Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/BRICKSINC/WuOR8SQX2t79KR_Quugc_rxZvuE.roa
File:                     WuOR8SQX2t79KR_Quugc_rxZvuE.roa (raw, json)
Hash identifier:          DIYWsFsEtMEpcKAtlMczsUr9HhwGOZqtT43i9Rk6vew=
Subject key identifier:   5A:E3:91:F1:24:17:DA:DE:FD:29:1F:D0:BA:E8:1C:FE:BC:59:BE:E1
Certificate issuer:       /CN=A5A6AC38EE68C364CF79188F06427E9C766D4C1A
Certificate serial:       F3
Authority key identifier: A5:A6:AC:38:EE:68:C3:64:CF:79:18:8F:06:42:7E:9C:76:6D:4C:1A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/paasOO5ow2TPeRiPBkJ-nHZtTBo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/BRICKSINC/WuOR8SQX2t79KR_Quugc_rxZvuE.roa
Signing time:             Tue 21 Nov 2023 15:31:01 +0000
ROA not before:           Tue 21 Nov 2023 15:31:01 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     134823
IP address blocks:        103.51.90.0/23 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 243 (0xf3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5A6AC38EE68C364CF79188F06427E9C766D4C1A
        Validity
            Not Before: Nov 21 15:31:01 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=5AE391F12417DADEFD291FD0BAE81CFEBC59BEE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:81:40:2d:5e:4d:71:c6:75:3d:e4:fc:96:98:
                    8b:da:57:26:4e:93:6f:6b:9b:d0:45:a0:b1:92:e8:
                    5f:b5:9e:8f:65:ae:36:d4:bd:4a:34:6e:ab:66:98:
                    bc:6a:7e:a1:8a:31:06:92:9a:1a:d5:1a:da:62:b6:
                    87:79:2e:76:78:f9:75:28:4b:82:1b:c4:4f:c7:27:
                    c8:c0:86:41:79:94:78:7f:10:70:61:11:81:ca:d2:
                    38:90:03:5d:00:d7:6a:a6:72:60:78:0b:73:d1:fe:
                    fe:57:2d:6b:27:47:16:c3:53:b6:7a:7d:45:e5:c3:
                    66:74:4c:82:bb:bb:86:f5:73:6e:ff:46:dc:06:2b:
                    78:55:ad:36:ac:d1:c2:a4:e8:f7:ca:9e:0c:26:69:
                    59:79:b4:d8:ab:24:41:d2:4c:a2:73:ed:03:9f:8a:
                    f4:e7:65:94:e9:74:07:74:8b:91:a8:87:c1:17:50:
                    7e:39:08:92:8b:df:04:36:17:c4:04:ac:46:48:47:
                    63:f9:ea:c6:49:66:6c:14:e7:55:f3:9b:09:9f:03:
                    11:d6:41:8b:a1:98:68:03:75:df:95:82:ff:e8:0b:
                    ae:75:92:ca:52:0e:6f:d7:c6:ac:6e:4d:11:d0:69:
                    1c:82:7b:64:48:26:af:d1:7a:be:de:ae:93:f2:55:
                    3d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:E3:91:F1:24:17:DA:DE:FD:29:1F:D0:BA:E8:1C:FE:BC:59:BE:E1
            X509v3 Authority Key Identifier:
                keyid:A5:A6:AC:38:EE:68:C3:64:CF:79:18:8F:06:42:7E:9C:76:6D:4C:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BRICKSINC/paasOO5ow2TPeRiPBkJ-nHZtTBo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/paasOO5ow2TPeRiPBkJ-nHZtTBo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BRICKSINC/WuOR8SQX2t79KR_Quugc_rxZvuE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.51.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         83:68:5a:1e:8e:99:bd:b0:02:ae:3e:08:c3:02:13:00:78:84:
         14:9f:d1:bf:35:a6:36:29:d1:d1:2b:e0:09:67:61:03:41:d4:
         83:4e:f6:ef:e4:d2:2a:0a:d6:7d:70:06:66:9e:a9:84:d4:3a:
         78:82:63:c8:3a:66:93:4a:12:25:80:88:5c:87:20:9c:08:5f:
         c8:d2:5b:4a:25:f7:22:c3:d0:7f:ed:c5:1b:ea:2b:3b:71:f5:
         0f:94:ea:fb:3b:b2:67:d5:c4:7e:83:04:e1:83:66:00:fc:d0:
         a4:61:51:ce:39:e6:4f:92:c3:c1:d8:2b:da:b0:76:3b:0a:88:
         4d:64:f4:80:60:de:7a:d8:ee:6f:5c:42:aa:1c:7b:60:24:af:
         ed:fd:bd:24:30:56:9b:d4:d0:96:76:d2:ee:95:66:9b:95:8e:
         7d:56:88:48:67:4e:ff:91:bf:19:c1:7e:ed:e3:1c:3e:4e:c1:
         a3:e0:d5:c4:29:f5:42:a2:ee:42:fb:9e:c5:19:ec:54:29:ea:
         e4:ec:c1:f9:92:82:dd:37:6a:3f:3b:6d:a4:48:33:d4:3c:8b:
         cd:57:bc:f0:be:80:a4:03:18:8d:68:37:d9:31:cf:ba:5f:3f:
         0a:39:16:9e:48:3c:bf:54:a3:dd:cb:fd:4c:dc:bf:89:f2:7b:
         3e:09:5b:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:18 2024 by rpki-client on console-fra.rpki-client.org