Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DEVISEHOST/M7VGC6noiiadYxmfZOYNG9gyDM4.roa
File:                     M7VGC6noiiadYxmfZOYNG9gyDM4.roa (raw, json)
Hash identifier:          xRiy8WdsSiiKLVXSKDC5r0lhmLrRuX1lzVnq2Z6fMrg=
Subject key identifier:   33:B5:46:0B:A9:E8:8A:26:9D:63:19:9F:64:E6:0D:1B:D8:32:0C:CE
Certificate issuer:       /CN=DB3428CCC4C12CF4F15BAF82EABB4C6A06304642
Certificate serial:       0E17
Authority key identifier: DB:34:28:CC:C4:C1:2C:F4:F1:5B:AF:82:EA:BB:4C:6A:06:30:46:42
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/2zQozMTBLPTxW6-C6rtMagYwRkI.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/DEVISEHOST/M7VGC6noiiadYxmfZOYNG9gyDM4.roa
Signing time:             Tue 29 Sep 2020 10:02:56 +0000
ROA not before:           Tue 29 Sep 2020 10:02:56 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     131149
IP address blocks:        2403:a8c0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3607 (0xe17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB3428CCC4C12CF4F15BAF82EABB4C6A06304642
        Validity
            Not Before: Sep 29 10:02:56 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=33B5460BA9E88A269D63199F64E60D1BD8320CCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:78:11:d3:dd:48:aa:e7:5c:c5:fd:e1:18:6e:
                    f9:44:7d:c5:5c:c1:d6:7f:13:71:96:bb:d6:cb:3a:
                    fa:0d:37:49:5b:27:a0:8b:85:c8:f6:6c:30:ad:3e:
                    cf:df:8f:26:e0:b4:8e:aa:97:67:d7:23:bb:a3:ef:
                    b1:54:4b:ff:68:fc:25:2e:22:11:38:2e:43:10:ca:
                    8b:e9:66:6c:98:0c:92:06:37:f7:a3:d8:ea:68:ed:
                    23:10:5a:36:82:8a:5e:32:93:97:ad:dd:f9:9c:a5:
                    9e:35:2a:2b:ac:7c:63:26:5a:48:6a:dc:7b:71:23:
                    d0:0d:71:53:3b:6c:26:ba:86:4f:01:04:82:6c:96:
                    2b:8f:61:cf:23:6d:78:67:98:5a:f5:43:9f:59:2a:
                    63:47:02:36:55:92:4e:a3:28:65:cc:f9:32:da:de:
                    b5:04:89:be:11:8b:db:92:00:85:f6:b5:3b:10:64:
                    f1:9d:23:31:92:34:cd:a6:a3:58:56:66:d6:50:5d:
                    9f:1e:8c:14:99:6b:33:6a:c8:89:9b:f1:c0:3c:eb:
                    0d:46:f0:bd:36:c5:f9:b7:c9:42:ca:03:bf:c5:9c:
                    2e:53:3e:ea:b9:f8:d7:f3:ad:8b:9a:75:37:90:b7:
                    cc:fd:1a:b6:76:60:83:f5:71:62:22:96:c1:ac:84:
                    38:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:B5:46:0B:A9:E8:8A:26:9D:63:19:9F:64:E6:0D:1B:D8:32:0C:CE
            X509v3 Authority Key Identifier:
                keyid:DB:34:28:CC:C4:C1:2C:F4:F1:5B:AF:82:EA:BB:4C:6A:06:30:46:42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DEVISEHOST/2zQozMTBLPTxW6-C6rtMagYwRkI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2zQozMTBLPTxW6-C6rtMagYwRkI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DEVISEHOST/M7VGC6noiiadYxmfZOYNG9gyDM4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:a8c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4e:6b:53:a0:37:2d:c0:d9:25:21:0b:b3:ee:fa:54:3b:e3:3c:
         a9:3e:13:63:5d:bb:b3:4c:3d:e2:58:20:c4:a8:34:9f:fa:ae:
         07:fb:21:50:b2:d8:27:ed:20:54:2e:c4:92:ab:63:82:f6:c4:
         89:5a:0d:0a:cf:9a:f3:c8:b3:aa:74:d1:7e:1b:cf:66:e2:bd:
         5e:c7:10:0e:e5:ae:a0:c2:fa:99:56:b5:75:18:3f:0f:9f:da:
         dd:d2:8c:28:14:0e:96:12:d9:5b:11:b8:2b:95:e3:fa:0f:ac:
         cf:64:b9:99:59:99:90:aa:4e:08:e5:16:be:ea:19:4f:ac:fc:
         ee:29:c7:b2:8b:bc:5c:73:90:e0:f9:8a:f0:a0:0d:11:97:e1:
         de:97:39:4c:35:7b:69:cb:2c:34:99:fe:f5:3c:9c:62:38:18:
         03:1a:64:9e:0e:64:8a:ac:fa:83:66:b4:9f:e0:05:4d:2a:b5:
         47:ce:b1:b8:c6:a2:3b:0e:1e:c6:8a:2b:02:27:49:58:66:3c:
         a0:82:15:4c:1a:bb:5e:39:15:5e:88:42:10:75:55:58:53:28:
         6b:d0:30:11:2f:42:c9:35:6d:ae:7f:5c:f0:09:77:cc:ca:64:
         b0:69:58:4d:67:f8:28:f2:8d:51:17:8b:14:78:98:3d:0d:4c:
         51:87:2f:0e
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgICDhcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREIz
NDI4Q0NDNEMxMkNGNEYxNUJBRjgyRUFCQjRDNkEwNjMwNDY0MjAeFw0yMDA5Mjkx
MDAyNTZaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDMzQjU0NjBCQTlFODhB
MjY5RDYzMTk5RjY0RTYwRDFCRDgzMjBDQ0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDPeBHT3Uiq51zF/eEYbvlEfcVcwdZ/E3GWu9bLOvoNN0lbJ6CL
hcj2bDCtPs/fjybgtI6ql2fXI7uj77FUS/9o/CUuIhE4LkMQyovpZmyYDJIGN/ej
2Opo7SMQWjaCil4yk5et3fmcpZ41KiusfGMmWkhq3HtxI9ANcVM7bCa6hk8BBIJs
liuPYc8jbXhnmFr1Q59ZKmNHAjZVkk6jKGXM+TLa3rUEib4Ri9uSAIX2tTsQZPGd
IzGSNM2mo1hWZtZQXZ8ejBSZazNqyImb8cA86w1G8L02xfm3yULKA7/FnC5TPuq5
+NfzrYuadTeQt8z9GrZ2YIP1cWIilsGshDhNAgMBAAGjggH3MIIB8zAdBgNVHQ4E
FgQUM7VGC6noiiadYxmfZOYNG9gyDM4wHwYDVR0jBBgwFoAU2zQozMTBLPTxW6+C
6rtMagYwRkIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg
U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvREVWSVNF
SE9TVC8yelFvek1UQkxQVHhXNi1DNnJ0TWFnWXdSa0kuY3JsMGAGCCsGAQUFBwEB
BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U
V05JQ0NBLzJ6UW96TVRCTFBUeFc2LUM2cnRNYWdZd1JrSS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y
cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL0RFVklTRUhPU1QvTTdWR0M2bm9p
aWFkWXhtZlpPWU5HOWd5RE00LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw
LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQC
AAIwBwMFACQDqMAwDQYJKoZIhvcNAQELBQADggEBAE5rU6A3LcDZJSELs+76VDvj
PKk+E2Ndu7NMPeJYIMSoNJ/6rgf7IVCy2CftIFQuxJKrY4L2xIlaDQrPmvPIs6p0
0X4bz2bivV7HEA7lrqDC+plWtXUYPw+f2t3SjCgUDpYS2VsRuCuV4/oPrM9kuZlZ
mZCqTgjlFr7qGU+s/O4px7KLvFxzkOD5ivCgDRGX4d6XOUw1e2nLLDSZ/vU8nGI4
GAMaZJ4OZIqs+oNmtJ/gBU0qtUfOsbjGojsOHsaKKwInSVhmPKCCFUwau145FV6I
QhB1VVhTKGvQMBEvQsk1ba5/XPAJd8zKZLBpWE1n+CjyjVEXixR4mD0NTFGHLw4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:34 2024 by rpki-client on console-fra.rpki-client.org