Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/JrvirsA_LBCQg5wcFm8y_RHFaIM.roa
File:                     JrvirsA_LBCQg5wcFm8y_RHFaIM.roa (raw, json)
Hash identifier:          PCul1iJNO4vZDKL27YbDev6pkRXanKjHp9QwFiCoQBw=
Subject key identifier:   26:BB:E2:AE:C0:3F:2C:10:90:83:9C:1C:16:6F:32:FD:11:C5:68:83
Certificate issuer:       /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial:       0FC2
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/JrvirsA_LBCQg5wcFm8y_RHFaIM.roa
Signing time:             Fri 01 Sep 2023 08:29:31 +0000
ROA not before:           Fri 01 Sep 2023 08:29:31 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     17651
IP address blocks:        150.116.116.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4034 (0xfc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
        Validity
            Not Before: Sep  1 08:29:31 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=26BBE2AEC03F2C1090839C1C166F32FD11C56883
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f9:9d:f6:0a:cd:0d:b8:a8:2b:a0:a2:51:f2:
                    d5:bf:a3:59:26:dc:0c:86:50:51:a7:47:fd:0c:31:
                    40:b8:df:e7:18:87:cc:3a:92:81:4e:71:6b:ff:0f:
                    3f:07:93:d7:82:e3:bd:e1:03:dd:80:78:dc:48:fd:
                    72:60:c0:19:4a:81:15:27:e5:21:5f:28:f2:21:18:
                    4c:e1:12:2b:60:1a:03:d6:2e:40:5a:53:de:e2:c6:
                    b7:d7:c5:e6:d2:5e:1f:ba:ee:c8:10:0c:db:ce:f2:
                    81:d2:6c:2e:32:7b:e3:0c:ad:45:1b:5d:7e:23:35:
                    e1:48:31:8b:47:ce:9c:a0:f6:12:de:14:52:cc:11:
                    d8:ec:5c:e7:22:11:4e:ab:45:d8:1a:fa:19:89:9b:
                    c9:b5:7b:85:8a:79:d5:c8:ab:03:08:57:f4:ea:86:
                    04:d6:67:47:59:57:f0:45:bc:9a:f3:cf:f6:bb:4e:
                    47:9b:b3:7b:c9:ca:e2:31:e2:5a:71:05:97:83:ab:
                    5d:5c:88:ce:4e:7a:b4:e6:8f:9e:85:75:ca:35:05:
                    61:01:91:a4:db:38:2d:f4:80:20:a3:45:cd:7d:ff:
                    1e:4b:97:c6:d2:f5:34:3c:d8:f9:ad:02:b3:24:4d:
                    db:be:8e:3b:23:92:e8:d7:0b:c7:22:cc:50:a9:06:
                    4c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:BB:E2:AE:C0:3F:2C:10:90:83:9C:1C:16:6F:32:FD:11:C5:68:83
            X509v3 Authority Key Identifier:
                keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/JrvirsA_LBCQg5wcFm8y_RHFaIM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.116.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:92:4b:1b:47:36:87:87:72:e3:a0:28:68:55:bd:c4:df:e8:
         5f:dc:0b:e3:ac:3c:f5:a8:19:f0:c9:70:95:e4:19:c7:55:00:
         af:a6:99:4c:ef:0e:d0:34:6a:f3:4a:a3:0e:be:f9:51:23:12:
         e0:9c:a8:bb:dd:45:2a:a2:b1:d7:a1:59:cd:71:cf:cf:25:9f:
         91:37:a3:43:f7:32:ca:5f:e9:41:c0:13:f7:d2:25:7c:43:93:
         60:d4:25:dc:c5:84:48:76:e6:44:8d:8e:76:89:94:35:cb:9a:
         56:e2:2f:ae:66:f6:32:01:b6:f5:d8:a8:06:3a:ac:57:01:57:
         4f:dd:ba:e6:19:b2:d6:0e:c1:94:1b:ed:b9:09:a8:4d:c4:23:
         2e:e0:28:05:e4:dc:cf:88:22:7c:14:49:bd:9a:47:22:4d:ed:
         a3:4f:22:60:3c:99:85:20:9d:08:bc:50:40:4f:73:2c:c9:bf:
         ea:9d:d0:8e:36:a9:67:e0:86:a2:a9:91:17:3a:e7:46:71:6f:
         b0:1e:25:ff:03:f8:f5:3f:34:e8:93:ae:61:2d:ee:c0:73:43:
         ac:66:10:b1:77:12:48:24:f1:26:21:79:3d:6b:7a:8c:1d:07:
         33:ed:b2:07:3f:19:9e:f4:e2:61:b6:5c:9c:ea:c8:e2:09:7b:
         59:83:66:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:18 2024 by rpki-client on console-fra.rpki-client.org