Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/4CtvqzAYq0bavl7MrhFb31_Xhn8.roa
File:                     4CtvqzAYq0bavl7MrhFb31_Xhn8.roa (raw, json)
Hash identifier:          EVdjY65q4cCf93m1/f31EAliyXnjx6hDf6+f0o98kwE=
Subject key identifier:   E0:2B:6F:AB:30:18:AB:46:DA:BE:5E:CC:AE:11:5B:DF:5F:D7:86:7F
Certificate issuer:       /CN=6FDEA34707152290C1D2606FFBFC69B927D40A5B
Certificate serial:       0B44
Authority key identifier: 6F:DE:A3:47:07:15:22:90:C1:D2:60:6F:FB:FC:69:B9:27:D4:0A:5B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/4CtvqzAYq0bavl7MrhFb31_Xhn8.roa
Signing time:             Fri 01 Sep 2023 08:34:04 +0000
ROA not before:           Fri 01 Sep 2023 08:34:04 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     9924
IP address blocks:        61.60.240.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2884 (0xb44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FDEA34707152290C1D2606FFBFC69B927D40A5B
        Validity
            Not Before: Sep  1 08:34:04 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=E02B6FAB3018AB46DABE5ECCAE115BDF5FD7867F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c4:55:68:0d:23:cd:dd:ae:a1:a4:69:a8:f7:
                    ac:b8:6d:f1:96:12:7a:33:26:8d:37:64:3a:e3:9c:
                    72:b4:1d:e9:1b:04:a6:a4:ab:80:af:94:e0:17:00:
                    5a:cf:df:3f:3f:56:9a:45:82:d8:2c:2d:d0:4b:1c:
                    93:36:ce:d4:42:bc:32:52:14:24:14:c3:50:7a:9b:
                    90:4b:e7:e0:09:0a:81:a8:4f:79:de:4a:eb:c4:c3:
                    7e:a7:d4:aa:8f:ac:2e:e7:74:21:ee:a8:74:6b:e8:
                    a7:ca:53:6c:48:88:14:7d:db:df:00:17:e2:2a:e3:
                    b4:a6:a9:75:1a:21:c9:e1:ff:32:c0:7d:6b:ad:a4:
                    08:87:eb:af:0d:0a:07:40:a1:07:e4:fc:64:55:e6:
                    ed:33:5c:56:e5:e4:8b:08:6e:b2:6d:fc:ca:7c:92:
                    33:3a:0f:8c:8a:e4:d7:37:33:ff:53:53:75:4e:df:
                    a4:d2:ea:f2:10:c1:cb:57:3d:15:0a:4e:21:8c:63:
                    a3:7e:62:b1:5a:48:89:c8:f2:08:71:b4:88:92:d3:
                    83:39:41:e7:ee:6a:06:20:df:bd:05:45:61:4f:bb:
                    78:4a:0a:61:c4:f3:ee:81:c7:c0:1d:08:39:f8:9b:
                    f9:ed:1e:35:3b:46:93:a8:27:32:04:a8:e0:f2:9a:
                    b7:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:2B:6F:AB:30:18:AB:46:DA:BE:5E:CC:AE:11:5B:DF:5F:D7:86:7F
            X509v3 Authority Key Identifier:
                keyid:6F:DE:A3:47:07:15:22:90:C1:D2:60:6F:FB:FC:69:B9:27:D4:0A:5B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/b96jRwcVIpDB0mBv-_xpuSfUCls.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/4CtvqzAYq0bavl7MrhFb31_Xhn8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.60.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         30:0c:fe:38:e6:5f:97:d8:b4:aa:24:40:fe:af:07:28:3a:91:
         7a:ac:9a:ba:e1:c5:a1:07:86:0f:01:89:3a:70:c7:ce:18:7e:
         af:0a:f3:34:b9:d2:3f:d1:cb:f5:c2:d7:0a:b0:8f:98:5e:0c:
         55:9a:21:25:00:7a:f7:11:37:d9:e6:97:66:3e:59:ce:62:48:
         af:c8:04:83:0b:3d:a0:6e:16:c0:c6:7d:cd:f2:32:2b:c4:1a:
         dc:0d:f8:12:28:90:01:d4:92:20:5a:94:a6:e0:45:25:36:3a:
         6e:bb:d9:52:21:30:45:ff:8f:42:b1:bb:e2:81:bb:24:d9:a8:
         14:11:63:bb:18:53:1c:72:d3:6a:77:c1:6f:45:23:ef:4b:1d:
         c1:87:60:9f:18:6b:80:76:49:9f:bc:97:d3:33:16:60:77:c6:
         69:72:fb:68:a8:68:29:ec:74:03:a2:32:81:20:24:c1:52:0d:
         d7:3f:3f:c5:66:7e:86:f7:33:11:4c:70:45:57:05:2b:d2:55:
         2e:4f:eb:90:e8:60:58:c0:d1:57:9d:9a:11:8b:34:03:4d:01:
         cb:27:32:a0:f1:10:42:2e:25:57:67:68:0a:b8:43:36:53:07:
         a9:f8:7b:6b:38:53:c0:a1:b2:21:cf:97:d3:59:30:88:5a:57:
         f2:11:ac:3f
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICC0QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkZE
RUEzNDcwNzE1MjI5MEMxRDI2MDZGRkJGQzY5QjkyN0Q0MEE1QjAeFw0yMzA5MDEw
ODM0MDRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEUwMkI2RkFCMzAxOEFC
NDZEQUJFNUVDQ0FFMTE1QkRGNUZENzg2N0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC+xFVoDSPN3a6hpGmo96y4bfGWEnozJo03ZDrjnHK0HekbBKak
q4CvlOAXAFrP3z8/VppFgtgsLdBLHJM2ztRCvDJSFCQUw1B6m5BL5+AJCoGoT3ne
SuvEw36n1KqPrC7ndCHuqHRr6KfKU2xIiBR9298AF+Iq47SmqXUaIcnh/zLAfWut
pAiH668NCgdAoQfk/GRV5u0zXFbl5IsIbrJt/Mp8kjM6D4yK5Nc3M/9TU3VO36TS
6vIQwctXPRUKTiGMY6N+YrFaSInI8ghxtIiS04M5QefuagYg370FRWFPu3hKCmHE
8+6Bx8AdCDn4m/ntHjU7RpOoJzIEqODymrcNAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQU4CtvqzAYq0bavl7MrhFb31/Xhn8wHwYDVR0jBBgwFoAUb96jRwcVIpDB0mBv
+/xpuSfUClswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ1lDQ0FU
Vi9iOTZqUndjVklwREIwbUJ2LV94cHVTZlVDbHMuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL2I5NmpSd2NWSXBEQjBtQnYtX3hwdVNmVUNscy5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0NZQ0NBVFYvNEN0dnF6QVlxMGJhdmw3
TXJoRmIzMV9YaG44LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
BD088DANBgkqhkiG9w0BAQsFAAOCAQEAMAz+OOZfl9i0qiRA/q8HKDqReqyauuHF
oQeGDwGJOnDHzhh+rwrzNLnSP9HL9cLXCrCPmF4MVZohJQB69xE32eaXZj5ZzmJI
r8gEgws9oG4WwMZ9zfIyK8Qa3A34EiiQAdSSIFqUpuBFJTY6brvZUiEwRf+PQrG7
4oG7JNmoFBFjuxhTHHLTanfBb0Uj70sdwYdgnxhrgHZJn7yX0zMWYHfGaXL7aKho
Kex0A6IygSAkwVIN1z8/xWZ+hvczEUxwRVcFK9JVLk/rkOhgWMDRV52aEYs0A00B
yycyoPEQQi4lV2doCrhDNlMHqfh7azhTwKGyIc+X01kwiFpX8hGsPw==
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:18 2024 by rpki-client on console-fra.rpki-client.org