Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/PxgeYLMkbBJivKkxbi9tpzW6kog.roa
File:                     PxgeYLMkbBJivKkxbi9tpzW6kog.roa (raw, json)
Hash identifier:          lRn23CWx2E55tbjpeS/ZjDV6HBUO/Nn2d+5zHlecH+Q=
Subject key identifier:   3F:18:1E:60:B3:24:6C:12:62:BC:A9:31:6E:2F:6D:A7:35:BA:92:88
Certificate issuer:       /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial:       0F63
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/PxgeYLMkbBJivKkxbi9tpzW6kog.roa
Signing time:             Fri 01 Sep 2023 08:29:04 +0000
ROA not before:           Fri 01 Sep 2023 08:29:04 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     18419
IP address blocks:        118.150.128.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3939 (0xf63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
        Validity
            Not Before: Sep  1 08:29:04 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=3F181E60B3246C1262BCA9316E2F6DA735BA9288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:2e:92:3a:1e:3e:c5:c0:58:51:fd:03:ff:ef:
                    7a:22:87:fc:50:78:db:d8:f4:a8:d6:0e:e7:87:5f:
                    3b:7f:4e:24:40:ba:ec:85:19:2a:3a:a9:3a:32:77:
                    6e:16:62:2a:c6:a6:15:97:06:92:ff:be:7a:7a:bc:
                    bf:29:da:92:0a:2a:ce:f9:f7:43:72:1c:f4:31:76:
                    29:d1:79:61:00:7b:c8:8a:bf:c3:2f:3b:95:d9:cf:
                    6d:31:51:d6:d1:63:79:76:c7:cb:26:08:6b:f6:24:
                    1f:e5:ac:c7:9e:43:1e:cd:91:d5:c6:6a:d7:c2:6c:
                    59:b1:cf:a3:e3:1b:a8:65:82:6f:57:99:fc:b5:26:
                    36:0e:f2:af:8e:04:ae:32:21:9a:42:e2:b6:fa:a3:
                    c9:b9:9d:5f:bf:54:4c:a0:50:69:e5:19:6a:3c:71:
                    09:d2:75:de:9e:03:b9:ba:1e:e6:49:0d:68:87:61:
                    6f:fa:2f:a6:6d:06:04:23:72:9e:91:a4:ba:76:bc:
                    74:1b:a6:27:e2:fd:9d:ee:18:92:99:19:b5:06:88:
                    9a:5f:85:c2:be:fc:4f:ab:eb:f6:76:1a:d8:3e:c3:
                    82:a9:ae:fa:5b:70:9f:79:20:e3:ad:0d:db:6f:24:
                    9d:3f:a9:2a:09:6c:c7:14:51:e1:24:67:8b:15:6b:
                    cc:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:18:1E:60:B3:24:6C:12:62:BC:A9:31:6E:2F:6D:A7:35:BA:92:88
            X509v3 Authority Key Identifier:
                keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/PxgeYLMkbBJivKkxbi9tpzW6kog.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.150.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         9c:a3:e2:0e:8a:46:b2:6a:4b:d5:11:a3:5b:d5:c3:2c:5b:78:
         de:f4:b4:c1:cc:8e:f9:26:87:65:e6:63:53:e6:12:bd:3c:4c:
         1f:18:5a:c0:c2:77:88:2e:18:14:fb:dc:75:8a:0a:3a:b7:b3:
         fd:ad:be:b9:4e:b7:6f:da:a2:5d:50:d6:df:b0:3d:23:5b:01:
         64:6c:51:f9:bf:1d:16:a8:b0:84:a6:03:ed:04:b9:e4:40:9d:
         ad:05:80:2c:4d:c5:98:3d:01:cc:d6:dd:79:5d:7c:38:e9:89:
         97:54:8e:70:5f:ee:25:ed:a9:7d:97:6e:dd:0d:28:95:0e:76:
         2a:2e:49:44:28:a7:29:1d:91:22:2a:14:f6:c5:a3:86:5f:2a:
         cd:1f:25:59:36:a1:b3:f7:bb:c5:8f:af:72:b0:77:81:04:6a:
         e6:5f:88:48:21:a7:a1:08:ed:03:5f:72:45:a2:29:24:7e:ac:
         30:1c:7b:63:85:24:0b:c6:19:99:af:52:09:b5:99:0d:b4:a2:
         87:52:b7:63:32:ce:bb:70:f8:ad:db:7e:c7:a5:e1:ed:8c:72:
         b2:29:97:b2:aa:89:80:54:5c:b2:6d:de:58:90:b6:4d:71:c2:
         7d:7f:0f:df:75:95:5a:53:00:f9:5d:ce:a5:8a:0d:dc:5c:d3:
         f4:e9:53:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:11 2024 by rpki-client on console-ams.rpki-client.org