Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/BGaQkYeXmQCqTSiwHyWgQDXklB0.roa
File:                     BGaQkYeXmQCqTSiwHyWgQDXklB0.roa (raw, json)
Hash identifier:          qIAnCeSY1F5110KtY+NwgETRsZZ0k5i7ifDEtHwAq7o=
Subject key identifier:   04:66:90:91:87:97:99:00:AA:4D:28:B0:1F:25:A0:40:35:E4:94:1D
Certificate issuer:       /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial:       1051
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/BGaQkYeXmQCqTSiwHyWgQDXklB0.roa
Signing time:             Tue 05 Mar 2024 01:07:59 +0000
ROA not before:           Tue 05 Mar 2024 01:07:59 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     63199
IP address blocks:        150.116.0.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4177 (0x1051)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
        Validity
            Not Before: Mar  5 01:07:59 2024 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=0466909187979900AA4D28B01F25A04035E4941D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ea:de:9d:81:7b:b8:df:36:52:8a:b8:33:05:
                    c1:9b:90:e6:04:da:d6:ca:20:23:ab:45:b1:b0:33:
                    d7:0d:fe:59:ff:ee:52:4c:0f:78:8d:34:c4:ff:93:
                    09:78:d4:8a:ee:71:90:6a:8f:c4:0a:cf:57:c7:be:
                    1c:42:5f:3b:20:b6:4e:b2:ef:9a:ae:a5:2e:3b:e5:
                    05:6c:e1:6a:89:17:ce:bf:d2:1a:fd:a2:db:43:35:
                    1c:cc:a8:06:96:a8:f5:ba:73:62:38:2a:dc:04:51:
                    b1:43:1f:ea:82:47:f2:35:34:ff:12:5b:b0:49:6a:
                    09:15:81:47:fd:2c:1a:7a:cd:07:dc:a2:b4:30:82:
                    22:8c:ea:e4:06:8b:b6:de:74:1e:75:ba:59:de:55:
                    50:8a:8a:2f:ee:ba:03:48:13:05:c0:28:60:8d:e9:
                    35:d5:f2:cc:63:5a:e9:bd:67:60:10:97:ed:dd:0d:
                    75:5f:61:8b:a9:47:bd:c3:2f:ab:af:ff:9d:6d:18:
                    71:84:b3:ae:b3:11:86:e6:7e:74:bb:a4:72:f2:f7:
                    d1:25:92:64:2b:50:a0:ce:81:3f:48:ac:a7:74:ef:
                    66:f9:32:f3:a8:21:79:26:ea:e8:86:0e:a9:0a:5e:
                    93:a2:0e:98:af:cf:5d:7b:34:8b:e6:75:13:76:d9:
                    5d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:66:90:91:87:97:99:00:AA:4D:28:B0:1F:25:A0:40:35:E4:94:1D
            X509v3 Authority Key Identifier:
                keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/BGaQkYeXmQCqTSiwHyWgQDXklB0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.116.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:33:a6:3b:3f:f7:c3:8a:76:30:50:40:b4:7f:d7:10:8e:1d:
         79:5e:1d:4e:22:80:4b:ce:8f:8f:59:d0:dc:1b:9b:3b:b3:9f:
         46:c6:03:36:7f:e5:a9:00:18:54:66:42:9c:93:f8:0a:85:b2:
         9f:0b:7e:05:bb:53:fa:24:76:e6:82:b2:68:0c:21:b7:2b:e2:
         29:8e:ae:99:eb:bc:bd:88:b6:23:51:6b:e8:59:36:c4:ee:7c:
         e0:af:ec:46:b4:28:33:53:20:f2:70:12:55:b6:4c:7e:29:1f:
         fa:a2:fc:fa:3f:77:28:5c:d8:0e:c8:39:7e:7e:88:e0:05:6e:
         f2:28:96:f9:52:c4:db:62:7b:6b:4f:1c:6a:b3:c2:3e:e2:df:
         d3:29:d0:79:6b:6d:2b:17:ce:87:c8:3d:48:ef:51:aa:26:9e:
         63:ad:29:c1:27:d0:79:a2:95:6f:2a:81:fd:94:3a:fe:87:f0:
         d9:b0:bf:dd:69:60:38:a1:59:7c:ea:02:d6:90:56:6a:56:f2:
         4a:d9:04:4d:c5:37:5c:be:7d:bc:c1:4a:09:72:a9:b6:5f:d2:
         ca:63:50:07:00:8e:e6:99:17:3b:24:24:c5:e2:f4:20:82:cb:
         8e:d5:85:a7:0a:18:31:fc:44:e3:9d:ce:71:dd:0c:81:d9:60:
         2e:fa:15:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:18 2024 by rpki-client on console-fra.rpki-client.org