Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/iVolRLxFK8ugqsQoC4EHqPSv_6M.roa
File:                     iVolRLxFK8ugqsQoC4EHqPSv_6M.roa (raw, json)
Hash identifier:          30LsRuG+5KpdYPbzFurceUYtWYgN/DH7c3U/4wBq5zQ=
Subject key identifier:   89:5A:25:44:BC:45:2B:CB:A0:AA:C4:28:0B:81:07:A8:F4:AF:FF:A3
Certificate issuer:       /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial:       0FAE
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/iVolRLxFK8ugqsQoC4EHqPSv_6M.roa
Signing time:             Fri 01 Sep 2023 08:29:25 +0000
ROA not before:           Fri 01 Sep 2023 08:29:25 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     17408
IP address blocks:        150.116.0.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4014 (0xfae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
        Validity
            Not Before: Sep  1 08:29:25 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=895A2544BC452BCBA0AAC4280B8107A8F4AFFFA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:30:4f:d8:97:af:8a:af:f5:34:7d:d3:2e:ad:
                    21:f5:8c:d6:1d:f0:ef:f6:5a:bf:d8:0f:c4:44:1a:
                    75:62:87:e9:43:e7:76:56:b3:54:cc:ab:00:fb:d8:
                    25:64:dd:6a:e3:82:75:7e:3e:21:0b:d3:60:c0:2e:
                    ee:87:b3:e7:bf:eb:a2:f7:45:0b:8c:6e:03:a6:2f:
                    7c:90:2d:8e:b9:b6:1e:64:cc:e9:2e:b0:fc:24:bf:
                    13:8e:a1:30:9b:f4:3b:e8:75:b5:41:d4:3e:2c:49:
                    31:ef:2a:67:a3:74:a0:5c:b2:53:96:0c:84:d6:90:
                    e1:ea:2a:b0:19:c2:da:a8:a0:1a:89:a8:02:aa:b0:
                    94:43:08:4d:82:b6:41:28:e0:77:17:5c:a8:b6:82:
                    b1:f7:68:e9:4a:19:43:f4:43:d7:39:2b:ec:42:10:
                    98:23:5e:7b:9a:9b:f2:1c:37:7c:f9:84:68:82:34:
                    14:4b:c7:15:b5:ca:e7:f7:e8:8f:09:60:f8:2d:dd:
                    41:a4:f8:91:c5:c1:f9:66:cb:6e:7f:56:75:56:38:
                    ae:9a:3c:55:5c:9a:2c:67:4b:f4:06:4e:7b:65:4e:
                    72:a9:91:96:5a:26:47:e5:4d:a4:cc:a6:06:40:71:
                    19:f0:d1:b6:94:83:86:80:0e:6c:f3:3d:1a:04:6d:
                    58:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:5A:25:44:BC:45:2B:CB:A0:AA:C4:28:0B:81:07:A8:F4:AF:FF:A3
            X509v3 Authority Key Identifier:
                keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/iVolRLxFK8ugqsQoC4EHqPSv_6M.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.116.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1a:18:38:84:e6:2b:75:e2:96:d4:cc:d9:46:1b:25:cd:35:01:
         f3:2b:53:bc:4e:02:93:43:01:a4:f5:02:c3:ef:61:85:bd:33:
         99:14:e0:6f:93:c1:fb:8a:21:99:d7:2d:7f:2d:af:bb:fd:11:
         4a:a2:2f:c2:9b:a4:53:84:6e:a3:fe:a3:af:94:2c:ac:b8:c2:
         d8:83:a4:db:d3:87:bb:d7:04:7c:c7:5a:41:8b:a7:dd:e6:17:
         24:ff:54:01:6b:5a:84:e3:7b:dd:cc:c5:18:60:6d:38:3a:80:
         5d:d6:71:9f:ee:71:e4:8c:0f:e3:41:bd:b3:eb:54:50:85:ae:
         4a:72:41:e2:13:ce:b3:11:cd:a6:e5:15:44:fb:de:f0:b6:8a:
         f5:19:a3:77:f4:ec:f9:2d:c7:91:29:a3:c4:a3:43:e4:de:ff:
         a6:59:f6:24:95:a6:82:d9:fa:25:9e:71:a3:e8:e6:57:85:44:
         b6:2a:16:40:38:f2:fe:a7:85:af:c7:ca:cf:75:0e:23:5d:f3:
         c3:ca:a3:19:71:71:80:e5:c9:5d:16:ee:e4:9e:a6:6f:08:61:
         1f:c7:5a:06:53:6a:73:8c:16:29:93:e6:04:1f:3e:66:26:00:
         a6:59:43:c0:95:6b:eb:41:4b:36:27:fa:93:99:f7:65:97:db:
         4f:c4:e0:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:18 2024 by rpki-client on console-fra.rpki-client.org