Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/6WDnNDu-VtoeuwR7Y5eBtfV-dFQ.roa
File:                     6WDnNDu-VtoeuwR7Y5eBtfV-dFQ.roa (raw, json)
Hash identifier:          wbLcHVnV5uyJbjbmzUuhYJCRNyDflIZYNFoOAgB2NHo=
Subject key identifier:   E9:60:E7:34:3B:BE:56:DA:1E:BB:04:7B:63:97:81:B5:F5:7E:74:54
Certificate issuer:       /CN=2855973672B1EED71760C0942C27FD5F7569019C
Certificate serial:       0B6C
Authority key identifier: 28:55:97:36:72:B1:EE:D7:17:60:C0:94:2C:27:FD:5F:75:69:01:9C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/KFWXNnKx7tcXYMCULCf9X3VpAZw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/6WDnNDu-VtoeuwR7Y5eBtfV-dFQ.roa
Signing time:             Fri 01 Sep 2023 08:30:30 +0000
ROA not before:           Fri 01 Sep 2023 08:30:30 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     4780
IP address blocks:        101.0.232.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2924 (0xb6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2855973672B1EED71760C0942C27FD5F7569019C
        Validity
            Not Before: Sep  1 08:30:30 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=E960E7343BBE56DA1EBB047B639781B5F57E7454
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:79:5b:02:59:e7:06:8e:e1:43:ae:ea:6f:5b:
                    b8:2d:69:4d:99:8c:96:39:79:e4:d2:28:d8:55:20:
                    4c:88:18:0d:30:51:d4:44:3a:a6:6c:06:6e:0b:c8:
                    4e:44:28:16:26:b9:9e:f6:b0:ad:b0:57:1c:80:d7:
                    6e:d4:8e:4f:49:61:0d:0e:15:a6:87:04:d0:5f:18:
                    a8:6e:ff:b9:3a:98:42:c7:95:7d:e2:7f:24:bd:3f:
                    af:3d:71:35:02:5d:d7:d4:ee:69:3a:65:10:e2:29:
                    63:04:6f:b1:db:17:2f:44:6b:06:a7:2e:03:f0:8a:
                    a9:b7:91:ef:96:56:9a:87:fa:dc:ae:79:2a:28:ba:
                    50:be:bc:06:92:30:89:c5:c0:c8:d0:bb:95:1d:f3:
                    ba:51:47:42:1a:c1:c0:e1:5f:70:f1:cf:db:73:6d:
                    ef:cb:a8:c4:0e:93:08:a8:10:60:c8:65:55:da:f0:
                    fb:3a:bd:36:32:7b:2e:a4:57:80:3c:35:6c:a4:ca:
                    6b:0d:95:d2:7a:4b:18:8d:36:98:2a:2e:20:d7:56:
                    3c:81:d9:15:1f:5c:50:77:73:55:17:5f:46:ef:3a:
                    68:83:9a:c8:fc:c4:91:66:8a:5b:9a:e5:a1:87:c9:
                    64:4d:1b:b8:29:ab:ff:a4:14:4b:b7:66:e1:c1:f5:
                    20:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:60:E7:34:3B:BE:56:DA:1E:BB:04:7B:63:97:81:B5:F5:7E:74:54
            X509v3 Authority Key Identifier:
                keyid:28:55:97:36:72:B1:EE:D7:17:60:C0:94:2C:27:FD:5F:75:69:01:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/KFWXNnKx7tcXYMCULCf9X3VpAZw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KFWXNnKx7tcXYMCULCf9X3VpAZw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/6WDnNDu-VtoeuwR7Y5eBtfV-dFQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.0.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         af:cd:c0:c6:78:c2:fc:40:12:7f:a5:c7:86:58:96:4c:ac:cd:
         a0:72:57:8c:af:ba:da:b3:07:59:6a:fa:06:14:99:3f:93:be:
         28:70:c6:f7:ac:fe:48:ca:3c:d2:98:56:18:c2:ce:0a:20:d8:
         d8:22:02:09:a1:8c:f7:ad:30:95:1d:a9:5a:13:cf:7d:aa:21:
         b4:f0:ef:d8:70:c8:04:1e:af:00:67:56:17:58:b9:13:09:3d:
         ef:14:e6:99:26:a4:3e:e8:17:a7:ef:62:55:ab:e6:33:d0:62:
         d7:f8:3a:d6:72:65:d4:42:b7:a7:20:9d:af:75:a2:b9:ae:a6:
         22:34:79:8f:57:8b:9d:a2:b0:97:dd:cb:25:ff:94:e9:ed:b5:
         53:52:5c:b5:39:df:fd:5f:83:eb:60:27:ba:3f:83:34:ad:f7:
         36:5c:23:4b:fa:ad:5a:5a:0a:53:31:a6:30:36:01:68:ff:e1:
         6a:f0:74:f8:bb:09:d5:08:2b:d1:00:36:85:54:46:9e:09:63:
         85:4c:26:bc:fa:55:e9:b6:4d:91:24:3b:f1:06:6f:1b:fb:98:
         a2:e6:0d:4c:cb:cc:72:0c:d5:82:fa:be:4c:53:29:db:05:27:
         6a:ce:01:64:eb:21:c3:b7:58:23:f2:0e:fe:9e:5c:b3:57:ca:
         44:2b:02:96
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:11 2024 by rpki-client on console-ams.rpki-client.org