Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DEVISEHOST/Ec1i7Faln5_ahAQY1KGlBGZbCjU.roa
File:                     Ec1i7Faln5_ahAQY1KGlBGZbCjU.roa (raw, json)
Hash identifier:          J/g0Wip2SUE+vN+/exClRxEADHzucoZlEUjOtszYzQU=
Subject key identifier:   11:CD:62:EC:56:A5:9F:9F:DA:84:04:18:D4:A1:A5:04:66:5B:0A:35
Certificate issuer:       /CN=DB3428CCC4C12CF4F15BAF82EABB4C6A06304642
Certificate serial:       1110
Authority key identifier: DB:34:28:CC:C4:C1:2C:F4:F1:5B:AF:82:EA:BB:4C:6A:06:30:46:42
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/2zQozMTBLPTxW6-C6rtMagYwRkI.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/DEVISEHOST/Ec1i7Faln5_ahAQY1KGlBGZbCjU.roa
Signing time:             Mon 14 Nov 2022 23:47:46 +0000
ROA not before:           Mon 14 Nov 2022 23:47:46 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     131149
IP address blocks:        103.123.196.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4368 (0x1110)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB3428CCC4C12CF4F15BAF82EABB4C6A06304642
        Validity
            Not Before: Nov 14 23:47:46 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=11CD62EC56A59F9FDA840418D4A1A504665B0A35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:83:97:bb:4d:92:01:62:8d:41:2b:a0:33:94:
                    2a:a7:25:cc:6f:10:f7:c6:fd:07:61:bc:f6:33:f6:
                    c5:05:f6:68:4d:d4:6c:f0:df:ce:a6:f5:ee:c6:6a:
                    76:e2:fa:e9:fb:9a:f9:b4:25:70:f2:3a:d3:e0:95:
                    33:ef:54:83:cd:56:c8:c4:a6:c7:16:17:c3:10:f1:
                    0d:68:75:e3:8a:0a:57:63:d9:d3:df:f9:72:29:66:
                    83:e8:ce:1d:a8:5e:b5:14:7f:40:3d:08:62:c3:65:
                    e4:36:4c:9d:dc:f5:6c:91:17:42:0b:c4:e7:1e:24:
                    fa:13:ec:f8:d5:50:5d:69:a9:04:28:a2:9a:6f:25:
                    37:d9:c0:83:e1:2e:6a:da:fc:89:62:c1:a3:67:a5:
                    20:cd:3d:a8:85:fb:2a:7b:4d:6f:a2:c7:09:47:78:
                    4f:b8:5d:3f:ef:e7:58:85:fe:c7:3b:d0:aa:ed:48:
                    48:96:57:4d:6e:14:34:8b:29:f4:f5:9a:e1:fa:91:
                    58:29:1f:bc:c2:39:f9:ca:16:78:a6:ad:7b:db:e7:
                    41:06:02:1d:12:1b:b7:58:dd:53:a6:49:52:e0:a9:
                    e1:b2:5b:4f:5d:7a:e4:ae:83:8d:c5:3c:1b:d9:b5:
                    ef:15:32:53:69:a1:15:d1:a4:98:27:6b:d2:28:d3:
                    f9:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:CD:62:EC:56:A5:9F:9F:DA:84:04:18:D4:A1:A5:04:66:5B:0A:35
            X509v3 Authority Key Identifier:
                keyid:DB:34:28:CC:C4:C1:2C:F4:F1:5B:AF:82:EA:BB:4C:6A:06:30:46:42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DEVISEHOST/2zQozMTBLPTxW6-C6rtMagYwRkI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2zQozMTBLPTxW6-C6rtMagYwRkI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DEVISEHOST/Ec1i7Faln5_ahAQY1KGlBGZbCjU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.123.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b1:e8:58:3d:c9:51:9a:22:db:43:ce:8e:5c:8b:99:81:6c:58:
         82:b1:00:4b:a1:04:e0:88:5a:e0:da:14:3a:c8:cb:09:e6:47:
         02:bf:4c:04:ae:e6:a7:a9:54:3a:55:67:71:26:dc:5d:5c:24:
         7c:bd:f9:bc:68:54:32:94:66:b7:94:f0:ad:51:d4:c0:de:7a:
         83:18:30:c5:28:2b:94:d8:b9:83:09:34:87:a8:5b:cf:e8:ba:
         99:76:5e:6f:f3:cc:80:6f:0a:94:48:71:fa:40:ae:51:d3:9b:
         70:5e:f7:9e:16:a4:8d:2b:1f:84:10:a9:55:00:1f:e7:e0:73:
         98:ff:2a:69:12:40:c1:99:fb:6d:15:24:d6:1d:e9:f7:7b:1e:
         2e:fa:d2:6d:60:66:44:3c:13:67:8f:d6:38:4c:ea:41:91:f7:
         65:cc:8b:d8:0e:2d:1c:7c:a8:ba:83:67:37:40:4c:f3:d1:a3:
         6f:b4:41:bf:ef:60:03:da:01:47:b4:21:52:34:e7:1a:b6:f8:
         93:73:37:eb:e5:b0:8f:1e:13:0d:37:b5:d3:2a:ac:83:8a:55:
         46:92:aa:f5:b6:44:89:74:cd:ff:79:5e:1f:fb:6c:1a:cd:e6:
         3c:ed:59:b6:a8:d6:14:52:5e:cd:6b:75:27:8c:3f:0a:18:0e:
         db:b9:50:6b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:34 2024 by rpki-client on console-fra.rpki-client.org