Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GCMM/FRdyYbcLsDppZznCLZROxqGIhEg.roa
File:                     FRdyYbcLsDppZznCLZROxqGIhEg.roa (raw, json)
Hash identifier:          2qTdGkBW90b27CvMTNxF9RKxVGTxIQGc2i4pzd2s/Fs=
Subject key identifier:   15:17:72:61:B7:0B:B0:3A:69:67:39:C2:2D:94:4E:C6:A1:88:84:48
Certificate issuer:       /CN=8092F614E0EF75395097E896469BC8B7B319D852
Certificate serial:       0F7A
Authority key identifier: 80:92:F6:14:E0:EF:75:39:50:97:E8:96:46:9B:C8:B7:B3:19:D8:52
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/gJL2FODvdTlQl-iWRpvIt7MZ2FI.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/GCMM/FRdyYbcLsDppZznCLZROxqGIhEg.roa
Signing time:             Sun 07 Feb 2021 11:46:52 +0000
ROA not before:           Sun 07 Feb 2021 11:46:52 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     18046
IP address blocks:        103.130.36.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3962 (0xf7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8092F614E0EF75395097E896469BC8B7B319D852
        Validity
            Not Before: Feb  7 11:46:52 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=15177261B70BB03A696739C22D944EC6A1888448
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:80:da:0e:fa:78:bb:37:1e:a4:f6:22:fc:b6:
                    d2:4b:e9:a4:90:78:13:43:5a:21:ef:2d:8b:43:a7:
                    d9:ae:c1:35:4f:75:65:b1:63:74:c7:c6:3b:a4:bb:
                    70:76:f0:c3:6d:73:8b:3a:ad:d1:ee:81:bc:23:2b:
                    8c:f3:df:60:30:06:03:2a:e3:b7:cc:23:79:4b:bc:
                    82:ed:7b:c7:93:30:58:04:f3:18:7f:30:e5:56:02:
                    34:0b:8e:a4:d6:b4:ce:fc:df:74:d1:14:e5:8d:bf:
                    c1:9d:59:21:d7:7e:6c:fb:14:91:7b:6f:c9:1f:e9:
                    66:dc:85:de:74:57:ec:1d:9e:0e:5b:5f:d2:41:f3:
                    96:5b:e2:88:14:bc:ad:ed:65:6b:54:39:b4:32:a8:
                    ba:32:a9:b7:6c:30:db:7c:bd:5a:a8:6b:4a:8f:eb:
                    74:84:c9:e4:28:36:c0:33:78:86:25:99:f2:de:1f:
                    79:84:16:b8:e2:57:4d:03:78:9a:02:0d:c4:7b:af:
                    05:93:03:64:85:31:07:a7:24:37:02:6c:51:02:18:
                    9b:5a:af:cd:df:7e:8c:b4:17:87:a3:f6:c9:17:72:
                    04:2a:6f:7e:44:dd:0c:a1:12:c7:d7:37:ea:cf:2b:
                    4e:6f:66:f4:67:e0:3b:8a:57:c0:42:db:31:98:30:
                    b0:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:17:72:61:B7:0B:B0:3A:69:67:39:C2:2D:94:4E:C6:A1:88:84:48
            X509v3 Authority Key Identifier:
                keyid:80:92:F6:14:E0:EF:75:39:50:97:E8:96:46:9B:C8:B7:B3:19:D8:52

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GCMM/gJL2FODvdTlQl-iWRpvIt7MZ2FI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gJL2FODvdTlQl-iWRpvIt7MZ2FI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GCMM/FRdyYbcLsDppZznCLZROxqGIhEg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:d8:83:42:63:dd:da:57:2f:77:0b:94:b4:ee:6b:48:46:33:
         2a:30:b8:6d:05:83:fa:13:68:a4:ee:eb:36:d6:39:76:25:9c:
         f8:d1:76:2b:d5:5a:ef:93:04:27:3c:08:62:30:98:24:ce:13:
         16:21:1f:34:ed:09:1b:75:77:6d:7f:78:f6:b2:88:8b:a5:9d:
         72:73:57:f6:23:e7:3b:5b:43:13:c9:53:88:f5:8b:c9:73:3d:
         13:42:05:02:93:7b:79:e1:1d:b3:41:e4:2f:44:c5:f5:de:e4:
         9c:e5:f8:ee:7b:4f:59:e6:cc:62:eb:5e:50:b3:54:b1:35:35:
         1f:cd:cc:d5:d9:2b:6b:ea:ef:d5:a1:e9:0b:c1:14:5e:ae:f3:
         e4:8f:e4:7b:28:3e:e0:89:f5:18:f4:c9:d8:47:c3:5d:b3:aa:
         cd:f8:d4:64:6f:83:81:56:76:6d:ae:5e:cf:03:b3:ff:49:a0:
         98:fe:47:c6:55:f7:e2:a2:b0:13:cb:b2:27:e0:aa:24:4f:0d:
         7c:7c:48:86:32:6f:ce:54:76:5b:d9:e6:a5:23:61:98:11:f8:
         4f:1c:d4:7d:f0:6d:fa:1f:1c:81:ca:37:2a:94:08:2b:e9:d1:
         4f:93:c5:2b:76:26:96:f4:1d:3e:fe:9b:e1:5e:5f:f6:9e:86:
         dc:6a:84:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:07 2024 by rpki-client on console-ams.rpki-client.org