Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASCCNOC/vZW09q_rM1bSJBWPD7nygCu0GhM.roa
File:                     vZW09q_rM1bSJBWPD7nygCu0GhM.roa (raw, json)
Hash identifier:          DQhtD5pXlrqRx7wbJSt2vdzEfoWMEBnB+Fue+o957RY=
Subject key identifier:   BD:95:B4:F6:AF:EB:33:56:D2:24:15:8F:0F:B9:F2:80:2B:B4:1A:13
Certificate issuer:       /CN=54327AF2528AC8FFDFAAF04C51064D6BC4C0A992
Certificate serial:       0771
Authority key identifier: 54:32:7A:F2:52:8A:C8:FF:DF:AA:F0:4C:51:06:4D:6B:C4:C0:A9:92
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/VDJ68lKKyP_fqvBMUQZNa8TAqZI.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ASCCNOC/vZW09q_rM1bSJBWPD7nygCu0GhM.roa
Signing time:             Tue 29 Sep 2020 09:58:02 +0000
ROA not before:           Tue 29 Sep 2020 09:58:02 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9264
IP address blocks:        202.169.160.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1905 (0x771)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54327AF2528AC8FFDFAAF04C51064D6BC4C0A992
        Validity
            Not Before: Sep 29 09:58:02 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=BD95B4F6AFEB3356D224158F0FB9F2802BB41A13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:d4:0a:d1:cd:4f:55:ce:33:5a:12:12:ff:ad:
                    5f:aa:29:fa:02:0b:cb:55:75:fe:f2:29:f6:25:9f:
                    b3:72:b2:0c:36:ca:5e:c9:9a:b7:e8:7c:6f:b8:8e:
                    5c:80:b8:1e:c9:ea:26:ea:6c:8f:fb:3d:8a:c3:0f:
                    32:48:e1:9a:77:ba:39:fe:9f:72:81:bc:14:66:57:
                    78:38:af:71:5e:b4:48:0e:6a:ef:a3:16:4e:b8:11:
                    78:30:0e:07:a2:a7:b3:f7:ee:d6:3f:8d:4a:7a:f2:
                    ff:8c:5a:9f:73:72:fa:95:9d:20:e7:a0:b2:43:44:
                    81:52:06:de:de:f0:f0:94:54:e6:2b:e0:bf:60:6c:
                    f3:98:cb:bb:12:4f:2a:38:f1:6d:f4:3b:97:6d:19:
                    1e:ae:58:02:bf:7f:3f:50:f5:f2:d7:f7:82:31:6f:
                    40:73:52:05:f8:ed:2a:61:29:7f:7a:07:f4:a1:e1:
                    76:9f:06:f9:97:04:5d:0d:64:7b:95:59:88:8d:e6:
                    06:14:72:16:61:d0:f2:83:72:84:d5:8f:e2:d7:5b:
                    07:51:a5:a8:e8:11:27:b7:ad:c5:96:e2:f2:21:20:
                    65:ed:44:64:3c:1e:48:2c:96:5b:41:ff:09:1f:11:
                    bc:6e:bb:e8:16:04:fb:3d:55:bd:8d:ee:8d:05:e0:
                    b0:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:95:B4:F6:AF:EB:33:56:D2:24:15:8F:0F:B9:F2:80:2B:B4:1A:13
            X509v3 Authority Key Identifier:
                keyid:54:32:7A:F2:52:8A:C8:FF:DF:AA:F0:4C:51:06:4D:6B:C4:C0:A9:92

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASCCNOC/VDJ68lKKyP_fqvBMUQZNa8TAqZI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VDJ68lKKyP_fqvBMUQZNa8TAqZI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASCCNOC/vZW09q_rM1bSJBWPD7nygCu0GhM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.169.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         81:0b:62:e4:1c:d3:08:cd:d7:96:92:e9:3d:4f:4d:d6:88:e7:
         36:79:93:a5:e0:7d:43:68:5b:4d:59:f4:e1:e7:e2:af:cf:6d:
         8a:14:64:b8:72:e9:42:dd:ef:79:65:88:6f:03:aa:cb:60:0e:
         98:2f:e8:96:f2:3d:d1:b6:6a:eb:12:62:d5:4f:37:21:da:ba:
         c7:51:0d:9d:42:90:b2:fd:2f:1c:4b:6b:94:41:6d:c5:80:43:
         10:61:38:20:db:4a:f0:43:4f:86:90:07:b5:70:be:6b:6b:a3:
         ad:02:2c:dc:31:cf:4a:83:40:af:08:fd:37:63:73:16:30:70:
         4b:8d:5a:a5:98:b7:13:b4:2b:f5:8e:fc:bb:f6:f4:0d:d0:92:
         4f:80:61:7f:ad:d3:78:aa:1a:3c:52:4c:fa:9b:b1:bc:a7:4d:
         ee:8d:f5:cb:ba:45:67:47:ea:53:05:a1:83:85:7b:61:01:76:
         e5:26:88:9b:1d:d6:13:38:a0:3f:70:4d:57:85:b4:4b:0d:1c:
         15:3a:36:51:f6:69:3d:af:70:47:fe:d7:0a:e0:cf:b8:b7:f1:
         72:8e:37:fe:89:d3:98:2a:7e:62:0a:67:1f:23:b6:5a:5f:5d:
         56:35:0b:dc:fc:3d:af:06:59:45:c9:75:f6:ca:d0:a9:30:77:
         f9:69:64:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:02 2024 by rpki-client on console-ams.rpki-client.org