Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/gfIoLEnAqzL3w6JL-y19gwdYu_c.roa
File:                     gfIoLEnAqzL3w6JL-y19gwdYu_c.roa (raw, json)
Hash identifier:          +PvB9OmT+Bl+gI2EW4vgVAUHRPh6A9u0cRrLwrSXGpU=
Subject key identifier:   81:F2:28:2C:49:C0:AB:32:F7:C3:A2:4B:FB:2D:7D:83:07:58:BB:F7
Certificate issuer:       /CN=165495E8D327E4F62D5A16438F080E608A34D0D3
Certificate serial:       0D60
Authority key identifier: 16:54:95:E8:D3:27:E4:F6:2D:5A:16:43:8F:08:0E:60:8A:34:D0:D3
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/FlSV6NMn5PYtWhZDjwgOYIo00NM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/gfIoLEnAqzL3w6JL-y19gwdYu_c.roa
Signing time:             Fri 01 Sep 2023 08:51:24 +0000
ROA not before:           Fri 01 Sep 2023 08:51:24 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     38042
IP address blocks:        103.137.246.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3424 (0xd60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=165495E8D327E4F62D5A16438F080E608A34D0D3
        Validity
            Not Before: Sep  1 08:51:24 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=81F2282C49C0AB32F7C3A24BFB2D7D830758BBF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:48:dc:98:0b:52:91:e6:2a:68:75:2c:46:8c:
                    e5:41:02:8e:5d:17:f0:f2:11:4c:c8:bd:d3:f2:aa:
                    d5:22:cb:15:a1:b9:19:6f:be:77:25:40:f1:5f:78:
                    e4:dc:24:53:60:e5:82:6e:11:6b:af:25:e2:39:e5:
                    4c:02:f3:84:30:cc:ee:d8:3a:aa:99:aa:ca:ec:78:
                    b9:b0:38:ac:35:be:a0:2e:fb:be:e1:be:18:7a:75:
                    bd:cb:90:fa:10:dc:cc:42:00:96:10:b1:f6:ae:62:
                    ac:4c:08:2d:3d:34:d8:46:24:93:84:2c:d7:97:8d:
                    8e:a6:24:a9:10:82:62:a1:b2:91:d2:cc:f5:89:c6:
                    14:25:c1:d2:7e:9f:61:36:93:fc:5b:97:40:78:a0:
                    d5:f8:de:12:db:ac:19:25:2f:89:0f:3e:0b:0c:df:
                    dc:f9:06:d7:3f:27:66:04:ab:e3:f6:20:1e:25:c2:
                    2f:21:82:fb:2d:aa:4c:d8:90:40:38:80:b0:b0:6d:
                    5b:01:a7:5b:4f:5f:6d:0f:01:90:57:45:ce:6e:1f:
                    33:a0:da:cf:16:35:e7:38:29:e2:25:46:fa:16:23:
                    45:bf:45:71:70:38:4c:61:38:8d:20:70:bc:7f:7c:
                    80:c2:d7:fa:79:b2:75:0a:db:43:c9:cc:69:94:2b:
                    64:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:F2:28:2C:49:C0:AB:32:F7:C3:A2:4B:FB:2D:7D:83:07:58:BB:F7
            X509v3 Authority Key Identifier:
                keyid:16:54:95:E8:D3:27:E4:F6:2D:5A:16:43:8F:08:0E:60:8A:34:D0:D3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/FlSV6NMn5PYtWhZDjwgOYIo00NM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FlSV6NMn5PYtWhZDjwgOYIo00NM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/gfIoLEnAqzL3w6JL-y19gwdYu_c.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.137.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         26:43:51:dd:26:f7:a4:6f:8a:09:cc:a5:56:bd:c9:86:35:79:
         4a:42:84:f1:c4:89:85:7c:8b:1f:27:ce:68:7a:26:85:97:5a:
         f2:52:53:b2:e9:cb:f6:fd:dd:df:9a:02:8c:b1:43:c5:a2:d2:
         41:54:6d:bf:ba:93:2f:25:59:11:e4:d5:ad:95:4d:c3:5c:2b:
         9b:ae:14:c9:4e:7a:92:c7:81:a5:38:66:d5:84:6c:44:d9:b1:
         aa:95:e0:f7:68:8e:01:70:20:29:79:d8:43:89:bc:b1:20:b4:
         ff:a2:fb:86:89:ff:c6:5c:e8:0a:98:88:d0:57:9e:4f:f3:00:
         10:d4:11:cd:c0:9e:02:2b:8c:ed:7d:74:7f:35:24:af:2a:3e:
         1e:e6:4f:9c:cb:b5:84:35:ff:05:01:e2:2f:79:c7:2c:d4:33:
         b7:ef:c7:de:31:ce:b9:96:51:74:f5:dc:c2:22:6e:55:9f:59:
         1d:55:51:55:4e:35:d5:2e:4d:de:1d:80:ea:ea:52:fe:1a:e0:
         53:54:02:89:67:d4:33:a6:1a:5d:22:96:db:a2:95:f5:29:84:
         5a:45:f6:ef:d7:ed:23:38:d2:65:f2:7e:03:9d:2a:a6:7c:f6:
         41:7b:fa:11:fd:2a:5e:26:f6:83:d9:a9:77:9f:64:74:0c:69:
         73:be:96:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:13 2024 by rpki-client on console-ams.rpki-client.org