Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/6gX9dezWvfTkIYO_juRyBeB-R9U.roa
File:                     6gX9dezWvfTkIYO_juRyBeB-R9U.roa (raw, json)
Hash identifier:          J2zWZc3wIqOb/JvwmwWgVqsKWlDthaR/041Al5RQ4zs=
Subject key identifier:   EA:05:FD:75:EC:D6:BD:F4:E4:21:83:BF:8E:E4:72:05:E0:7E:47:D5
Certificate issuer:       /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial:       0CDC
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/6gX9dezWvfTkIYO_juRyBeB-R9U.roa
Signing time:             Mon 15 Jan 2024 21:22:16 +0000
ROA not before:           Mon 15 Jan 2024 21:22:16 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     24155
IP address blocks:        210.63.224.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3292 (0xcdc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
        Validity
            Not Before: Jan 15 21:22:16 2024 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=EA05FD75ECD6BDF4E42183BF8EE47205E07E47D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a5:16:04:2f:33:ed:d2:14:34:ee:8c:76:e5:
                    1f:1d:19:02:19:a3:41:e4:8a:7d:2c:e9:d6:18:d3:
                    45:77:8b:99:2f:92:ea:e9:e8:d9:db:62:7f:77:4f:
                    b9:2d:93:66:b2:53:d6:e1:08:f0:a0:91:6e:ec:17:
                    61:14:c8:be:41:fe:7d:41:54:a7:06:3b:12:47:d1:
                    bb:e7:e8:c9:8c:90:c4:16:22:8b:28:74:2a:f7:16:
                    79:00:69:a7:05:25:22:a0:09:2d:d7:fa:52:fb:11:
                    fb:ae:e2:28:26:fd:20:01:26:a3:4e:d6:24:44:76:
                    b5:10:bd:d4:67:0c:c6:21:df:a7:b6:37:b8:f2:a9:
                    9b:58:e6:80:d9:28:41:2c:a4:3f:7e:6c:9f:34:bf:
                    77:ad:e1:ef:8e:ec:0f:9a:51:d6:57:6c:5c:21:9f:
                    89:d2:47:ba:fd:08:9b:9f:3f:e1:98:68:98:53:d2:
                    48:0d:0d:0d:79:7c:dd:4e:e4:a4:eb:83:76:3f:67:
                    23:c3:bf:8a:df:ab:2f:27:24:71:5d:51:64:30:e3:
                    fb:ba:49:92:75:a9:7f:9f:45:c9:88:41:81:ec:19:
                    2b:4e:f3:ff:13:cc:30:ae:83:b0:23:0e:94:e8:76:
                    41:62:66:b4:37:80:29:c5:d0:e0:49:b5:3a:6e:9e:
                    ec:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:05:FD:75:EC:D6:BD:F4:E4:21:83:BF:8E:E4:72:05:E0:7E:47:D5
            X509v3 Authority Key Identifier:
                keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/6gX9dezWvfTkIYO_juRyBeB-R9U.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.63.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         91:42:c1:70:fb:3e:9d:59:2f:c9:d5:cd:2f:4b:e3:1e:32:be:
         c5:58:3f:e4:4d:6d:21:77:0f:fe:29:5c:84:2e:b3:f8:4e:38:
         d6:bd:3f:cb:2d:31:40:c1:22:59:8b:1a:5b:e6:19:da:d3:bc:
         03:3d:ca:b1:1b:da:e0:fd:45:1b:c6:cf:92:2d:33:1c:50:e5:
         5d:e9:19:38:22:2c:66:4d:0a:49:fb:72:d4:e9:1c:29:52:04:
         04:15:c1:a0:6d:f7:4c:e6:02:a2:76:9b:f6:9c:23:a6:da:d7:
         1a:49:d7:22:82:38:b1:ef:5f:00:8b:74:bb:03:05:ba:d4:b6:
         f3:fb:d6:48:15:e4:70:44:02:85:20:28:b5:03:17:a2:00:26:
         bb:16:0d:d4:fd:b8:fc:57:83:23:55:74:7d:ff:94:01:55:ec:
         55:a4:32:cf:74:ec:98:97:3b:89:85:a6:ad:5f:82:37:f7:7c:
         57:37:17:f1:fe:93:82:42:6f:3d:fc:c3:99:1b:3a:f7:ec:d0:
         97:25:8b:36:8f:ad:54:4b:d8:98:e1:e7:76:28:e2:80:44:7f:
         82:11:d9:f7:d9:c1:7f:46:47:7c:6e:ee:7f:7d:f7:d6:59:bc:
         6a:6b:cd:6c:d0:7d:93:f3:4e:c4:fa:6c:35:2d:5e:94:78:b3:
         4c:b4:e3:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:19 2024 by rpki-client on console-fra.rpki-client.org