Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DEVISEHOST/c9XbAgVKHqgZxED7siWAiTPtaag.roa
File:                     c9XbAgVKHqgZxED7siWAiTPtaag.roa (raw, json)
Hash identifier:          /qI1IUwKy6sJmAOzOAyVYTd5Zt/Xi54UDa9AvbeO8O0=
Subject key identifier:   73:D5:DB:02:05:4A:1E:A8:19:C4:40:FB:B2:25:80:89:33:ED:69:A8
Certificate issuer:       /CN=DB3428CCC4C12CF4F15BAF82EABB4C6A06304642
Certificate serial:       10E1
Authority key identifier: DB:34:28:CC:C4:C1:2C:F4:F1:5B:AF:82:EA:BB:4C:6A:06:30:46:42
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/2zQozMTBLPTxW6-C6rtMagYwRkI.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/DEVISEHOST/c9XbAgVKHqgZxED7siWAiTPtaag.roa
Signing time:             Thu 15 Sep 2022 02:37:03 +0000
ROA not before:           Thu 15 Sep 2022 02:37:03 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     131149
IP address blocks:        103.123.196.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4321 (0x10e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB3428CCC4C12CF4F15BAF82EABB4C6A06304642
        Validity
            Not Before: Sep 15 02:37:03 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=73D5DB02054A1EA819C440FBB225808933ED69A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:84:5a:96:a4:da:90:ef:c9:77:a9:bd:8f:40:
                    18:f4:dd:09:5b:26:48:01:1e:9e:37:54:36:3c:1c:
                    67:9a:4d:c1:03:bc:8a:e1:3f:79:4c:0b:d0:95:12:
                    d3:4d:2d:9e:88:f8:2a:99:af:89:73:d2:19:7b:b3:
                    6c:b3:1d:aa:d9:6d:c4:c1:ba:fd:98:76:f3:89:d5:
                    f4:10:00:c0:f5:66:7c:05:4d:43:58:07:58:b6:12:
                    38:74:78:3b:bd:6e:b0:27:07:ff:22:52:98:32:a3:
                    aa:17:26:ba:3f:75:d4:e3:87:cc:f1:88:32:2e:60:
                    bf:4b:61:25:41:84:ee:c0:d5:69:c1:87:e1:cf:c3:
                    8c:56:e0:4e:63:63:d6:fe:8a:ec:22:61:23:65:22:
                    8c:13:f8:fa:4e:db:d7:b7:c1:58:7a:d5:02:d3:43:
                    9f:06:44:19:f2:5a:d6:7b:ad:c1:e6:02:e3:eb:9f:
                    ac:83:65:fb:93:43:3f:0d:58:7d:71:33:94:b5:eb:
                    1e:92:99:09:aa:a8:e1:da:15:73:75:d4:26:df:d3:
                    fd:60:38:0a:5b:8d:22:91:35:60:77:cc:e3:28:98:
                    d8:7c:a4:02:d2:e4:7a:85:fa:4c:fa:00:9c:9f:f3:
                    ba:94:18:d0:9e:eb:08:60:fe:0f:93:24:db:bd:76:
                    e1:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:D5:DB:02:05:4A:1E:A8:19:C4:40:FB:B2:25:80:89:33:ED:69:A8
            X509v3 Authority Key Identifier:
                keyid:DB:34:28:CC:C4:C1:2C:F4:F1:5B:AF:82:EA:BB:4C:6A:06:30:46:42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DEVISEHOST/2zQozMTBLPTxW6-C6rtMagYwRkI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2zQozMTBLPTxW6-C6rtMagYwRkI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DEVISEHOST/c9XbAgVKHqgZxED7siWAiTPtaag.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.123.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:68:62:c6:65:9c:cd:7a:53:d5:07:99:36:7f:da:2c:ab:36:
         eb:01:86:2e:0c:7d:29:b1:a3:14:d2:ef:0e:eb:27:b9:32:7b:
         e1:4e:cb:3c:66:d1:f8:aa:18:38:c8:8d:ce:9f:06:21:39:a4:
         43:0a:2a:af:6e:de:2b:72:76:ab:5a:96:96:c9:bf:a1:1c:0e:
         d3:46:97:fc:1b:91:4d:d4:aa:dc:ae:ec:7f:ab:e7:1b:aa:de:
         bf:fc:ea:8e:8f:36:d0:aa:dd:41:9a:46:2a:cd:31:d5:9b:80:
         b7:4b:d3:9e:ef:67:dc:ef:95:17:92:40:6b:f0:50:4b:f4:0f:
         84:f9:79:b4:f3:d7:ff:ff:8a:dc:81:a9:22:96:de:b1:8e:49:
         9a:79:fb:a5:33:33:1d:55:69:bf:48:cf:7f:9d:3c:82:8f:95:
         f7:5a:7a:a4:8c:f9:27:93:90:46:b4:9a:cf:6c:d2:fb:e5:e4:
         a0:4a:63:d9:db:07:01:c0:44:c2:db:8b:9e:d9:66:2a:6b:28:
         3b:99:98:b6:fa:b7:cf:2d:17:41:74:02:09:72:1d:a0:d8:9b:
         3f:d5:a4:36:be:cb:f3:05:27:75:fe:9d:3c:38:b7:94:c7:7d:
         16:b5:ee:e6:4d:67:0e:a7:dd:f6:10:67:0c:c9:dd:23:b7:4b:
         1a:4a:b4:55
-----BEGIN CERTIFICATE-----
MIIE2jCCA8KgAwIBAgICEOEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREIz
NDI4Q0NDNEMxMkNGNEYxNUJBRjgyRUFCQjRDNkEwNjMwNDY0MjAeFw0yMjA5MTUw
MjM3MDNaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDczRDVEQjAyMDU0QTFF
QTgxOUM0NDBGQkIyMjU4MDg5MzNFRDY5QTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCuhFqWpNqQ78l3qb2PQBj03QlbJkgBHp43VDY8HGeaTcEDvIrh
P3lMC9CVEtNNLZ6I+CqZr4lz0hl7s2yzHarZbcTBuv2YdvOJ1fQQAMD1ZnwFTUNY
B1i2Ejh0eDu9brAnB/8iUpgyo6oXJro/ddTjh8zxiDIuYL9LYSVBhO7A1WnBh+HP
w4xW4E5jY9b+iuwiYSNlIowT+PpO29e3wVh61QLTQ58GRBnyWtZ7rcHmAuPrn6yD
ZfuTQz8NWH1xM5S16x6SmQmqqOHaFXN11Cbf0/1gOApbjSKRNWB3zOMomNh8pALS
5HqF+kz6AJyf87qUGNCe6whg/g+TJNu9duEJAgMBAAGjggH2MIIB8jAdBgNVHQ4E
FgQUc9XbAgVKHqgZxED7siWAiTPtaagwHwYDVR0jBBgwFoAU2zQozMTBLPTxW6+C
6rtMagYwRkIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg
U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvREVWSVNF
SE9TVC8yelFvek1UQkxQVHhXNi1DNnJ0TWFnWXdSa0kuY3JsMGAGCCsGAQUFBwEB
BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U
V05JQ0NBLzJ6UW96TVRCTFBUeFc2LUM2cnRNYWdZd1JrSS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y
cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL0RFVklTRUhPU1QvYzlYYkFnVktI
cWdaeEVEN3NpV0FpVFB0YWFnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw
LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAmd7xDANBgkqhkiG9w0BAQsFAAOCAQEAEGhixmWczXpT1QeZNn/aLKs2
6wGGLgx9KbGjFNLvDusnuTJ74U7LPGbR+KoYOMiNzp8GITmkQwoqr27eK3J2q1qW
lsm/oRwO00aX/BuRTdSq3K7sf6vnG6rev/zqjo820KrdQZpGKs0x1ZuAt0vTnu9n
3O+VF5JAa/BQS/QPhPl5tPPX//+K3IGpIpbesY5Jmnn7pTMzHVVpv0jPf508go+V
91p6pIz5J5OQRrSaz2zS++XkoEpj2dsHAcBEwtuLntlmKmsoO5mYtvq3zy0XQXQC
CXIdoNibP9WkNr7L8wUndf6dPDi3lMd9FrXu5k1nDqfd9hBnDMndI7dLGkq0VQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:05 2024 by rpki-client on console-ams.rpki-client.org