Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EBT/GD_-GeK3Et97zJwyxzkuhnocziI.roa
File:                     GD_-GeK3Et97zJwyxzkuhnocziI.roa (raw, json)
Hash identifier:          v3UjMrTCciDYx/O+1XURjQOulowEHOZ/5ZLkyvHcCaE=
Subject key identifier:   18:3F:FE:19:E2:B7:12:DF:7B:CC:9C:32:C7:39:2E:86:7A:1C:CE:22
Certificate issuer:       /CN=2D84CA269320E256216A2DEE2EA381A304526AB4
Certificate serial:       0773
Authority key identifier: 2D:84:CA:26:93:20:E2:56:21:6A:2D:EE:2E:A3:81:A3:04:52:6A:B4
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/LYTKJpMg4lYhai3uLqOBowRSarQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/EBT/GD_-GeK3Et97zJwyxzkuhnocziI.roa
Signing time:             Tue 29 Sep 2020 09:51:31 +0000
ROA not before:           Tue 29 Sep 2020 09:51:31 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24154
IP address blocks:        211.76.104.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1907 (0x773)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D84CA269320E256216A2DEE2EA381A304526AB4
        Validity
            Not Before: Sep 29 09:51:31 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=183FFE19E2B712DF7BCC9C32C7392E867A1CCE22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bf:8c:f1:bb:8b:15:9f:c6:a9:fa:e0:b7:d4:
                    8a:5e:b8:ef:52:cb:fb:00:3d:a0:b2:4a:85:f5:a8:
                    e4:29:d3:b0:43:32:93:72:33:56:dd:56:03:19:b4:
                    53:82:9a:b8:08:da:08:79:19:10:08:04:5f:40:90:
                    ea:dd:18:83:1c:f5:20:40:22:92:21:74:2f:f6:25:
                    cc:60:8c:a2:fa:e6:9a:f1:50:8a:c1:8f:a5:ec:d5:
                    65:34:d4:59:7d:00:56:c3:bc:38:b3:c9:07:ce:e3:
                    05:01:8c:00:52:88:2c:90:98:e9:4b:65:dd:da:7b:
                    93:ec:e2:2a:6a:46:94:72:8b:a7:b8:a9:d7:9f:e1:
                    df:ea:84:60:5d:fd:e8:aa:6c:36:9f:9b:b8:a2:5d:
                    b2:0a:32:18:5b:a5:f8:2c:d3:45:16:c4:6c:5a:d5:
                    c6:93:db:16:95:d9:dc:76:8e:6b:0b:3e:95:66:ba:
                    d6:c8:05:a5:33:f9:fd:e4:86:13:42:fc:03:86:3e:
                    02:a1:7e:bc:a8:03:8e:9e:20:44:70:e6:12:6e:1b:
                    da:07:1e:54:51:a7:f5:ad:3e:ac:6d:d4:22:00:41:
                    16:df:28:a7:76:0e:5b:ab:71:a3:9d:7b:39:46:7a:
                    1c:18:cf:8b:47:8b:1f:55:14:76:82:9a:9c:8c:91:
                    5e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:3F:FE:19:E2:B7:12:DF:7B:CC:9C:32:C7:39:2E:86:7A:1C:CE:22
            X509v3 Authority Key Identifier:
                keyid:2D:84:CA:26:93:20:E2:56:21:6A:2D:EE:2E:A3:81:A3:04:52:6A:B4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EBT/LYTKJpMg4lYhai3uLqOBowRSarQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LYTKJpMg4lYhai3uLqOBowRSarQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EBT/GD_-GeK3Et97zJwyxzkuhnocziI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.76.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b7:10:cf:f4:76:70:18:34:23:be:83:fd:e7:56:f2:ce:1c:a3:
         d0:63:34:42:63:57:31:2b:d4:95:99:7f:7e:1e:7f:6e:3b:06:
         c9:29:eb:df:25:cc:8b:86:7e:4d:f5:5c:6c:69:f1:65:07:27:
         62:21:bf:b5:b8:d0:d3:84:26:42:ec:8c:f5:b3:b8:3b:a8:b6:
         d4:f3:79:03:28:a6:79:80:54:4e:32:a1:ff:00:95:ab:2b:33:
         7c:b2:85:15:2f:1d:71:bb:d7:86:5d:b5:e0:ee:cc:97:5c:86:
         9f:f4:c9:d9:6f:a2:d7:92:d7:85:fe:c2:4f:a7:cc:05:04:20:
         96:76:b4:76:4d:87:92:f7:f9:d0:12:d7:d2:9a:06:b7:37:b2:
         d7:c7:20:26:37:48:56:0b:f2:e3:09:a0:df:fb:4f:fd:60:5e:
         20:e8:f0:82:ac:2f:b4:95:61:f6:6c:3a:ee:dc:be:05:f7:2c:
         67:b9:1d:6d:a4:3e:d4:a7:b9:91:0c:d4:f6:0f:40:b5:de:90:
         85:f9:fa:a5:91:b2:50:2a:18:34:7a:a1:83:f1:5d:b2:73:fc:
         d4:0c:1c:ec:34:f2:b7:bf:50:59:a7:8b:0f:94:ce:e1:e2:9d:
         2d:29:7c:4d:97:a8:d7:28:58:f2:20:b4:0a:66:c5:c0:8f:5d:
         c5:a6:68:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:05 2024 by rpki-client on console-ams.rpki-client.org