Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EDTNS/JjaTogyA7YIWf60X5-yC-cpiBpA.roa
File:                     JjaTogyA7YIWf60X5-yC-cpiBpA.roa (raw, json)
Hash identifier:          GhImcYZym5suv/oGAe5cVeN45uwSKO1NvLFLLh9bBjM=
Subject key identifier:   26:36:93:A2:0C:80:ED:82:16:7F:AD:17:E7:EC:82:F9:CA:62:06:90
Certificate issuer:       /CN=94C6DDFDD4BAA50400F3A119A5833CE0021BDB2E
Certificate serial:       0B48
Authority key identifier: 94:C6:DD:FD:D4:BA:A5:04:00:F3:A1:19:A5:83:3C:E0:02:1B:DB:2E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/lMbd_dS6pQQA86EZpYM84AIb2y4.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/JjaTogyA7YIWf60X5-yC-cpiBpA.roa
Signing time:             Fri 01 Sep 2023 08:48:47 +0000
ROA not before:           Fri 01 Sep 2023 08:48:47 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     18411
IP address blocks:        119.30.16.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2888 (0xb48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94C6DDFDD4BAA50400F3A119A5833CE0021BDB2E
        Validity
            Not Before: Sep  1 08:48:47 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=263693A20C80ED82167FAD17E7EC82F9CA620690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:64:49:28:74:f5:29:eb:40:8c:46:40:57:8e:
                    cb:2c:fe:81:75:95:f1:c3:42:e4:dd:e9:5e:eb:ab:
                    a5:3a:93:13:40:cd:07:cd:cf:04:c7:3d:6d:4c:c2:
                    16:9b:9b:35:9b:d2:e1:e7:d0:25:7d:85:81:f9:8c:
                    d7:e7:0d:80:9b:65:92:41:5c:cd:ae:3a:e4:81:93:
                    db:68:ea:49:a5:95:6d:7d:35:25:2d:e9:9f:c2:7d:
                    de:0e:4e:8a:a4:d4:e3:8f:f8:3d:51:08:50:54:07:
                    48:fc:92:83:04:1b:cf:de:1c:30:d3:1c:01:94:08:
                    44:ee:fe:da:73:be:4b:91:12:42:c6:bd:b7:65:53:
                    c3:92:cb:b4:f9:39:ae:0b:5b:7a:56:bd:f5:80:00:
                    9c:09:dd:d5:71:ff:9a:6c:cd:ea:b1:a2:df:30:8f:
                    6c:59:e2:5d:e2:01:e4:60:30:52:77:b4:c6:cd:2c:
                    9e:6d:8d:84:eb:6c:2c:6d:29:b9:b0:93:20:e6:81:
                    da:a8:e9:9a:f2:d0:94:a6:00:f0:1c:5b:37:6a:70:
                    94:cd:fe:6c:fa:17:4a:fe:f6:dd:36:e5:18:7e:0c:
                    63:f9:c6:13:bf:95:c4:70:1a:6f:c2:e3:a6:f6:54:
                    39:bf:11:de:69:10:6b:4c:e5:81:b0:be:38:c1:3b:
                    26:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:36:93:A2:0C:80:ED:82:16:7F:AD:17:E7:EC:82:F9:CA:62:06:90
            X509v3 Authority Key Identifier:
                keyid:94:C6:DD:FD:D4:BA:A5:04:00:F3:A1:19:A5:83:3C:E0:02:1B:DB:2E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/lMbd_dS6pQQA86EZpYM84AIb2y4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/lMbd_dS6pQQA86EZpYM84AIb2y4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/JjaTogyA7YIWf60X5-yC-cpiBpA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.30.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         26:93:ee:72:45:d9:4a:80:2a:ec:f0:73:35:a0:84:28:20:8d:
         a3:8d:49:09:da:dd:7f:ff:be:08:6a:38:06:c1:f7:c8:77:7c:
         93:22:65:9e:a3:50:9c:4e:03:c6:28:9f:ef:ea:bb:5e:fa:55:
         25:45:d5:88:c0:44:8d:ff:a3:5d:d2:62:1d:1b:5c:8c:e8:12:
         05:a3:e4:f4:d1:c3:50:af:21:ce:00:7a:26:e8:41:99:95:18:
         98:ea:07:07:3d:82:20:7b:80:a7:05:a8:43:a4:2c:a7:90:e7:
         b3:55:b1:f0:a4:40:0b:63:e7:eb:26:64:87:8f:8a:f7:af:f3:
         9b:a0:15:28:52:79:ca:15:c9:fc:0a:b0:94:55:7c:cf:c4:42:
         88:62:b2:da:ed:2f:8e:2f:82:00:b8:df:e8:df:0a:80:08:d6:
         0a:75:b0:b1:c4:3d:7b:dd:4b:41:9f:43:b5:36:e3:3f:db:d2:
         30:6c:cc:cb:f2:c1:0b:01:5c:c4:f2:2c:38:f2:ec:41:a3:3e:
         74:48:1e:b2:ca:ca:d2:bf:88:52:f9:b2:6a:ed:86:60:9d:ec:
         54:29:40:25:4d:cc:42:e4:65:39:f3:ad:ef:cf:a3:57:49:51:
         83:7c:1c:c4:90:2d:35:9a:31:6a:bd:20:7a:d4:23:7a:01:48:
         f7:d6:16:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:12 2024 by rpki-client on console-ams.rpki-client.org