Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/od7nKsb_xl2z7Aun55lq3o__k1Y.roa
File:                     od7nKsb_xl2z7Aun55lq3o__k1Y.roa (raw, json)
Hash identifier:          +FMM9AF2cgWWtcfjOhOupZ70nprU9U/BQotMKRURUcM=
Subject key identifier:   A1:DE:E7:2A:C6:FF:C6:5D:B3:EC:0B:A7:E7:99:6A:DE:8F:FF:93:56
Certificate issuer:       /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial:       093E
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/od7nKsb_xl2z7Aun55lq3o__k1Y.roa
Signing time:             Tue 29 Sep 2020 10:01:37 +0000
ROA not before:           Tue 29 Sep 2020 10:01:37 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24155
IP address blocks:        210.63.224.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2366 (0x93e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
        Validity
            Not Before: Sep 29 10:01:37 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=A1DEE72AC6FFC65DB3EC0BA7E7996ADE8FFF9356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1f:ae:e4:e9:f5:95:dc:40:50:bf:21:80:24:
                    37:71:ff:30:f5:c0:c2:74:c3:c4:7d:b5:2e:bc:f1:
                    37:d8:05:c6:eb:0c:dc:99:ae:eb:76:79:dd:08:6d:
                    11:43:4a:b3:24:69:a7:13:8b:cc:9c:53:aa:1b:a4:
                    67:80:a2:78:b3:a4:62:b6:5f:ed:61:f5:23:25:b8:
                    b8:d1:10:2a:3d:69:ea:24:55:c6:6b:4a:8b:05:1f:
                    ad:92:0d:f4:d4:54:cf:20:00:81:78:ff:e9:f0:4a:
                    be:07:1a:6d:a8:ca:34:dc:7f:e2:87:94:9e:72:e1:
                    a3:29:3d:c5:f1:85:10:4d:0d:c0:9e:c4:1a:09:ab:
                    f4:41:37:68:59:70:b2:ec:22:6c:d0:2d:97:ca:eb:
                    26:5d:27:c4:f9:71:60:1a:f5:68:7d:e9:c0:97:7d:
                    af:62:0d:b7:36:c7:13:22:d4:a9:46:83:c8:ec:77:
                    5c:8d:f3:e3:90:7c:e4:88:d5:cb:ba:e6:e1:90:b4:
                    9f:35:14:b3:7b:95:b9:01:f8:11:03:a4:a7:fd:4b:
                    a0:8c:66:be:37:dd:7e:2f:ca:4b:97:15:a1:0c:0f:
                    6a:c7:6c:6d:0b:f9:f8:93:be:0e:8c:0d:63:0a:4e:
                    53:a8:a1:d6:57:7e:e4:28:e4:b4:38:f9:6d:86:46:
                    27:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:DE:E7:2A:C6:FF:C6:5D:B3:EC:0B:A7:E7:99:6A:DE:8F:FF:93:56
            X509v3 Authority Key Identifier:
                keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/od7nKsb_xl2z7Aun55lq3o__k1Y.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.63.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         30:b8:10:60:62:f5:d5:93:54:2c:b8:e2:bb:75:80:80:65:96:
         93:61:a7:18:67:fd:78:0e:25:57:b8:c8:e6:e8:b2:92:ea:d3:
         c9:d4:41:f2:4f:3d:dd:c3:21:b6:95:b2:bf:0f:02:96:66:ed:
         f1:7c:62:45:97:a6:04:6e:5c:ff:da:9b:65:21:ea:87:f0:c4:
         c1:8c:3e:96:5d:a3:71:f7:3d:f4:6a:af:fa:08:30:69:4e:5e:
         2d:7b:ab:7a:81:68:0f:dd:33:e4:46:9d:4f:70:7f:44:d6:fe:
         2c:be:d8:75:67:5b:35:b2:62:6f:2a:b9:9c:34:37:6c:dc:6b:
         66:0e:71:19:13:48:10:cd:e8:ae:90:51:9b:8b:aa:8f:4e:30:
         6d:94:73:ea:31:e1:58:78:33:e9:d5:1e:9a:a0:b7:32:e1:eb:
         73:e5:cf:12:05:0f:0f:6c:07:e1:f4:55:f7:a4:2c:dd:7e:2e:
         64:84:72:1d:dc:62:95:a2:cf:06:ff:39:05:d0:82:da:60:d3:
         8b:73:30:4d:88:55:f5:68:27:9c:bd:63:3f:bc:60:4a:ac:ca:
         d1:02:3c:ac:38:78:a0:65:f2:c5:cd:c1:42:95:f0:8b:67:0c:
         74:23:56:90:9b:ad:fb:3b:6a:5a:8f:b0:d1:17:96:2f:cc:74:
         ee:87:c8:a5
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICCT4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NjQyMzBGM0UzOUJFRkJCNzNBN0Q0RERCMjZGRTJENDQ2RUUyNTAeFw0yMDA5Mjkx
MDAxMzdaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEExREVFNzJBQzZGRkM2
NURCM0VDMEJBN0U3OTk2QURFOEZGRjkzNTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDJH67k6fWV3EBQvyGAJDdx/zD1wMJ0w8R9tS688TfYBcbrDNyZ
rut2ed0IbRFDSrMkaacTi8ycU6obpGeAonizpGK2X+1h9SMluLjRECo9aeokVcZr
SosFH62SDfTUVM8gAIF4/+nwSr4HGm2oyjTcf+KHlJ5y4aMpPcXxhRBNDcCexBoJ
q/RBN2hZcLLsImzQLZfK6yZdJ8T5cWAa9Wh96cCXfa9iDbc2xxMi1KlGg8jsd1yN
8+OQfOSI1cu65uGQtJ81FLN7lbkB+BEDpKf9S6CMZr433X4vykuXFaEMD2rHbG0L
+fiTvg6MDWMKTlOoodZXfuQo5LQ4+W2GRifdAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUod7nKsb/xl2z7Aun55lq3o//k1YwHwYDVR0jBBgwFoAU+wZCMPPjm++7c6fU
3bJv4tRG7iUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBPTC8t
d1pDTVBQam0tLTdjNmZVM2JKdjR0Ukc3aVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
Ly13WkNNUFBqbS0tN2M2ZlUzYkp2NHRSRzdpVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0FQT0wvb2Q3bktzYl94bDJ6N0F1bjU1bHEz
b19fazFZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA9I/4DAN
BgkqhkiG9w0BAQsFAAOCAQEAMLgQYGL11ZNULLjiu3WAgGWWk2GnGGf9eA4lV7jI
5uiykurTydRB8k893cMhtpWyvw8Clmbt8XxiRZemBG5c/9qbZSHqh/DEwYw+ll2j
cfc99Gqv+ggwaU5eLXureoFoD90z5EadT3B/RNb+LL7YdWdbNbJibyq5nDQ3bNxr
Zg5xGRNIEM3orpBRm4uqj04wbZRz6jHhWHgz6dUemqC3MuHrc+XPEgUPD2wH4fRV
96Qs3X4uZIRyHdxilaLPBv85BdCC2mDTi3MwTYhV9WgnnL1jP7xgSqzK0QI8rDh4
oGXyxc3BQpXwi2cMdCNWkJut+ztqWo+w0ReWL8x07ofIpQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:32 2024 by rpki-client on console-fra.rpki-client.org