Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DEVISEHOST/-WOMVV4Og1SSSbi3kHBhs7YzQ1Q.roa
File:                     -WOMVV4Og1SSSbi3kHBhs7YzQ1Q.roa (raw, json)
Hash identifier:          l7CDIhXY0SrXz8uOY7aMs7IJAZIOWq2i6Nu8l9SSqMk=
Subject key identifier:   F9:63:8C:55:5E:0E:83:54:92:49:B8:B7:90:70:61:B3:B6:33:43:54
Certificate issuer:       /CN=DB3428CCC4C12CF4F15BAF82EABB4C6A06304642
Certificate serial:       10E1
Authority key identifier: DB:34:28:CC:C4:C1:2C:F4:F1:5B:AF:82:EA:BB:4C:6A:06:30:46:42
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/2zQozMTBLPTxW6-C6rtMagYwRkI.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/DEVISEHOST/-WOMVV4Og1SSSbi3kHBhs7YzQ1Q.roa
Signing time:             Thu 15 Sep 2022 02:37:03 +0000
ROA not before:           Thu 15 Sep 2022 02:37:03 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     131149
IP address blocks:        2403:a8c0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4321 (0x10e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB3428CCC4C12CF4F15BAF82EABB4C6A06304642
        Validity
            Not Before: Sep 15 02:37:03 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=F9638C555E0E83549249B8B7907061B3B6334354
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:db:1a:af:71:32:d6:e5:31:bf:0b:e2:da:b0:
                    60:0f:1a:b7:d0:86:81:74:a7:70:70:7a:e2:a8:20:
                    fb:3d:7a:c9:3c:9c:4b:ac:14:61:b2:64:3e:23:f9:
                    b9:c0:61:63:25:b1:ef:12:0c:f2:ef:33:a9:ee:52:
                    c0:e8:e5:ff:a2:b2:dc:17:1c:87:bd:37:79:57:e4:
                    5d:d4:b9:82:52:cd:b7:46:4c:3d:e5:ce:d8:c1:40:
                    46:e9:52:45:11:df:e8:40:a0:86:b3:79:9f:d6:7e:
                    5d:15:59:fc:77:40:0f:43:4a:ed:7e:f1:be:4d:ae:
                    73:7c:46:64:94:4e:b0:5e:31:cb:93:28:6a:7b:d8:
                    12:1b:db:89:29:91:33:21:b3:d8:df:62:56:d9:55:
                    b2:32:f5:e8:70:ce:da:79:e2:8c:97:2d:27:fe:fe:
                    74:81:9c:52:9c:05:b7:55:4e:82:b4:c9:63:6a:63:
                    c9:c8:ec:70:67:f9:d9:e6:e8:1f:dd:48:8e:63:7b:
                    13:f6:75:5f:a0:4b:df:00:e1:cb:36:40:1f:32:3e:
                    af:a8:7a:74:68:3f:93:fb:73:1e:95:e8:9b:d9:00:
                    a6:dc:a5:58:b6:52:ba:af:51:c8:52:b9:bd:90:31:
                    f1:a1:be:82:e2:2e:6e:b8:eb:e7:c9:9e:91:6f:3a:
                    05:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:63:8C:55:5E:0E:83:54:92:49:B8:B7:90:70:61:B3:B6:33:43:54
            X509v3 Authority Key Identifier:
                keyid:DB:34:28:CC:C4:C1:2C:F4:F1:5B:AF:82:EA:BB:4C:6A:06:30:46:42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DEVISEHOST/2zQozMTBLPTxW6-C6rtMagYwRkI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2zQozMTBLPTxW6-C6rtMagYwRkI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DEVISEHOST/-WOMVV4Og1SSSbi3kHBhs7YzQ1Q.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:a8c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:aa:dd:fa:2f:11:60:cc:61:66:65:9a:f7:4e:d4:75:88:3f:
         06:54:67:45:16:9a:c2:3b:88:f1:be:01:1b:c3:66:61:f3:7f:
         e7:9d:08:9f:d5:c4:b5:56:86:02:86:fe:cb:28:82:65:b2:77:
         c5:7f:61:ec:ba:5f:0f:59:9e:fb:43:58:7a:9a:f3:7e:c8:14:
         b4:8f:a9:9f:bc:42:c5:8d:77:f7:08:75:48:16:4e:40:31:b9:
         7e:71:02:32:43:a9:41:41:e0:66:5c:2f:c7:f6:fe:df:36:54:
         95:6d:39:4d:90:b5:95:0d:5b:20:d4:f6:05:ca:4e:80:37:07:
         32:6e:d8:b6:57:1c:b8:9b:9d:d8:8d:2e:1d:c7:42:3a:f2:9a:
         41:5c:c7:0c:e5:2e:42:d6:89:cd:6e:db:19:87:b0:9c:be:c5:
         79:cb:3e:c4:3b:d7:e5:71:ef:a0:82:e9:7c:25:48:4c:69:d9:
         ca:62:9f:c9:9f:32:fd:8f:92:f2:a7:7b:52:65:dd:f6:71:f0:
         10:7f:ee:b9:0b:be:e6:f2:01:01:6c:c6:f0:cd:32:8c:15:e3:
         9d:50:45:25:2a:ae:7a:a9:28:a8:2f:6f:67:23:b5:f7:8a:29:
         ca:61:0c:b7:1f:f6:4c:66:41:65:a8:40:e4:b8:d2:fd:80:ca:
         c9:50:85:72
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgICEOEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREIz
NDI4Q0NDNEMxMkNGNEYxNUJBRjgyRUFCQjRDNkEwNjMwNDY0MjAeFw0yMjA5MTUw
MjM3MDNaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEY5NjM4QzU1NUUwRTgz
NTQ5MjQ5QjhCNzkwNzA2MUIzQjYzMzQzNTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDf2xqvcTLW5TG/C+LasGAPGrfQhoF0p3BweuKoIPs9esk8nEus
FGGyZD4j+bnAYWMlse8SDPLvM6nuUsDo5f+istwXHIe9N3lX5F3UuYJSzbdGTD3l
ztjBQEbpUkUR3+hAoIazeZ/Wfl0VWfx3QA9DSu1+8b5NrnN8RmSUTrBeMcuTKGp7
2BIb24kpkTMhs9jfYlbZVbIy9ehwztp54oyXLSf+/nSBnFKcBbdVToK0yWNqY8nI
7HBn+dnm6B/dSI5jexP2dV+gS98A4cs2QB8yPq+oenRoP5P7cx6V6JvZAKbcpVi2
UrqvUchSub2QMfGhvoLiLm646+fJnpFvOgUhAgMBAAGjggH3MIIB8zAdBgNVHQ4E
FgQU+WOMVV4Og1SSSbi3kHBhs7YzQ1QwHwYDVR0jBBgwFoAU2zQozMTBLPTxW6+C
6rtMagYwRkIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg
U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvREVWSVNF
SE9TVC8yelFvek1UQkxQVHhXNi1DNnJ0TWFnWXdSa0kuY3JsMGAGCCsGAQUFBwEB
BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U
V05JQ0NBLzJ6UW96TVRCTFBUeFc2LUM2cnRNYWdZd1JrSS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y
cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL0RFVklTRUhPU1QvLVdPTVZWNE9n
MVNTU2JpM2tIQmhzN1l6UTFRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw
LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQC
AAIwBwMFACQDqMAwDQYJKoZIhvcNAQELBQADggEBAC2q3fovEWDMYWZlmvdO1HWI
PwZUZ0UWmsI7iPG+ARvDZmHzf+edCJ/VxLVWhgKG/ssogmWyd8V/Yey6Xw9ZnvtD
WHqa837IFLSPqZ+8QsWNd/cIdUgWTkAxuX5xAjJDqUFB4GZcL8f2/t82VJVtOU2Q
tZUNWyDU9gXKToA3BzJu2LZXHLibndiNLh3HQjrymkFcxwzlLkLWic1u2xmHsJy+
xXnLPsQ71+Vx76CC6XwlSExp2cpin8mfMv2PkvKne1Jl3fZx8BB/7rkLvubyAQFs
xvDNMowV451QRSUqrnqpKKgvb2cjtfeKKcphDLcf9kxmQWWoQOS40v2AyslQhXI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:05 2024 by rpki-client on console-ams.rpki-client.org