Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHANGSHEN/lo1rbHjT2kEVee-ypS2OOOvCQoc.roa
File:                     lo1rbHjT2kEVee-ypS2OOOvCQoc.roa (raw, json)
Hash identifier:          RQ0MlYbFY9hiS0kAkt5tpQuiR7PPjBdAcg7xO3neaSo=
Subject key identifier:   96:8D:6B:6C:78:D3:DA:41:15:79:EF:B2:A5:2D:8E:38:EB:C2:42:87
Certificate issuer:       /CN=6016EF41F321C9AA6C1E13D115B5B60A3029C8E5
Certificate serial:       56
Authority key identifier: 60:16:EF:41:F3:21:C9:AA:6C:1E:13:D1:15:B5:B6:0A:30:29:C8:E5
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/YBbvQfMhyapsHhPRFbW2CjApyOU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CHANGSHEN/lo1rbHjT2kEVee-ypS2OOOvCQoc.roa
Signing time:             Thu 04 Jan 2024 08:59:49 +0000
ROA not before:           Thu 04 Jan 2024 08:59:49 +0000
ROA not after:            Thu 05 Sep 2024 08:23:46 +0000
asID:                     200213
IP address blocks:        103.69.80.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86 (0x56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6016EF41F321C9AA6C1E13D115B5B60A3029C8E5
        Validity
            Not Before: Jan  4 08:59:49 2024 GMT
            Not After : Sep  5 08:23:46 2024 GMT
        Subject: CN=968D6B6C78D3DA411579EFB2A52D8E38EBC24287
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:46:9f:60:c3:4a:e1:55:76:53:04:99:bc:ce:
                    82:5a:82:f5:f9:eb:43:37:5d:f1:83:ff:fc:98:fe:
                    ea:d8:ab:99:d1:84:b7:56:2c:f7:fb:dc:fb:f6:6c:
                    0e:d2:b9:fe:ab:1a:54:16:5d:ee:61:1a:78:e5:4d:
                    94:a3:79:1a:4c:cd:00:91:05:60:92:fe:aa:a1:5d:
                    df:79:0b:f7:7f:4a:c8:11:49:7c:b6:ca:51:b6:53:
                    fe:35:46:ba:64:53:1d:29:b3:34:76:9a:46:b2:02:
                    28:cc:9c:12:2d:d2:69:7e:dc:7e:7a:68:22:50:79:
                    e2:a6:74:bd:bb:74:71:fa:13:9e:e1:ec:15:46:51:
                    c8:26:a7:38:ae:c2:11:d9:3f:0d:82:73:0a:ab:13:
                    af:ce:99:7f:72:ce:c1:b8:70:d9:3b:84:4f:b0:39:
                    c2:19:7e:7b:b5:10:23:7e:41:f0:88:e2:9c:d7:14:
                    48:dd:de:4d:87:83:d1:b1:52:58:9f:12:e1:15:9c:
                    f0:8a:34:25:47:e2:74:a1:f0:3f:d9:65:0e:4f:f8:
                    4e:bc:d9:31:54:0b:9e:98:4d:78:25:84:8d:64:86:
                    35:74:7a:a8:9a:ab:ca:a6:88:c7:19:a1:b7:a0:36:
                    39:3d:92:22:88:37:af:fb:c6:51:48:b9:fe:c6:11:
                    da:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:8D:6B:6C:78:D3:DA:41:15:79:EF:B2:A5:2D:8E:38:EB:C2:42:87
            X509v3 Authority Key Identifier:
                keyid:60:16:EF:41:F3:21:C9:AA:6C:1E:13:D1:15:B5:B6:0A:30:29:C8:E5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHANGSHEN/YBbvQfMhyapsHhPRFbW2CjApyOU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YBbvQfMhyapsHhPRFbW2CjApyOU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHANGSHEN/lo1rbHjT2kEVee-ypS2OOOvCQoc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.69.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0e:8d:40:dc:c8:13:e6:57:33:42:fc:1b:53:c1:1e:73:a5:24:
         ef:38:e3:d7:70:b9:52:3d:02:7a:ee:0d:29:19:e4:d2:b3:34:
         d2:8b:df:4a:13:3e:a9:6b:6c:21:80:22:9f:8e:58:bc:21:06:
         93:30:e8:bc:4c:1c:86:80:23:d2:91:2b:62:cd:48:02:8f:ed:
         43:08:1e:4a:74:7e:bc:8a:3c:3e:54:ac:cb:6b:0a:b5:11:a3:
         ec:8a:8b:09:68:05:ff:3e:dd:dd:73:80:32:31:2f:b0:8e:d1:
         fb:ac:90:c6:cd:62:a6:38:7a:02:d5:90:55:77:85:b1:1d:dc:
         91:a3:e9:b1:fd:1a:95:07:bd:91:41:76:63:2b:94:8f:78:f5:
         4a:d7:12:a7:20:f7:5f:4c:20:33:3e:7e:75:3a:d4:27:a4:d7:
         95:83:bd:4c:23:7e:e7:8b:a0:54:ea:1b:81:17:e3:65:59:a2:
         b6:3f:5d:a7:96:0a:fe:34:eb:c6:8f:0b:7b:1f:1b:55:98:57:
         2e:4e:a8:ea:96:de:a7:ce:d3:a8:11:c2:2a:76:45:d4:4d:ed:
         cd:35:37:28:c4:e7:4e:e7:bb:c2:7c:c4:eb:89:d7:af:c1:fc:
         2a:c9:76:b1:ce:2c:bb:eb:49:74:75:df:b1:04:0c:c0:c2:2e:
         a2:76:94:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:11 2024 by rpki-client on console-ams.rpki-client.org