:c9:
         eb:0f:95:18:32:04:ad:7d:0b:2f:76:ed:b9:fd:8d:97:ed:62:
         fe:3e:32:49:5b:ee:fb:1f:4b:54:e6:5d:9e:24:69:83:bb:d7:
         35:e7:65:b2:23:e8:a0:47:2a:a8:f0:1b:24:a3:05:ef:6b:56:
         5a:7b:6b:f0:b9:55:4f:08:d2:02:02:54:28:92:49:1c:c7:63:
         54:77:2b:c3:90:66:c7:3f:30:27:22:b6:75:66:b6:26:32:d2:
         15:a3:cf:f2:37:86:83:b6:76:77:c5:c6:99:37:8c:fa:4e:ef:
         50:33:9b:55:e3:0b:1a:aa:c2:85:28:a6:72:b7:c6:4f:49:2e:
         3c:d9:17:22:87:e0:0d:31:20:c7:0e:5e:78:e4:4d:40:a6:6d:
         c4:7a:63:b0:26:99:a6:6d:5c:64:89:e1:fb:17:fa:1e:f5:ac:
         1a:9d:9d:be:a4:c3:95:a7:29:71:93:72:03:6e:28:a3:9c:0d:
         9c:a9:86:c7:45:06:e9:39:dd:b4:ce:3b:ae:04:13:8d:da:fc:
         af:a1:f1:48:d8:35:fe:e3:e5:79:a0:bc:15:52:81:98:3f:f1:
         b0:10:f4:1e:d8:8e:b8:d1:42:91:ce:16:7e:02:26:7e:b2:52:
         d9:3c:59:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:01 2024 by rpki-client on console-ams.rpki-client.org