Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DEVISEHOST/D4Lr7XAgGuR50YjI3PMH31NP-z0.roa
File:                     D4Lr7XAgGuR50YjI3PMH31NP-z0.roa (raw, json)
Hash identifier:          9/TEItj8NmhPzId1gN5sGxbImQyYsbst/d7Qk2yyBG0=
Subject key identifier:   0F:82:EB:ED:70:20:1A:E4:79:D1:88:C8:DC:F3:07:DF:53:4F:FB:3D
Certificate issuer:       /CN=DB3428CCC4C12CF4F15BAF82EABB4C6A06304642
Certificate serial:       0E16
Authority key identifier: DB:34:28:CC:C4:C1:2C:F4:F1:5B:AF:82:EA:BB:4C:6A:06:30:46:42
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/2zQozMTBLPTxW6-C6rtMagYwRkI.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/DEVISEHOST/D4Lr7XAgGuR50YjI3PMH31NP-z0.roa
Signing time:             Tue 29 Sep 2020 10:02:56 +0000
ROA not before:           Tue 29 Sep 2020 10:02:56 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     131149
IP address blocks:        103.123.196.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3606 (0xe16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB3428CCC4C12CF4F15BAF82EABB4C6A06304642
        Validity
            Not Before: Sep 29 10:02:56 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=0F82EBED70201AE479D188C8DCF307DF534FFB3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3e:41:b3:07:dd:a2:05:95:11:1d:10:d8:47:
                    af:1c:ce:b0:c9:24:e1:de:ad:ba:ea:37:42:f8:d6:
                    9f:65:36:40:05:17:ee:c0:71:bb:1c:2c:d0:04:d8:
                    b6:44:40:e6:6f:6f:88:a8:fb:67:4b:a0:00:93:f5:
                    43:b2:18:a2:76:48:b1:e1:56:af:3a:db:9e:0e:36:
                    16:33:e8:94:14:b0:57:87:87:80:4d:00:6e:50:cd:
                    2a:37:22:8d:26:97:06:4e:e5:16:e4:4d:81:63:24:
                    f9:6b:0c:f8:3f:05:7d:d9:81:0a:a9:b5:c7:31:da:
                    4c:59:a3:e6:52:5f:6a:b4:6c:0d:a1:22:a4:e8:5d:
                    ec:7d:87:e4:0c:7e:b2:17:93:09:04:fb:17:eb:54:
                    8c:bd:95:90:50:e9:a2:39:79:22:11:b7:bc:91:e7:
                    1a:0c:5e:64:88:ef:a1:b5:bd:53:4a:f6:2f:01:22:
                    1f:a6:f6:fd:a4:6a:b9:ee:60:e9:e0:d9:fb:ad:db:
                    0a:ef:35:38:dc:83:ed:78:ca:73:12:1f:d2:43:5c:
                    b3:89:75:29:ae:76:4e:3d:83:15:60:51:0f:43:5c:
                    3c:fd:52:04:f6:27:48:10:8f:70:44:7b:d1:32:19:
                    ff:23:cf:10:dc:8b:4d:c3:68:16:2f:b4:1f:84:0b:
                    79:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:82:EB:ED:70:20:1A:E4:79:D1:88:C8:DC:F3:07:DF:53:4F:FB:3D
            X509v3 Authority Key Identifier:
                keyid:DB:34:28:CC:C4:C1:2C:F4:F1:5B:AF:82:EA:BB:4C:6A:06:30:46:42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DEVISEHOST/2zQozMTBLPTxW6-C6rtMagYwRkI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2zQozMTBLPTxW6-C6rtMagYwRkI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DEVISEHOST/D4Lr7XAgGuR50YjI3PMH31NP-z0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.123.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:47:50:d6:22:bc:f4:79:7a:43:0c:86:a9:ee:a0:b7:a1:3c:
         f5:d1:87:21:e9:82:79:74:fb:f8:55:86:31:6d:6d:cf:f2:a3:
         01:db:f9:01:7c:1f:f8:72:24:57:d3:68:00:7a:ee:45:a1:4b:
         af:93:d1:bf:9f:a2:be:07:1d:0d:2d:9b:9d:62:c3:33:2b:7c:
         fa:64:46:7d:8f:d7:a0:e9:e5:ac:ae:d6:c3:69:58:78:f8:9f:
         27:3e:69:42:a6:84:fc:68:64:b1:80:62:4e:44:68:a4:dc:f6:
         e5:16:98:76:a5:f1:bf:14:b5:16:8c:50:06:73:77:29:17:80:
         75:2b:c7:7d:52:a3:2b:0c:db:45:78:35:2a:11:96:31:7f:d1:
         9f:2d:2d:34:e1:e1:84:bc:a0:90:d8:e8:c5:ad:af:da:62:2a:
         8e:19:4d:95:2a:7a:c9:48:30:8b:b2:40:d5:0b:4e:18:d7:9c:
         14:90:c1:87:fa:f8:78:07:de:63:98:46:0e:8c:11:f4:6b:28:
         e1:32:fe:29:87:5a:ee:e4:eb:8c:ad:71:72:4a:7b:04:5e:25:
         94:5c:5e:4d:2f:ac:15:bb:0d:3c:06:d2:0f:94:34:e4:4c:64:
         be:54:2a:85:a4:83:e4:bf:de:17:e5:dd:18:50:8a:1d:f9:88:
         a4:82:dc:49
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:34 2024 by rpki-client on console-fra.rpki-client.org