Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/COLIN/qzB0b5BHci4ZuXrGFdKdV9BnWZc.roa
File:                     qzB0b5BHci4ZuXrGFdKdV9BnWZc.roa (raw, json)
Hash identifier:          TxV2A8lGQ3p/+Ef86fc9xRZQ3H1Rb5s6jSSDMYMPh+4=
Subject key identifier:   AB:30:74:6F:90:47:72:2E:19:B9:7A:C6:15:D2:9D:57:D0:67:59:97
Certificate issuer:       /CN=9700C068EFA9A6B2E6879310C9AEA030DC8B2AD1
Certificate serial:       95
Authority key identifier: 97:00:C0:68:EF:A9:A6:B2:E6:87:93:10:C9:AE:A0:30:DC:8B:2A:D1
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/lwDAaO-pprLmh5MQya6gMNyLKtE.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/COLIN/qzB0b5BHci4ZuXrGFdKdV9BnWZc.roa
Signing time:             Sun 24 Mar 2024 14:23:38 +0000
ROA not before:           Sun 24 Mar 2024 14:23:38 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     150768
IP address blocks:        103.6.124.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 149 (0x95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9700C068EFA9A6B2E6879310C9AEA030DC8B2AD1
        Validity
            Not Before: Mar 24 14:23:38 2024 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=AB30746F9047722E19B97AC615D29D57D0675997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:00:39:ee:8a:19:b2:0f:c9:9b:33:fd:35:93:
                    a5:51:f9:8b:f2:fa:1a:5b:64:c7:cc:92:3a:30:ff:
                    d4:22:f9:d9:0e:1b:37:9f:3e:f8:46:38:f4:81:3f:
                    92:20:a0:aa:22:ba:f6:cb:90:b3:29:a1:f4:ce:f8:
                    06:f4:74:11:cb:ce:65:1d:fd:81:1f:00:95:96:3f:
                    7f:ed:e9:fb:02:06:4c:e0:1e:82:e5:4a:ef:25:0f:
                    83:3a:58:f6:86:7d:35:35:7e:71:4e:cf:11:5e:f6:
                    e9:e1:cf:59:8b:26:1b:9b:4d:f4:1e:72:82:2b:e6:
                    8d:99:c3:18:db:4c:75:99:46:81:d3:dc:30:b6:85:
                    66:27:c3:20:11:af:4c:4c:ca:25:b2:da:20:8e:a3:
                    b8:a2:f6:06:b9:14:ea:41:f7:20:bc:27:3b:b3:c0:
                    10:44:98:1c:47:30:62:eb:e2:49:b2:e1:8e:38:46:
                    35:46:01:9c:5d:b1:cf:38:01:ca:6b:5c:48:4d:0c:
                    a4:b7:98:83:e3:50:91:a0:f1:7d:76:5b:74:db:81:
                    a7:fd:c2:71:25:9e:95:33:b1:dd:7c:fe:23:bd:82:
                    85:da:e0:9b:b0:df:81:3b:01:7c:b3:bf:7e:b6:c1:
                    a9:df:60:18:70:59:af:81:f2:b3:f6:fd:3f:e7:22:
                    88:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:30:74:6F:90:47:72:2E:19:B9:7A:C6:15:D2:9D:57:D0:67:59:97
            X509v3 Authority Key Identifier:
                keyid:97:00:C0:68:EF:A9:A6:B2:E6:87:93:10:C9:AE:A0:30:DC:8B:2A:D1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/COLIN/lwDAaO-pprLmh5MQya6gMNyLKtE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/lwDAaO-pprLmh5MQya6gMNyLKtE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/COLIN/qzB0b5BHci4ZuXrGFdKdV9BnWZc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.6.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         91:b2:b6:e6:10:1a:d1:e1:00:8c:0b:22:70:dd:4f:b1:9a:3a:
         6d:16:a8:ca:41:b3:09:95:79:c0:a8:7a:fc:13:f7:85:ee:1f:
         41:68:70:cd:1d:85:cf:c5:ba:22:18:bb:a2:c7:63:26:d5:ad:
         02:68:17:27:40:f6:7b:ca:ad:af:63:41:1c:03:45:c5:b8:78:
         b4:c6:48:75:ac:3c:d0:b1:15:47:0c:71:39:6d:b8:d3:bd:9c:
         c0:db:20:b9:0a:10:04:49:59:8e:ad:b1:e1:bb:3b:3e:94:f6:
         35:80:16:a7:9e:6b:b2:db:d7:cc:b5:46:87:bc:7a:ae:aa:5a:
         18:d4:93:53:09:fa:dd:b7:b4:d2:c8:41:98:c7:ae:c7:e0:f1:
         bb:ec:9d:95:07:15:75:8b:eb:28:00:be:78:36:e3:26:5d:31:
         cc:d3:be:09:68:08:e4:03:02:cf:21:69:2d:a8:30:eb:7d:4e:
         87:6e:46:94:22:2a:d6:7d:85:49:f6:f2:c6:64:71:22:49:1b:
         e6:af:70:06:bf:ad:04:dd:5f:13:d4:07:c0:de:fc:9d:a4:3e:
         7a:7a:24:a6:b7:88:e7:e2:93:b0:3f:96:86:f5:f9:a4:93:61:
         e4:0f:d6:6d:01:de:eb:a5:dc:f0:54:9a:d1:5b:dd:1d:e4:f3:
         8b:e8:92:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----