Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIAOCHIAO/ShoyenozzpOU8qJ-Wcoe-VA-NyE.roa
File:                     ShoyenozzpOU8qJ-Wcoe-VA-NyE.roa (raw, json)
Hash identifier:          lTvr58tKeZWcGymZjCW4pTEvUbt90c90aiaV/cvOFhQ=
Subject key identifier:   4A:1A:32:7A:7A:33:CE:93:94:F2:A2:7E:59:CA:1E:F9:50:3E:37:21
Certificate issuer:       /CN=8A3FD89CE70A14F13ED0A86459224D007DD0A148
Certificate serial:       07DF
Authority key identifier: 8A:3F:D8:9C:E7:0A:14:F1:3E:D0:A8:64:59:22:4D:00:7D:D0:A1:48
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/ij_YnOcKFPE-0KhkWSJNAH3QoUg.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIAOCHIAO/ShoyenozzpOU8qJ-Wcoe-VA-NyE.roa
Signing time:             Wed 15 May 2024 08:20:44 +0000
ROA not before:           Wed 15 May 2024 08:20:44 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     40065
IP address blocks:        103.148.146.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2015 (0x7df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A3FD89CE70A14F13ED0A86459224D007DD0A148
        Validity
            Not Before: May 15 08:20:44 2024 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=4A1A327A7A33CE9394F2A27E59CA1EF9503E3721
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:af:0a:1c:05:76:54:a5:4a:3e:b3:6c:21:39:
                    5b:ec:3a:49:31:d7:c9:26:51:46:bd:21:ec:74:c6:
                    0b:a9:14:23:86:11:44:07:08:d8:5b:a2:c6:a8:e4:
                    75:8a:7e:ce:eb:9a:ae:5d:cf:82:a9:33:ef:52:bc:
                    f2:5d:19:11:bb:d9:85:cf:b4:7b:31:08:6a:ed:2c:
                    24:72:a1:81:2e:d6:5e:21:82:70:70:8a:2a:c9:f7:
                    c3:e6:4c:4d:73:1e:e3:3d:e6:e4:90:c1:7b:84:77:
                    d8:e1:30:4b:61:e3:1e:77:f4:ce:60:a5:55:5a:c7:
                    04:85:03:8b:f9:e6:3e:40:ab:ce:e1:be:84:80:25:
                    9c:a2:45:25:cd:23:70:51:2a:85:be:89:1d:49:38:
                    28:70:f4:58:cc:10:de:3d:4b:7b:15:1a:f6:3c:e0:
                    ca:2c:1d:f5:b2:81:25:16:23:36:c4:57:9e:74:ab:
                    75:ad:92:83:5a:59:14:10:3d:d5:c7:fe:c6:42:9e:
                    4d:c5:c8:e6:c7:85:cd:32:4a:d4:61:7c:d5:82:97:
                    fd:4b:8a:cf:33:86:6b:4e:59:4b:18:ba:b0:8a:a7:
                    38:5b:8a:42:3a:72:05:e3:7d:00:54:4c:f4:e2:52:
                    7f:a7:ea:f1:0d:8f:16:5f:b6:bd:72:1a:0e:25:66:
                    15:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:1A:32:7A:7A:33:CE:93:94:F2:A2:7E:59:CA:1E:F9:50:3E:37:21
            X509v3 Authority Key Identifier:
                keyid:8A:3F:D8:9C:E7:0A:14:F1:3E:D0:A8:64:59:22:4D:00:7D:D0:A1:48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIAOCHIAO/ij_YnOcKFPE-0KhkWSJNAH3QoUg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ij_YnOcKFPE-0KhkWSJNAH3QoUg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIAOCHIAO/ShoyenozzpOU8qJ-Wcoe-VA-NyE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:cc:15:eb:39:dd:7d:05:fb:a2:8c:90:41:3b:ee:d9:08:98:
         2c:92:fe:06:d4:53:12:cb:7a:7e:c6:11:cd:37:e2:11:4a:c2:
         28:bd:b9:8b:8b:a1:61:3d:0e:e4:43:ff:6f:b4:b1:a8:b6:1f:
         19:ba:4c:9c:46:3f:23:e3:3f:53:88:0c:83:03:fe:b3:2d:02:
         93:e5:e6:f1:b2:7d:2f:cd:f3:da:cc:7f:60:29:2b:3d:81:b0:
         5a:b6:7a:cd:ad:96:67:c6:60:9b:b5:38:0d:e8:a0:4b:c6:51:
         7c:85:9e:ff:ea:03:8e:19:c4:6f:fa:a5:87:fb:1f:62:5e:80:
         ee:24:94:8e:c7:ab:42:5a:0e:24:d2:be:4f:ef:d3:e3:e3:7e:
         f0:d8:0d:a5:95:86:43:f5:41:e2:d1:ad:cf:91:be:04:6e:9d:
         b4:f9:79:42:f7:09:8b:4d:18:91:96:95:2a:ec:23:12:3b:c3:
         48:20:f3:52:b9:5c:b6:35:22:3a:a7:ab:ec:89:61:e3:79:f2:
         56:a9:92:f8:9f:3c:e5:f7:17:ae:c1:ce:e1:76:05:4a:e6:4f:
         f1:86:ba:25:69:6b:d6:b7:83:87:0c:79:39:8a:12:3f:74:44:
         0f:f5:be:be:11:98:3e:f2:41:42:3d:b3:8d:56:a5:95:a8:d5:
         c2:64:8f:93
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:11 2024 by rpki-client on console-ams.rpki-client.org