Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/EYYLqlMhIv1D69GKtHrQXVw4L7s.roa
File:                     EYYLqlMhIv1D69GKtHrQXVw4L7s.roa (raw, json)
Hash identifier:          WBU6E0UBlkBsMPdqcLTObQ6NyHcQMeW6Dg8HUQ6PB9E=
Subject key identifier:   11:86:0B:AA:53:21:22:FD:43:EB:D1:8A:B4:7A:D0:5D:5C:38:2F:BB
Certificate issuer:       /CN=165495E8D327E4F62D5A16438F080E608A34D0D3
Certificate serial:       0D5D
Authority key identifier: 16:54:95:E8:D3:27:E4:F6:2D:5A:16:43:8F:08:0E:60:8A:34:D0:D3
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/FlSV6NMn5PYtWhZDjwgOYIo00NM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/EYYLqlMhIv1D69GKtHrQXVw4L7s.roa
Signing time:             Fri 01 Sep 2023 08:51:23 +0000
ROA not before:           Fri 01 Sep 2023 08:51:23 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     64271
IP address blocks:        2404:bac0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3421 (0xd5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=165495E8D327E4F62D5A16438F080E608A34D0D3
        Validity
            Not Before: Sep  1 08:51:23 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=11860BAA532122FD43EBD18AB47AD05D5C382FBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:1b:a6:88:b2:1b:ed:b1:0f:07:e3:60:bb:85:
                    65:f0:c7:a2:20:cb:3a:2b:dc:85:82:25:ea:da:17:
                    58:56:88:fb:20:e9:58:79:c0:27:b2:37:39:b4:93:
                    cd:a0:18:4c:46:b7:6b:97:73:89:b8:c0:19:36:50:
                    e7:d0:38:70:a9:68:9a:de:34:cd:05:8f:b8:2f:31:
                    0f:5e:64:30:42:2a:47:a0:bb:4b:57:5d:fd:0f:82:
                    d2:7c:aa:97:8d:f2:56:2a:71:9f:b0:9b:24:3d:81:
                    e3:f6:34:5c:55:4d:1c:8c:f1:52:ce:73:fd:74:73:
                    d8:0c:3e:0e:ed:67:81:4b:d3:e1:fa:90:06:d2:3f:
                    0a:fc:b6:b9:bb:09:9f:cc:4e:ec:de:70:c3:05:58:
                    ff:40:dd:c2:49:76:83:98:61:3b:d7:fa:c2:c0:41:
                    b5:40:df:d2:dd:8c:22:8b:fa:7a:2d:cc:75:34:aa:
                    2f:a2:eb:08:2a:41:da:21:ab:c2:d3:66:87:51:b8:
                    e1:67:1f:26:03:7f:85:40:a2:9a:04:74:f4:6a:d8:
                    c1:26:98:3c:b2:83:9e:bf:4a:4f:78:87:67:af:ba:
                    2d:9c:69:ea:9a:4c:0a:7e:48:af:1e:c1:54:1c:e2:
                    ea:81:0f:9d:9b:48:b0:d3:45:dc:5c:a1:90:d7:14:
                    04:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:86:0B:AA:53:21:22:FD:43:EB:D1:8A:B4:7A:D0:5D:5C:38:2F:BB
            X509v3 Authority Key Identifier:
                keyid:16:54:95:E8:D3:27:E4:F6:2D:5A:16:43:8F:08:0E:60:8A:34:D0:D3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/FlSV6NMn5PYtWhZDjwgOYIo00NM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FlSV6NMn5PYtWhZDjwgOYIo00NM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/EYYLqlMhIv1D69GKtHrQXVw4L7s.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:bac0::/32

    Signature Algorithm: sha256WithRSAEncryption
         8e:13:ce:e6:8a:18:65:6c:b1:8b:f0:f7:ab:ca:3f:db:c3:a3:
         14:ce:22:aa:1b:65:a6:2d:d4:86:67:92:87:8b:0a:53:70:c9:
         d8:45:90:33:54:5e:84:07:ee:10:c5:b1:37:01:c7:bf:5c:fb:
         b6:c5:06:bf:f0:8b:7d:32:e9:1f:9b:9f:df:b1:dd:9f:35:15:
         4c:3c:96:dc:76:cb:b7:12:46:5b:f0:30:b9:6b:b7:b6:2d:65:
         30:6e:5c:fd:35:4f:ad:3e:b4:a8:c8:b7:6a:73:16:81:fa:b2:
         ae:70:58:80:d1:41:b2:4d:79:2b:54:b5:c5:21:ab:57:53:70:
         81:0d:61:e1:d3:54:99:40:aa:be:dc:da:4e:c5:cb:1f:90:08:
         6c:d9:61:62:a8:99:2b:82:5e:3f:1a:b6:ee:cd:dc:16:62:7b:
         14:f1:e3:ab:e5:5e:15:48:7b:b5:17:12:56:c7:6c:41:92:30:
         49:ff:25:cb:ba:c3:75:db:5f:8e:5d:82:8a:ee:dd:94:92:18:
         14:d2:07:d2:43:5a:70:67:fd:08:b4:52:52:52:18:8b:9d:05:
         9a:98:b2:a6:07:04:09:a7:e0:67:fa:1e:c1:a9:2e:29:4d:0a:
         c4:68:cc:28:bc:08:53:3c:5c:0a:74:c7:f7:cc:98:83:4d:61:
         dd:83:69:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:20 2024 by rpki-client on console-fra.rpki-client.org