Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASCCNOC/dwFyq8G-BsUFAoAT8q8D3AfTDb8.roa
File:                     dwFyq8G-BsUFAoAT8q8D3AfTDb8.roa (raw, json)
Hash identifier:          0E+hWzrYFGZMu6Q1KBwp/UFD8XkP41sG7cGJ/J2AN18=
Subject key identifier:   77:01:72:AB:C1:BE:06:C5:05:02:80:13:F2:AF:03:DC:07:D3:0D:BF
Certificate issuer:       /CN=54327AF2528AC8FFDFAAF04C51064D6BC4C0A992
Certificate serial:       0773
Authority key identifier: 54:32:7A:F2:52:8A:C8:FF:DF:AA:F0:4C:51:06:4D:6B:C4:C0:A9:92
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/VDJ68lKKyP_fqvBMUQZNa8TAqZI.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ASCCNOC/dwFyq8G-BsUFAoAT8q8D3AfTDb8.roa
Signing time:             Tue 29 Sep 2020 09:58:03 +0000
ROA not before:           Tue 29 Sep 2020 09:58:03 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24167
IP address blocks:        202.169.168.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1907 (0x773)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54327AF2528AC8FFDFAAF04C51064D6BC4C0A992
        Validity
            Not Before: Sep 29 09:58:03 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=770172ABC1BE06C505028013F2AF03DC07D30DBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:0b:a3:23:0e:72:69:85:f5:c0:4c:d5:a9:07:
                    32:72:25:74:93:10:47:30:6b:e8:6e:0c:2a:18:e8:
                    44:79:d1:db:a0:35:77:d0:e0:2b:19:6c:63:21:1b:
                    39:f5:18:de:ab:4d:73:ac:a2:5e:91:d5:38:02:3a:
                    cd:ed:9b:b3:bb:49:48:ca:3c:37:74:ea:46:ba:23:
                    eb:39:c6:7c:9a:80:18:4f:dc:10:a4:c1:77:f0:d7:
                    68:df:0b:9a:42:67:63:16:74:ce:63:dc:0b:fa:aa:
                    b8:37:07:dc:d1:78:a7:87:da:74:a5:ba:f8:e8:b5:
                    40:a9:6d:01:a5:c2:f2:67:a7:29:62:b3:80:e1:59:
                    c4:16:7e:31:f8:c6:89:d1:2c:3b:e1:52:40:38:9c:
                    e3:1f:6d:40:5c:cd:59:ae:ec:13:af:de:6d:82:f0:
                    56:e8:4d:06:72:5e:43:2c:67:ad:44:96:5d:24:6b:
                    15:f2:90:6b:51:b6:02:c3:f9:70:47:50:f1:cd:2b:
                    64:e5:01:d0:1c:e6:8c:01:0c:c4:82:3c:47:6e:6e:
                    24:c2:13:d2:e9:52:6f:c6:d0:d6:e4:03:88:6b:07:
                    ca:ec:8a:43:f9:da:e9:2a:e7:73:92:8b:69:23:ac:
                    a2:4b:2a:5f:e1:a0:c2:cb:24:48:8e:7a:1c:4e:d8:
                    d2:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:01:72:AB:C1:BE:06:C5:05:02:80:13:F2:AF:03:DC:07:D3:0D:BF
            X509v3 Authority Key Identifier:
                keyid:54:32:7A:F2:52:8A:C8:FF:DF:AA:F0:4C:51:06:4D:6B:C4:C0:A9:92

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASCCNOC/VDJ68lKKyP_fqvBMUQZNa8TAqZI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VDJ68lKKyP_fqvBMUQZNa8TAqZI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASCCNOC/dwFyq8G-BsUFAoAT8q8D3AfTDb8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.169.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:a3:16:7d:d5:e1:1b:65:5e:c7:90:8c:a2:7a:5e:9d:61:8d:
         0e:5f:70:33:c4:ef:d2:5b:1c:00:a9:44:70:5b:b6:37:5a:ba:
         30:91:58:35:56:3f:84:51:53:cc:0c:8c:08:07:c4:1c:ec:1d:
         68:0f:d7:1c:ad:66:b6:bf:49:b5:73:87:0a:78:4a:ec:56:a1:
         94:22:9f:54:b1:4a:28:71:05:01:f7:05:e5:a3:af:df:fd:32:
         4d:fc:5e:77:db:36:8f:e6:11:35:b2:89:88:13:94:a4:40:4d:
         7a:74:1e:81:c2:24:3e:bb:e9:44:6b:82:9e:0e:87:bc:54:14:
         f0:9b:c2:50:b0:9d:32:41:92:26:0d:e5:31:cb:fb:a7:57:58:
         bb:af:c7:56:e2:d5:34:36:70:be:8a:83:8c:fd:42:96:1d:8c:
         75:52:aa:fa:2a:77:c7:14:e8:ed:09:5a:22:1e:45:4b:6d:98:
         f2:db:a2:59:17:3d:0b:16:6f:a5:c5:27:03:7e:46:e3:99:0c:
         b4:d6:1a:c1:43:84:da:e8:6a:31:a8:28:3f:bb:a3:bf:af:82:
         45:94:b3:01:8c:b0:37:98:0f:f2:55:38:37:4c:cc:71:42:f1:
         e0:66:4e:6f:64:24:eb:30:d5:cb:21:74:90:41:1e:bd:2d:91:
         c2:14:9f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:46 2023 by rpki-client on console-ams.rpki-client.org