Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DEVISEHOST/qy_VHaJFnruH39eLeKejmQeoJXM.roa
File:                     qy_VHaJFnruH39eLeKejmQeoJXM.roa (raw, json)
Hash identifier:          EREP+wwYQ2Vu9VH//zY10KU9pq7xfEQEK/kzcKpSUPQ=
Subject key identifier:   AB:2F:D5:1D:A2:45:9E:BB:87:DF:D7:8B:78:A7:A3:99:07:A8:25:73
Certificate issuer:       /CN=DB3428CCC4C12CF4F15BAF82EABB4C6A06304642
Certificate serial:       110F
Authority key identifier: DB:34:28:CC:C4:C1:2C:F4:F1:5B:AF:82:EA:BB:4C:6A:06:30:46:42
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/2zQozMTBLPTxW6-C6rtMagYwRkI.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/DEVISEHOST/qy_VHaJFnruH39eLeKejmQeoJXM.roa
Signing time:             Mon 14 Nov 2022 23:47:46 +0000
ROA not before:           Mon 14 Nov 2022 23:47:46 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     131149
IP address blocks:        2403:a8c0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4367 (0x110f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB3428CCC4C12CF4F15BAF82EABB4C6A06304642
        Validity
            Not Before: Nov 14 23:47:46 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=AB2FD51DA2459EBB87DFD78B78A7A39907A82573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:17:5f:5a:1a:9a:56:db:da:6c:25:09:b7:84:
                    df:c5:fe:bb:31:97:26:f1:f2:d2:42:49:94:b5:e5:
                    2d:b8:9b:24:3e:aa:91:60:ba:cf:d1:45:76:8c:f7:
                    a9:8b:1d:ba:01:a5:4e:a8:f8:df:96:2e:3d:a7:31:
                    53:24:50:e4:06:75:21:eb:2a:80:1e:38:b6:7f:0b:
                    39:2d:10:c8:e0:36:bd:bb:da:4c:0f:3c:5f:04:5e:
                    34:aa:65:d3:52:3e:0b:2d:03:7d:46:e1:43:d0:93:
                    c0:e3:6e:80:4b:eb:97:69:46:5e:a0:75:0a:6d:77:
                    39:9a:83:b8:d7:63:f5:cb:a2:3f:0f:8e:22:32:b9:
                    35:35:b9:9a:d1:5a:8e:f1:a0:c8:8c:5b:d3:d3:5a:
                    a8:81:03:46:3c:31:f3:e6:22:d9:e0:d7:b2:4a:ae:
                    e7:ff:e6:ca:13:91:fb:c8:67:1e:b4:59:83:1f:b4:
                    9f:7d:33:eb:98:17:39:e6:f8:35:bc:6e:4e:25:6a:
                    3b:c8:91:e5:8f:dc:31:9b:79:1e:f9:af:1f:44:0d:
                    93:63:00:35:a8:4c:42:85:95:5e:c8:e6:21:bc:ad:
                    d0:dc:67:2a:f4:45:ae:7c:4c:2d:ca:e1:d9:58:88:
                    dc:3b:bf:95:a9:b5:0f:e5:51:cb:64:4f:b1:06:38:
                    85:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:2F:D5:1D:A2:45:9E:BB:87:DF:D7:8B:78:A7:A3:99:07:A8:25:73
            X509v3 Authority Key Identifier:
                keyid:DB:34:28:CC:C4:C1:2C:F4:F1:5B:AF:82:EA:BB:4C:6A:06:30:46:42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DEVISEHOST/2zQozMTBLPTxW6-C6rtMagYwRkI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2zQozMTBLPTxW6-C6rtMagYwRkI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DEVISEHOST/qy_VHaJFnruH39eLeKejmQeoJXM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:a8c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0f:c7:b9:4b:2b:9b:80:38:98:6a:37:bc:04:67:b6:bb:4e:61:
         12:0b:cf:86:40:10:38:65:ba:6e:47:8c:06:e6:9f:b5:36:fe:
         7a:b1:1a:76:a5:87:eb:06:8f:cc:fe:f8:a2:12:61:2e:88:92:
         b9:d7:a6:46:3f:77:91:61:fd:65:b3:9a:81:f6:59:3b:8d:a6:
         e8:eb:7a:b6:a1:1a:85:24:8e:87:d9:09:13:68:39:5d:f9:3a:
         05:77:4c:ad:88:e2:b8:0c:34:16:89:17:2c:44:eb:a0:9f:b3:
         4b:10:e9:f9:40:71:8d:bf:5a:00:d3:73:82:0e:6a:91:4c:0f:
         94:f6:7b:4c:69:87:fa:b5:89:2d:8b:7c:90:fd:91:fb:7c:14:
         26:d7:b6:7d:5d:2c:12:35:86:b8:c7:b4:b4:f2:d7:8c:97:c2:
         ea:bd:a0:75:9e:a6:cb:fd:90:f2:d8:64:39:46:1b:d8:45:f7:
         df:14:27:e9:a6:85:cb:9e:df:a3:86:d1:90:26:99:ca:9a:40:
         41:98:77:42:a2:fa:17:0b:53:5d:47:ea:73:47:2a:33:62:d0:
         6a:b7:df:1d:a7:14:3c:c0:eb:03:e8:1f:a1:05:0e:c8:96:f3:
         64:78:19:c5:87:c7:1f:66:a1:43:22:aa:07:a1:b2:7a:78:f1:
         f6:35:1d:3c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:34 2024 by rpki-client on console-fra.rpki-client.org