Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FORCECLOUD/7YDpIl6CTPrY5A5JCW1aS9I3qxQ.roa
File:                     7YDpIl6CTPrY5A5JCW1aS9I3qxQ.roa (raw, json)
Hash identifier:          yx0FfHlxU8HeXIB8plWnx+AlYPixJKVtKQepJsdfgUU=
Subject key identifier:   ED:80:E9:22:5E:82:4C:FA:D8:E4:0E:49:09:6D:5A:4B:D2:37:AB:14
Certificate issuer:       /CN=3EEECD25278C89CD0DD3FCCCBCFDD5AE6DDD15F4
Certificate serial:       EF
Authority key identifier: 3E:EE:CD:25:27:8C:89:CD:0D:D3:FC:CC:BC:FD:D5:AE:6D:DD:15:F4
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Pu7NJSeMic0N0_zMvP3Vrm3dFfQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/FORCECLOUD/7YDpIl6CTPrY5A5JCW1aS9I3qxQ.roa
Signing time:             Fri 03 Feb 2023 04:39:39 +0000
ROA not before:           Fri 03 Feb 2023 04:39:39 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     131653
IP address blocks:        103.178.10.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 239 (0xef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3EEECD25278C89CD0DD3FCCCBCFDD5AE6DDD15F4
        Validity
            Not Before: Feb  3 04:39:39 2023 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=ED80E9225E824CFAD8E40E49096D5A4BD237AB14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:98:25:ca:52:b4:2e:28:cb:0f:2f:16:45:c1:
                    34:85:87:53:16:67:2c:bb:98:e3:81:f1:21:18:18:
                    6b:f7:ee:68:a9:b4:ea:ba:31:76:c7:0b:da:55:16:
                    50:b0:05:89:9b:50:e0:af:8e:d5:da:6d:d8:01:0d:
                    e8:f7:64:a8:85:44:5a:78:47:6b:90:bc:a8:bd:fc:
                    5a:39:39:07:96:fd:19:6f:83:09:ba:23:57:9e:dd:
                    86:c4:2f:86:a3:37:86:06:6b:97:09:b3:9f:4b:64:
                    a0:c6:78:09:04:28:4f:ee:12:40:fb:58:eb:e5:ad:
                    1c:15:28:9f:ca:6e:71:87:1b:90:59:77:85:23:c9:
                    05:8c:72:4c:b1:a6:96:27:42:f2:9b:7e:a1:58:a8:
                    d0:0d:7a:5f:29:c7:c2:d8:d9:f6:72:4d:ce:d4:10:
                    e8:07:e7:f4:4b:7b:3b:a5:52:c6:50:c9:41:61:52:
                    b2:02:d3:13:ac:1a:0c:5c:4e:70:5c:cd:da:67:7e:
                    c6:a9:1e:b3:18:19:6c:d6:2a:85:48:6e:34:3c:d1:
                    8d:04:38:a7:12:5c:e7:de:44:6a:96:37:3b:c7:d8:
                    9b:7c:6c:9d:42:72:94:71:f3:aa:93:62:e4:3c:a1:
                    0b:c8:13:33:e5:fb:b1:ed:6b:91:21:23:c6:cb:1d:
                    b7:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:80:E9:22:5E:82:4C:FA:D8:E4:0E:49:09:6D:5A:4B:D2:37:AB:14
            X509v3 Authority Key Identifier:
                keyid:3E:EE:CD:25:27:8C:89:CD:0D:D3:FC:CC:BC:FD:D5:AE:6D:DD:15:F4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FORCECLOUD/Pu7NJSeMic0N0_zMvP3Vrm3dFfQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Pu7NJSeMic0N0_zMvP3Vrm3dFfQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FORCECLOUD/7YDpIl6CTPrY5A5JCW1aS9I3qxQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         66:03:ed:da:fa:6d:60:c9:f6:98:17:1b:78:f7:44:41:6f:da:
         15:65:b9:58:a5:66:cf:c6:6b:35:bb:d4:5b:ed:5d:02:e5:d6:
         33:68:c4:bf:03:8a:51:bf:99:bd:25:9e:61:18:82:99:ac:c0:
         e9:19:2b:56:5a:4b:b7:56:ce:4e:e4:a8:45:ab:47:37:8a:6b:
         39:83:0a:3f:51:1c:0b:89:ef:04:cd:99:e5:eb:ee:61:a8:f9:
         30:ba:98:58:81:fb:6c:66:f0:a1:dd:13:e2:9c:d1:f3:2f:f2:
         b7:5b:e8:11:ba:d4:ba:a2:4a:3b:53:83:21:f6:9e:c9:d3:3f:
         43:d4:77:2b:d2:e7:58:b3:4c:ec:53:4f:87:37:5b:de:88:ce:
         cb:ed:77:9f:4f:2f:a5:0c:c0:dd:bb:60:ba:c8:f8:51:b1:65:
         62:66:a0:4b:47:d9:0c:e0:2f:3f:ff:63:96:21:89:31:0f:57:
         68:83:07:10:9d:2c:48:38:fc:50:55:51:d9:aa:10:9a:17:64:
         1e:ae:5f:b1:f9:6c:61:c5:57:9d:a0:98:26:84:fd:0d:dd:63:
         21:fe:a8:8a:06:7c:53:96:39:0d:06:e6:0b:1e:59:28:4e:45:
         3e:2a:84:3e:6c:c5:e8:d7:fe:db:45:6c:92:b0:8d:5e:2e:6e:
         d5:b2:d8:ee
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:36 2024 by rpki-client on console-fra.rpki-client.org