Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DCC1223342/VvUzxsK0Qs6UcVZWrahUV2QJ7Zs.roa
File:                     VvUzxsK0Qs6UcVZWrahUV2QJ7Zs.roa (raw, json)
Hash identifier:          kvcxRlJTB858skj7hfRSS8oOblyxBYqjXrDf0fwYid8=
Subject key identifier:   56:F5:33:C6:C2:B4:42:CE:94:71:56:56:AD:A8:54:57:64:09:ED:9B
Certificate issuer:       /CN=F72B8D549DE8BBC6DE02456C670D1B1A05AFE80E
Certificate serial:       0180
Authority key identifier: F7:2B:8D:54:9D:E8:BB:C6:DE:02:45:6C:67:0D:1B:1A:05:AF:E8:0E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/9yuNVJ3ou8beAkVsZw0bGgWv6A4.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/DCC1223342/VvUzxsK0Qs6UcVZWrahUV2QJ7Zs.roa
Signing time:             Fri 01 Sep 2023 08:34:31 +0000
ROA not before:           Fri 01 Sep 2023 08:34:31 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     63893
IP address blocks:        2400:50e0::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 384 (0x180)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F72B8D549DE8BBC6DE02456C670D1B1A05AFE80E
        Validity
            Not Before: Sep  1 08:34:31 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=56F533C6C2B442CE94715656ADA854576409ED9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f6:8d:28:19:c4:68:d6:50:63:7e:a4:0c:ec:
                    5f:46:95:02:05:7e:1e:d4:a7:83:44:9a:a0:1b:f6:
                    98:b2:4b:4b:0e:95:bd:cd:dd:3f:f4:39:f7:35:78:
                    5d:9e:cd:31:a1:73:54:f7:97:2b:06:a4:e2:87:19:
                    55:70:9f:10:41:36:97:c4:7c:6a:a8:45:10:5a:17:
                    0a:9e:36:c5:5f:b7:1f:e4:cd:28:32:93:b4:c8:31:
                    de:89:2b:d9:8e:56:fd:d8:e2:1c:0f:52:86:fb:9e:
                    85:61:58:4a:97:7c:d0:da:3b:3a:96:16:28:f8:99:
                    76:8b:e7:74:38:ed:eb:fb:b2:14:88:22:3b:d5:2d:
                    d7:f2:c3:2d:da:36:46:a3:60:d1:ae:9e:07:d9:4c:
                    a8:1e:26:7e:20:8c:08:9b:77:bc:29:be:44:2e:37:
                    ca:d6:84:78:ef:60:b4:96:d0:8f:f1:e0:0a:13:49:
                    ae:98:10:49:f5:74:dc:e8:6f:06:cf:06:42:ab:bd:
                    63:c2:9a:f6:9d:2b:76:3f:7d:6c:74:91:db:1d:0b:
                    8b:26:61:4a:90:e3:f5:69:6b:93:cc:13:d6:d5:63:
                    dc:d1:ba:ff:f1:f8:ab:b3:a5:0b:2e:19:86:fd:e9:
                    73:3b:6a:19:7f:18:2e:52:6f:62:9e:a0:6b:33:e7:
                    71:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:F5:33:C6:C2:B4:42:CE:94:71:56:56:AD:A8:54:57:64:09:ED:9B
            X509v3 Authority Key Identifier:
                keyid:F7:2B:8D:54:9D:E8:BB:C6:DE:02:45:6C:67:0D:1B:1A:05:AF:E8:0E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DCC1223342/9yuNVJ3ou8beAkVsZw0bGgWv6A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/9yuNVJ3ou8beAkVsZw0bGgWv6A4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DCC1223342/VvUzxsK0Qs6UcVZWrahUV2QJ7Zs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:50e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         02:25:7e:34:9c:d1:27:b0:18:49:f4:ca:f0:78:5a:2a:75:52:
         6f:05:e1:fc:8a:e3:64:f5:88:a4:a3:58:f7:7e:09:a4:17:27:
         8f:07:77:7d:42:d4:99:ff:5a:8d:a0:91:61:69:7b:28:65:8d:
         16:53:f6:f2:2b:7e:b1:a2:79:a3:73:51:e1:85:81:86:da:2f:
         10:90:08:2e:76:7b:c7:0c:a9:a4:ec:cf:0e:13:51:4c:14:0b:
         1d:cd:9c:3b:77:7d:dd:d7:ca:80:0d:fd:fa:60:38:f7:6c:cf:
         9e:89:6a:9e:66:c2:fe:8f:45:f1:70:4a:ff:f2:c0:54:3d:d6:
         2c:ee:bb:61:ea:2e:9a:aa:a0:64:95:35:e9:96:c0:0e:34:e0:
         73:8c:03:29:b2:d6:44:59:64:90:c0:e4:35:a3:67:75:8e:76:
         1a:ef:79:2e:65:a2:38:74:97:8d:f6:af:21:20:5b:00:7e:16:
         94:6a:dd:a3:e7:d0:f8:26:2f:ee:d6:82:4d:89:0c:cf:59:bb:
         f3:2b:2d:a2:c6:ef:8d:8a:df:6f:77:2d:b2:43:ed:16:26:38:
         80:dc:8f:ad:ac:3e:ec:e0:10:c2:25:83:39:96:8a:19:57:9b:
         ad:08:85:1d:d8:eb:58:c6:8d:ee:e3:19:b6:28:59:6e:e5:7e:
         1c:3c:e6:c8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:11 2024 by rpki-client on console-ams.rpki-client.org