Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/s7AU4rRs61CCB1R0yTbdQceEJqE.roa
File:                     s7AU4rRs61CCB1R0yTbdQceEJqE.roa (raw, json)
Hash identifier:          Zrq9hVmfYGp+x8Q0y3YL395S2hh4Pboefs3ownSfGV0=
Subject key identifier:   B3:B0:14:E2:B4:6C:EB:50:82:07:54:74:C9:36:DD:41:C7:84:26:A1
Certificate issuer:       /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial:       0F63
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/s7AU4rRs61CCB1R0yTbdQceEJqE.roa
Signing time:             Thu 15 Sep 2022 02:40:28 +0000
ROA not before:           Thu 15 Sep 2022 02:40:28 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24154
IP address blocks:        210.63.192.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3939 (0xf63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
        Validity
            Not Before: Sep 15 02:40:28 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=B3B014E2B46CEB5082075474C936DD41C78426A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:79:11:5d:9f:f3:1e:52:72:7b:9b:da:a5:bf:
                    42:1c:45:67:5f:01:57:e4:0d:fc:f5:2c:f6:90:0d:
                    4a:99:c7:24:5b:f5:76:d4:83:f9:2e:04:86:0d:5b:
                    4d:c6:9e:6a:8e:3f:3b:35:76:a3:86:cd:93:b2:22:
                    e7:a6:76:d7:9b:40:27:3e:7f:ec:36:d8:1b:16:3a:
                    47:50:fa:07:69:04:f7:47:87:dd:a1:9f:33:e9:ed:
                    c0:c2:e1:91:5a:4a:39:69:88:93:ed:2e:c8:a5:d4:
                    b3:32:8c:31:10:de:14:37:7f:a1:cb:a4:22:9b:87:
                    93:09:eb:72:a0:1f:ca:da:fb:66:e1:e0:b5:8a:43:
                    7c:eb:73:2b:90:2b:e7:31:9f:04:bf:00:44:3b:14:
                    82:2d:08:1a:ff:a7:a9:a6:99:60:2e:cc:20:52:b3:
                    bc:96:2f:77:b5:c2:88:9a:9e:b4:2d:89:6d:08:97:
                    dc:36:e5:71:24:2d:3f:0a:63:6e:b2:3e:a3:1f:44:
                    4d:2b:6a:98:77:3a:88:8a:27:36:81:dd:3c:b6:e3:
                    94:80:c3:a9:4b:ce:8f:3c:6c:8b:77:9f:9d:df:f9:
                    b6:a0:e0:7f:f4:a8:0e:18:40:69:ce:04:f8:51:75:
                    9f:ac:6d:11:e5:1e:fa:82:9b:fe:91:2f:3b:05:28:
                    2d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:B0:14:E2:B4:6C:EB:50:82:07:54:74:C9:36:DD:41:C7:84:26:A1
            X509v3 Authority Key Identifier:
                keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/s7AU4rRs61CCB1R0yTbdQceEJqE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.63.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         63:c0:17:11:df:63:ec:8c:6a:31:3a:34:9e:88:c8:0b:6e:d6:
         df:66:34:de:be:ec:8b:58:39:25:ae:8b:06:8c:ec:e6:85:0c:
         8b:ac:2e:3e:7a:1f:6a:45:39:54:d2:5c:01:16:34:b7:2d:26:
         58:93:ef:c2:4e:7a:8e:fb:63:18:7f:5e:ad:0f:49:a6:a7:d3:
         26:46:9d:15:48:ae:d8:f2:b8:af:e7:3e:06:4e:bb:7a:f2:a8:
         82:39:26:d2:55:8e:0f:4d:23:23:4e:b5:5e:59:8e:fe:0e:77:
         55:63:37:a3:4d:43:d6:be:9e:2f:65:00:93:02:29:72:6e:ab:
         f7:c8:3f:cf:f9:26:a3:66:d5:e3:b5:c6:d4:c5:6b:88:e5:9d:
         ce:71:76:de:c2:84:71:88:c7:5b:31:26:7b:67:f0:63:34:c7:
         c9:20:11:97:13:c9:e3:c3:50:4c:99:8b:42:5b:be:8b:68:69:
         27:99:f9:05:03:f5:9e:e1:ba:a9:56:dd:94:ba:ef:be:3e:1a:
         52:a3:e8:c7:bf:8a:61:c4:28:3e:2b:10:ef:1a:ab:94:b3:6f:
         2b:b9:ea:d5:b8:60:f2:42:91:bb:0f:9d:e2:ac:96:55:cb:e1:
         53:da:c7:5f:c2:cc:d9:a0:4e:b6:97:65:0a:36:61:32:c6:41:
         e9:6a:ba:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:02 2024 by rpki-client on console-ams.rpki-client.org