Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/Uwf36Gq-7HIAR_PkNaOSYTX_i_A.roa
File:                     Uwf36Gq-7HIAR_PkNaOSYTX_i_A.roa (raw, json)
Hash identifier:          M2gh1nzwH5apWfoGyYD6xnOgNVE9PxldjhggdXWuMQo=
Subject key identifier:   53:07:F7:E8:6A:BE:EC:72:00:47:F3:E4:35:A3:92:61:35:FF:8B:F0
Certificate issuer:       /CN=2855973672B1EED71760C0942C27FD5F7569019C
Certificate serial:       0B6F
Authority key identifier: 28:55:97:36:72:B1:EE:D7:17:60:C0:94:2C:27:FD:5F:75:69:01:9C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/KFWXNnKx7tcXYMCULCf9X3VpAZw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/Uwf36Gq-7HIAR_PkNaOSYTX_i_A.roa
Signing time:             Fri 01 Sep 2023 08:30:30 +0000
ROA not before:           Fri 01 Sep 2023 08:30:30 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     24172
IP address blocks:        103.234.224.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2927 (0xb6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2855973672B1EED71760C0942C27FD5F7569019C
        Validity
            Not Before: Sep  1 08:30:30 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=5307F7E86ABEEC720047F3E435A3926135FF8BF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:30:50:76:78:64:4a:7b:61:14:7b:16:62:61:
                    0f:ab:c2:3e:8c:b4:d5:b5:31:af:4a:ab:25:f8:1d:
                    19:1a:f9:1a:01:a1:6d:12:0e:bf:d0:54:22:69:e4:
                    37:6a:96:2d:cd:48:bc:5b:74:84:f8:de:2a:7e:5f:
                    4b:a3:08:ed:b7:80:89:4e:6b:74:33:2c:40:25:05:
                    52:c1:84:40:5b:fc:1e:57:2b:31:b1:6c:67:7e:b4:
                    7f:63:05:29:7a:1e:34:59:a8:65:17:23:77:84:5a:
                    a9:a5:e2:9b:70:2e:f9:60:6e:75:b7:a8:67:37:cd:
                    dd:e2:f9:d7:68:f9:72:33:32:aa:2f:06:c8:46:e4:
                    dc:8b:90:f2:1a:7b:5f:41:be:b0:15:44:48:c8:d5:
                    56:e8:93:25:71:f5:d7:01:df:7d:74:c3:73:46:1e:
                    22:13:e1:f0:ab:22:df:40:da:ca:89:39:5b:32:6a:
                    69:4f:88:92:d2:a1:19:de:f7:c8:cf:4e:3a:7b:12:
                    c3:1e:54:83:fa:aa:58:d1:30:08:26:8c:44:0e:97:
                    09:dd:ad:7d:cf:4e:f2:53:09:db:15:ef:bc:33:6a:
                    73:82:e8:4f:d8:1d:32:22:43:b3:0c:6b:58:e5:e8:
                    a0:f1:7e:03:eb:a6:92:46:ea:77:61:b3:3e:f3:9c:
                    6c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:07:F7:E8:6A:BE:EC:72:00:47:F3:E4:35:A3:92:61:35:FF:8B:F0
            X509v3 Authority Key Identifier:
                keyid:28:55:97:36:72:B1:EE:D7:17:60:C0:94:2C:27:FD:5F:75:69:01:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/KFWXNnKx7tcXYMCULCf9X3VpAZw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KFWXNnKx7tcXYMCULCf9X3VpAZw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/Uwf36Gq-7HIAR_PkNaOSYTX_i_A.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.234.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:df:03:26:85:1e:0a:ef:c0:42:ea:53:d0:57:70:f3:5f:2c:
         aa:0b:17:24:18:e6:43:b3:5f:be:80:b9:04:07:8a:61:91:2b:
         df:48:4c:6c:67:c7:9f:8c:b5:06:f4:5c:89:fa:2d:8e:47:b8:
         3e:16:cd:36:24:70:49:02:05:34:cb:ee:ec:cc:13:46:02:fd:
         61:7a:54:96:ed:30:9a:8f:fc:80:6c:fd:00:7e:cc:3e:62:cf:
         b4:ea:52:02:57:2b:93:a4:b3:79:24:91:19:47:72:13:68:73:
         d2:50:9d:7a:1b:9f:e4:ff:92:84:38:ab:35:0a:71:bf:54:33:
         e2:61:33:b7:af:52:28:88:61:73:5d:6e:0d:21:98:f8:6c:4e:
         4c:4d:86:ff:f0:a4:f5:27:9e:91:19:8f:3b:ea:e9:89:4c:53:
         4f:72:db:56:1b:41:f0:56:6b:9e:63:b9:e0:42:a4:6e:84:dc:
         be:62:e5:9a:7f:91:eb:a8:fa:6f:74:39:79:6a:14:08:7b:fc:
         92:c4:cc:33:2a:af:d3:fb:81:94:68:07:2f:0d:7a:a4:5e:60:
         d9:55:76:93:95:29:01:a2:ea:ba:d8:9e:46:12:59:6c:bc:c8:
         02:c4:ac:83:9f:82:32:c1:fd:1f:0a:3e:d9:2f:1a:78:1f:44:
         da:9a:25:b0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:11 2024 by rpki-client on console-ams.rpki-client.org