Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ERAYINFO/b9Ueq_wEx-v1vCx8wufLRUcQM0E.roa
File:                     b9Ueq_wEx-v1vCx8wufLRUcQM0E.roa (raw, json)
Hash identifier:          Rh+ns15O13hqrQDhbaP+zk8dxe9CKcJjROftJdDqYbM=
Subject key identifier:   6F:D5:1E:AB:FC:04:C7:EB:F5:BC:2C:7C:C2:E7:CB:45:47:10:33:41
Certificate issuer:       /CN=3BF441B57C86BD9D193451A005D26CE1A3C6DEE7
Certificate serial:       0134
Authority key identifier: 3B:F4:41:B5:7C:86:BD:9D:19:34:51:A0:05:D2:6C:E1:A3:C6:DE:E7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/O_RBtXyGvZ0ZNFGgBdJs4aPG3uc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ERAYINFO/b9Ueq_wEx-v1vCx8wufLRUcQM0E.roa
Signing time:             Fri 01 Sep 2023 08:49:55 +0000
ROA not before:           Fri 01 Sep 2023 08:49:55 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     18041
IP address blocks:        103.160.180.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 308 (0x134)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3BF441B57C86BD9D193451A005D26CE1A3C6DEE7
        Validity
            Not Before: Sep  1 08:49:55 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=6FD51EABFC04C7EBF5BC2C7CC2E7CB4547103341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:fe:58:5b:60:08:e4:2d:9c:5d:9d:a7:e7:64:
                    d5:ef:66:1c:92:f0:fc:a0:e8:d2:de:d5:94:ec:8e:
                    98:11:16:cb:9b:64:fe:47:4d:49:c9:6b:cf:ed:8b:
                    8a:98:af:86:a6:6e:1e:cc:e2:af:ee:d2:33:9d:23:
                    44:95:ed:76:db:76:69:4b:3b:5c:4c:8e:a4:35:82:
                    f0:a3:1a:e7:0f:23:02:93:9a:fb:24:67:04:3b:b6:
                    99:e4:6e:5d:1a:cd:d9:25:e8:8a:64:03:77:fb:a4:
                    7c:22:de:91:7a:ce:c8:fe:f5:fd:15:45:aa:6b:e5:
                    57:37:a9:ba:6c:00:12:1c:e0:21:bd:c2:50:a2:0c:
                    45:43:3b:d0:0a:af:3d:21:3a:cf:9f:55:b2:1a:aa:
                    ed:5e:7e:78:f8:d5:d8:22:ae:e1:a0:db:7b:eb:c2:
                    08:1b:53:e3:76:82:44:91:5b:9e:9c:71:e3:7f:24:
                    16:d5:92:09:e3:74:14:cb:31:7d:01:97:21:45:22:
                    b2:81:e5:b2:35:45:22:43:cc:d1:1e:c6:19:be:86:
                    07:d9:30:99:e0:6d:37:71:a0:24:1e:f7:07:59:37:
                    57:53:21:55:f5:1c:7e:4f:d8:14:5a:46:eb:7d:69:
                    f3:23:fe:aa:05:1d:71:26:1a:f2:26:32:5e:6b:9e:
                    5f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:D5:1E:AB:FC:04:C7:EB:F5:BC:2C:7C:C2:E7:CB:45:47:10:33:41
            X509v3 Authority Key Identifier:
                keyid:3B:F4:41:B5:7C:86:BD:9D:19:34:51:A0:05:D2:6C:E1:A3:C6:DE:E7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ERAYINFO/O_RBtXyGvZ0ZNFGgBdJs4aPG3uc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/O_RBtXyGvZ0ZNFGgBdJs4aPG3uc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ERAYINFO/b9Ueq_wEx-v1vCx8wufLRUcQM0E.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         66:c9:b0:72:40:88:a8:14:81:90:11:eb:36:a9:94:d1:66:d2:
         37:bb:fa:a2:dc:53:69:71:0f:aa:58:ce:8b:25:2e:6a:5b:8b:
         43:78:24:ec:71:d9:bb:9c:1b:58:27:62:54:25:20:3f:a2:4b:
         83:ff:85:2e:a8:3f:5f:f9:53:4f:6b:1f:57:61:87:af:e1:f4:
         89:12:d2:08:76:d9:d1:16:0c:a9:b4:a6:bf:7a:ca:df:93:18:
         c3:9c:43:a3:26:28:25:75:6d:80:96:11:c4:8b:b7:e2:75:3f:
         79:1f:fb:83:58:f2:cd:15:89:64:2c:21:8d:77:89:b8:a9:67:
         be:3c:dd:21:b6:60:ca:74:2b:60:26:db:77:f9:f2:7d:47:bf:
         bb:6a:c1:a0:bc:99:71:64:ae:5a:7f:45:96:e1:74:0c:77:47:
         8b:98:1b:dd:cd:ab:c7:2b:6b:fc:94:96:8f:a4:ba:c0:7b:4c:
         fa:df:dc:f7:b5:f6:60:50:09:3d:b3:3b:39:1a:cc:36:7f:f8:
         b0:5b:cc:6b:6c:c8:8f:5d:fc:5c:7f:bb:36:4d:71:39:17:60:
         b7:51:6a:04:e4:52:a7:d0:3b:ce:38:0f:a3:e1:44:2b:59:3a:
         7a:01:00:f8:91:68:ca:8b:bd:9e:d6:f8:be:a4:7d:c7:8d:71:
         39:5b:7a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:12 2024 by rpki-client on console-ams.rpki-client.org