Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EDTNS/FYKWwsoKY_8w9iHN7_hI_tIwTXc.roa
File:                     FYKWwsoKY_8w9iHN7_hI_tIwTXc.roa (raw, json)
Hash identifier:          E1kDu/sNvlYxVhEQhqwqG91+Mw08LMVmXV4IUuQAbdc=
Subject key identifier:   15:82:96:C2:CA:0A:63:FF:30:F6:21:CD:EF:F8:48:FE:D2:30:4D:77
Certificate issuer:       /CN=94C6DDFDD4BAA50400F3A119A5833CE0021BDB2E
Certificate serial:       0B46
Authority key identifier: 94:C6:DD:FD:D4:BA:A5:04:00:F3:A1:19:A5:83:3C:E0:02:1B:DB:2E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/lMbd_dS6pQQA86EZpYM84AIb2y4.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/FYKWwsoKY_8w9iHN7_hI_tIwTXc.roa
Signing time:             Fri 01 Sep 2023 08:48:46 +0000
ROA not before:           Fri 01 Sep 2023 08:48:46 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     18411
IP address blocks:        61.56.18.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2886 (0xb46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94C6DDFDD4BAA50400F3A119A5833CE0021BDB2E
        Validity
            Not Before: Sep  1 08:48:46 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=158296C2CA0A63FF30F621CDEFF848FED2304D77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:99:f4:fe:f8:36:7c:24:4f:9a:48:11:40:7e:
                    a1:fb:7d:7f:30:43:09:4d:a2:cd:9e:2b:82:20:d2:
                    57:02:2a:61:72:e0:bc:d0:12:7a:fd:2e:95:f6:37:
                    08:a0:0d:27:a9:d3:f2:6b:71:11:65:d0:65:0b:08:
                    90:32:8d:61:8f:9b:2f:64:b8:41:06:e6:2b:e6:6a:
                    59:ae:1a:8a:4c:c0:0f:4a:83:25:26:57:f0:5e:0e:
                    cc:16:5e:fa:5c:0e:dd:c8:83:66:25:f9:d9:bf:e3:
                    21:9e:c7:5e:d6:30:b3:bb:d5:20:5d:75:e7:ed:39:
                    98:ca:d0:15:88:d9:63:a5:be:51:a2:8c:8f:16:e1:
                    f4:8a:31:86:de:82:91:4b:a8:8e:cd:aa:e8:87:b6:
                    30:c6:c0:8e:74:8e:93:c0:84:7a:1f:0a:ef:45:d8:
                    c2:c0:eb:49:50:e3:c1:b5:c9:05:dd:da:d0:44:d9:
                    f0:53:b6:ef:49:62:2d:a5:a5:4b:3b:23:fb:df:22:
                    07:5d:8b:13:28:81:18:82:40:76:e4:b3:27:4b:22:
                    76:7e:50:39:05:55:f2:78:1c:47:bf:b2:93:19:74:
                    bf:a8:f1:97:d7:fe:8b:a1:e3:9c:5f:61:55:35:99:
                    96:54:01:cf:72:a1:67:00:59:de:50:ef:11:99:dc:
                    c9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:82:96:C2:CA:0A:63:FF:30:F6:21:CD:EF:F8:48:FE:D2:30:4D:77
            X509v3 Authority Key Identifier:
                keyid:94:C6:DD:FD:D4:BA:A5:04:00:F3:A1:19:A5:83:3C:E0:02:1B:DB:2E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/lMbd_dS6pQQA86EZpYM84AIb2y4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/lMbd_dS6pQQA86EZpYM84AIb2y4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/FYKWwsoKY_8w9iHN7_hI_tIwTXc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.56.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:86:1c:e8:80:a8:f0:52:63:78:ee:98:c5:17:e7:e7:93:96:
         7c:0a:15:12:3c:0a:bf:64:6c:67:2c:b3:d4:12:4c:b5:1e:cc:
         cd:37:96:08:ce:45:30:db:e1:27:ef:93:3b:7d:0a:d3:24:78:
         75:db:5e:ce:2d:bf:82:e6:48:83:63:fa:b9:9d:d6:95:59:e8:
         9b:66:84:78:cd:52:0f:ae:4b:f2:a8:81:f9:8f:88:e2:53:2b:
         9e:17:e9:71:1b:38:f0:24:3a:af:91:69:bc:86:dc:89:f6:c1:
         c5:5a:df:91:eb:83:31:ee:a1:af:6f:17:90:89:e6:ff:1c:41:
         9d:62:b3:ec:b4:81:10:91:23:63:26:62:21:5b:17:da:c9:1a:
         15:e7:c9:cc:31:fe:45:be:b7:18:43:54:29:63:ec:e4:30:bd:
         30:1d:69:c2:05:68:88:d7:1d:60:9d:bf:0e:a3:94:4c:67:c4:
         f0:64:01:1b:17:0c:63:a4:71:7a:f3:a3:47:d1:92:1a:ee:6f:
         07:c9:43:a6:4e:80:71:5f:10:de:df:3e:69:a8:a4:98:ad:b7:
         9f:cc:54:0b:6c:c1:d9:57:eb:1e:7b:38:75:79:c4:cd:7c:84:
         89:a6:5b:a6:ae:8d:6d:6d:1a:ee:f8:69:ae:9b:c7:79:5b:b3:
         14:07:4b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:12 2024 by rpki-client on console-ams.rpki-client.org