Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/6QH2xH1SL1HqXd127GWxslNtBYo.roa
File:                     6QH2xH1SL1HqXd127GWxslNtBYo.roa (raw, json)
Hash identifier:          38IfBFuG+cbFFoJWZT9iVb535PlGKzN6ghkSnBYptqo=
Subject key identifier:   E9:01:F6:C4:7D:52:2F:51:EA:5D:DD:76:EC:65:B1:B2:53:6D:05:8A
Certificate issuer:       /CN=165495E8D327E4F62D5A16438F080E608A34D0D3
Certificate serial:       0D5E
Authority key identifier: 16:54:95:E8:D3:27:E4:F6:2D:5A:16:43:8F:08:0E:60:8A:34:D0:D3
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/FlSV6NMn5PYtWhZDjwgOYIo00NM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/6QH2xH1SL1HqXd127GWxslNtBYo.roa
Signing time:             Fri 01 Sep 2023 08:51:24 +0000
ROA not before:           Fri 01 Sep 2023 08:51:24 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     131658
IP address blocks:        2404:bac0::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3422 (0xd5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=165495E8D327E4F62D5A16438F080E608A34D0D3
        Validity
            Not Before: Sep  1 08:51:24 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=E901F6C47D522F51EA5DDD76EC65B1B2536D058A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7f:63:3c:91:20:33:47:9c:5d:ba:7c:b7:f9:
                    3d:36:9a:ae:1b:7e:0c:d8:5e:85:b3:cf:7b:5a:73:
                    4d:87:a7:fa:9c:b5:6b:bb:61:91:c8:98:9e:eb:17:
                    9b:0a:d8:6e:44:50:09:a0:41:83:75:82:90:b8:af:
                    de:1f:48:ba:e1:f4:9e:96:5a:60:f1:54:35:8a:ca:
                    02:03:5a:df:d5:c5:7a:23:0c:73:7f:9c:dc:9d:88:
                    27:c8:74:4a:a7:94:9b:91:4b:cd:64:89:66:16:44:
                    de:43:00:03:58:5a:12:64:98:e7:fe:db:98:d6:8f:
                    39:25:80:e3:24:5f:a2:58:36:43:8b:e7:e4:a6:6f:
                    89:df:b1:b5:44:fa:6d:0b:f3:6b:de:e6:96:f4:8a:
                    93:b7:72:a0:23:4a:a1:8b:28:7d:b3:2e:94:1b:4c:
                    45:a8:77:e0:86:11:f3:12:8d:cf:c0:b1:c0:1f:35:
                    69:22:5e:b6:58:eb:bd:c0:e3:83:37:11:0c:19:69:
                    fd:7b:80:d5:8b:11:f1:d4:ca:c9:0e:16:67:f6:4f:
                    7e:df:7a:d3:3f:9c:12:13:ab:20:c3:be:de:e7:1d:
                    53:72:e5:26:8f:36:6d:16:56:01:ba:12:51:1b:77:
                    c3:dc:35:4a:66:34:e5:01:5d:96:4f:15:d5:81:d6:
                    ca:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:01:F6:C4:7D:52:2F:51:EA:5D:DD:76:EC:65:B1:B2:53:6D:05:8A
            X509v3 Authority Key Identifier:
                keyid:16:54:95:E8:D3:27:E4:F6:2D:5A:16:43:8F:08:0E:60:8A:34:D0:D3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/FlSV6NMn5PYtWhZDjwgOYIo00NM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FlSV6NMn5PYtWhZDjwgOYIo00NM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/6QH2xH1SL1HqXd127GWxslNtBYo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:bac0::/44

    Signature Algorithm: sha256WithRSAEncryption
         a1:f8:8c:b1:9f:21:6a:64:f9:34:33:95:f5:23:d7:bf:37:4d:
         9b:35:65:13:fd:5d:7b:a0:c0:99:76:24:20:bf:29:2e:34:3c:
         85:d4:d7:8c:7c:07:8c:bd:c4:16:0a:46:b3:c6:78:87:34:d9:
         f2:14:6f:df:83:e6:24:f4:8c:dc:3b:e4:0d:cd:a7:96:1a:18:
         5e:55:99:a5:7e:4b:3c:49:ba:3e:65:8d:25:78:36:f0:6d:78:
         0b:4b:60:11:1b:2d:d3:ea:b1:36:a1:65:d8:22:7d:36:43:b9:
         14:d1:51:1e:90:da:7e:ce:90:b4:92:6e:a4:d3:e3:a9:31:7c:
         2b:fe:6e:2d:41:c4:f9:98:66:4b:2e:14:b0:06:e2:b6:fd:b6:
         26:1b:a2:76:c9:70:cb:82:ce:2a:52:40:b0:06:d8:65:f9:a8:
         e2:dc:50:d5:b1:d8:7b:27:5e:3f:9f:7c:9a:a3:49:ac:b4:7a:
         1b:bc:d0:0f:92:f2:57:7f:42:0e:ed:52:54:b6:f8:ec:3c:2f:
         fa:91:ed:59:5e:79:70:cc:af:a9:fa:ac:eb:39:f1:99:bc:23:
         3e:39:0b:7d:a2:c6:4f:7e:68:f4:c5:b3:3b:ae:f3:91:30:81:
         ef:c1:b2:10:de:c9:f0:5d:2c:a2:a1:dd:9d:1d:ea:8e:4e:4a:
         43:64:e7:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:20 2024 by rpki-client on console-fra.rpki-client.org