Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CLARK/5qykFt1CXRaZe_rXIDoZGvV5Gz4.roa
File:                     5qykFt1CXRaZe_rXIDoZGvV5Gz4.roa (raw, json)
Hash identifier:          Tc3boEl4x65kgCFbH7fzNk1kwxNwIMYdUZI0Bj5r6lY=
Subject key identifier:   E6:AC:A4:16:DD:42:5D:16:99:7B:FA:D7:20:3A:19:1A:F5:79:1B:3E
Certificate issuer:       /CN=74AF0402FEF56C34A192D1D2185E6FB546AA702C
Certificate serial:       F6
Authority key identifier: 74:AF:04:02:FE:F5:6C:34:A1:92:D1:D2:18:5E:6F:B5:46:AA:70:2C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/dK8EAv71bDShktHSGF5vtUaqcCw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CLARK/5qykFt1CXRaZe_rXIDoZGvV5Gz4.roa
Signing time:             Wed 20 Mar 2024 15:29:00 +0000
ROA not before:           Wed 20 Mar 2024 15:29:00 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     63910
IP address blocks:        2400:f420::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 246 (0xf6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74AF0402FEF56C34A192D1D2185E6FB546AA702C
        Validity
            Not Before: Mar 20 15:29:00 2024 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=E6ACA416DD425D16997BFAD7203A191AF5791B3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2d:64:67:9a:20:b7:88:04:1b:22:e1:fc:ed:
                    14:f3:39:9b:a2:d5:be:c5:71:7f:b5:9a:a3:cf:fa:
                    5b:b1:1b:a7:17:63:3a:be:46:81:46:4c:8c:44:38:
                    7a:fb:20:16:5a:c1:08:da:59:1e:96:ac:82:f8:19:
                    42:55:34:a6:77:0b:99:fb:ec:c2:6c:47:4f:11:ea:
                    de:4f:61:9a:33:4f:2a:ac:90:1e:9c:99:3b:3b:28:
                    56:8b:ca:8d:03:23:57:2f:93:2b:f0:d4:96:76:91:
                    c8:9d:5e:23:91:ae:a1:2e:3c:9c:08:33:73:98:2c:
                    ab:7a:e1:95:e3:bf:7d:3e:12:5f:5d:0c:71:1f:7e:
                    61:03:1c:a2:e0:e0:ea:7f:69:e6:1e:fa:5b:63:aa:
                    59:be:c3:3c:fa:1f:a1:64:1f:e5:d4:6f:41:b3:0c:
                    1f:5f:64:84:31:2c:71:3a:d9:b0:ee:d8:11:3d:65:
                    8f:2a:28:5e:94:c0:1e:b5:19:b7:c8:e4:67:0a:ff:
                    39:a5:63:64:3a:cd:be:53:51:04:3c:e6:5b:56:60:
                    8c:e7:30:7c:82:b8:93:4d:cd:90:f5:0d:31:13:59:
                    c2:85:97:ba:af:35:9c:92:13:ed:2a:12:87:d4:2e:
                    05:ae:da:51:08:6a:77:89:a3:45:d0:d6:2a:ca:12:
                    ef:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:AC:A4:16:DD:42:5D:16:99:7B:FA:D7:20:3A:19:1A:F5:79:1B:3E
            X509v3 Authority Key Identifier:
                keyid:74:AF:04:02:FE:F5:6C:34:A1:92:D1:D2:18:5E:6F:B5:46:AA:70:2C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CLARK/dK8EAv71bDShktHSGF5vtUaqcCw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/dK8EAv71bDShktHSGF5vtUaqcCw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CLARK/5qykFt1CXRaZe_rXIDoZGvV5Gz4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:f420::/32

    Signature Algorithm: sha256WithRSAEncryption
         25:8f:88:45:7b:fd:da:20:b6:4c:43:98:49:bd:77:e1:c3:83:
         24:ee:ec:eb:d7:0a:56:57:c0:a1:1c:12:9d:cd:72:3a:e6:c2:
         b9:46:23:1d:da:1c:47:18:ce:bd:6c:27:8d:7b:d6:bf:d4:6f:
         f9:b1:25:b8:42:0b:1b:a1:a5:eb:b7:bf:d2:7c:6c:d3:64:e6:
         81:56:a4:0e:b5:05:43:ba:43:9c:09:7c:f7:96:fd:39:be:4e:
         61:6a:06:55:ec:b1:8e:ad:31:b0:d2:46:70:96:bd:d4:79:24:
         39:e4:04:08:79:a1:23:86:ff:71:d1:fb:6c:77:7b:c0:4f:58:
         31:4d:6f:85:ae:ea:fc:00:54:23:2d:60:69:ce:42:11:e2:87:
         ba:bc:e0:30:de:cb:8c:91:0b:d7:d1:03:a2:0d:8e:69:57:23:
         60:6a:74:b6:ee:7e:66:97:c7:40:ea:8f:27:51:e8:df:60:76:
         d6:6f:3b:b0:b4:2f:f5:8f:28:53:ac:d7:5e:42:ad:a4:96:6f:
         4c:98:6e:25:b6:70:2e:21:d4:58:7c:01:3a:af:9c:4e:6e:6d:
         7d:2b:c1:29:62:2c:8d:b4:47:e5:f7:02:a3:40:d8:ae:00:4f:
         de:58:5b:ba:52:1a:72:67:31:60:0e:a0:f6:4d:c4:4a:f3:ba:
         14:5f:3a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:18 2024 by rpki-client on console-fra.rpki-client.org