Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DEVISEHOST/v7vIaHYz4_vSyU7doQ96PxMDQCE.roa
File:                     v7vIaHYz4_vSyU7doQ96PxMDQCE.roa (raw, json)
Hash identifier:          sNwWOD4UmBzDKy8gtwtgTgibZ8AcYm/QW7St+CWyS6g=
Subject key identifier:   BF:BB:C8:68:76:33:E3:FB:D2:C9:4E:DD:A1:0F:7A:3F:13:03:40:21
Certificate issuer:       /CN=DB3428CCC4C12CF4F15BAF82EABB4C6A06304642
Certificate serial:       0F58
Authority key identifier: DB:34:28:CC:C4:C1:2C:F4:F1:5B:AF:82:EA:BB:4C:6A:06:30:46:42
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/2zQozMTBLPTxW6-C6rtMagYwRkI.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/DEVISEHOST/v7vIaHYz4_vSyU7doQ96PxMDQCE.roa
Signing time:             Sun 07 Feb 2021 06:17:02 +0000
ROA not before:           Sun 07 Feb 2021 06:17:02 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     131149
IP address blocks:        103.123.196.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3928 (0xf58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB3428CCC4C12CF4F15BAF82EABB4C6A06304642
        Validity
            Not Before: Feb  7 06:17:02 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=BFBBC8687633E3FBD2C94EDDA10F7A3F13034021
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ee:e2:44:1a:90:b7:40:03:d2:9a:11:b5:3d:
                    b4:fa:72:f1:53:0f:89:97:54:26:46:a6:2c:c5:7e:
                    88:58:b8:c2:97:d4:53:1d:68:44:35:7c:45:95:1b:
                    77:d5:61:cf:0f:40:ef:a8:9c:1d:25:09:3e:a0:94:
                    b8:64:32:11:4a:fd:28:ee:a4:88:52:b4:f1:02:f4:
                    56:3f:41:13:44:f4:1e:fa:03:7b:e6:49:bb:4d:cf:
                    fc:0c:6b:9c:e0:cc:01:72:d2:c4:23:e8:bd:34:75:
                    b8:ee:e9:b4:e9:c2:52:f4:b9:e4:c5:19:33:aa:2c:
                    b4:1c:fe:32:5a:d5:ca:8c:a8:14:bf:9d:a7:55:fc:
                    cd:e0:15:a7:82:01:ed:9b:dd:02:06:7a:92:6e:e1:
                    c3:ef:a0:7d:2b:c1:b9:5c:91:05:c3:02:8f:be:7a:
                    66:c4:13:72:84:81:f5:c8:83:7c:ec:fb:06:c4:da:
                    71:50:5f:c4:aa:44:06:fc:10:b0:21:10:0c:0d:34:
                    a5:41:28:bd:a7:d9:ac:68:b2:6b:57:19:41:8d:cc:
                    08:a4:b5:a3:3c:26:77:63:0b:7a:8a:23:82:94:b2:
                    7b:8b:53:58:d6:2c:96:d9:f5:f4:fb:a4:e3:1e:c0:
                    59:95:f5:10:57:44:39:c4:79:1a:80:35:a8:ee:b9:
                    de:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:BB:C8:68:76:33:E3:FB:D2:C9:4E:DD:A1:0F:7A:3F:13:03:40:21
            X509v3 Authority Key Identifier:
                keyid:DB:34:28:CC:C4:C1:2C:F4:F1:5B:AF:82:EA:BB:4C:6A:06:30:46:42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DEVISEHOST/2zQozMTBLPTxW6-C6rtMagYwRkI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2zQozMTBLPTxW6-C6rtMagYwRkI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DEVISEHOST/v7vIaHYz4_vSyU7doQ96PxMDQCE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.123.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:7c:77:b5:40:ae:d7:aa:50:36:c0:00:ed:4a:95:ef:18:f6:
         43:de:fe:1e:73:ad:84:28:b1:7c:cf:6a:f7:c3:46:27:80:f2:
         95:04:ba:15:f0:dd:40:91:16:0a:fe:ac:ee:18:62:bd:b2:b7:
         7e:34:83:35:e5:86:0e:56:a0:49:d6:82:8b:5e:a7:73:72:3d:
         55:dd:fc:b3:b0:c2:ee:2a:04:cc:bc:7b:a9:d4:e8:5e:7d:d6:
         8f:0b:af:99:ce:08:16:20:9b:40:e5:90:b3:ba:42:49:95:f2:
         69:a7:a2:4b:78:e8:6b:6c:0c:ad:92:d3:2a:43:ef:4e:30:d8:
         34:db:ef:1c:a3:0b:a5:85:60:e6:8d:2b:11:ed:b6:3f:2a:d3:
         01:0f:a3:46:cf:71:15:b4:3e:64:a5:b5:01:b0:ae:34:cf:17:
         d8:b0:4d:14:6a:9a:4f:cb:13:d4:a1:0c:0f:28:2b:56:c0:e5:
         c9:3c:d6:89:3c:b2:24:3e:98:be:d1:c5:41:a7:a1:f7:1d:c2:
         2a:91:13:d3:f5:64:aa:7d:b3:14:cb:db:63:06:ec:22:b6:cb:
         d2:90:c8:e2:09:1f:6f:b5:97:cc:85:34:09:c5:69:16:06:24:
         52:8b:1a:10:fc:69:9c:d6:0d:9b:cf:1d:ae:a0:59:72:47:a7:
         af:a8:49:78
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:05 2024 by rpki-client on console-ams.rpki-client.org