Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GCMM/a8RWtbsU50hj7kJTFRgapLG-xQI.roa
File:                     a8RWtbsU50hj7kJTFRgapLG-xQI.roa (raw, json)
Hash identifier:          cXu3e8oRJCecf1HNA9tBZ/MjlaotBP7FfyA5NQhOfxY=
Subject key identifier:   6B:C4:56:B5:BB:14:E7:48:63:EE:42:53:15:18:1A:A4:B1:BE:C5:02
Certificate issuer:       /CN=8092F614E0EF75395097E896469BC8B7B319D852
Certificate serial:       11F0
Authority key identifier: 80:92:F6:14:E0:EF:75:39:50:97:E8:96:46:9B:C8:B7:B3:19:D8:52
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/gJL2FODvdTlQl-iWRpvIt7MZ2FI.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/GCMM/a8RWtbsU50hj7kJTFRgapLG-xQI.roa
Signing time:             Fri 01 Sep 2023 08:52:13 +0000
ROA not before:           Fri 01 Sep 2023 08:52:13 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     18046
IP address blocks:        103.130.36.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4592 (0x11f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8092F614E0EF75395097E896469BC8B7B319D852
        Validity
            Not Before: Sep  1 08:52:13 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=6BC456B5BB14E74863EE425315181AA4B1BEC502
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:18:18:a1:91:2f:20:7f:a5:b9:b8:fc:7f:08:
                    78:7c:dc:c5:a6:7c:56:e4:2b:a6:ac:2e:68:67:2e:
                    3d:ed:c9:2e:93:e1:68:33:5d:d0:0a:53:2c:f5:a7:
                    aa:be:d5:dc:b3:64:f2:dc:5c:9b:9f:fc:4b:a6:ac:
                    a8:fa:46:bf:31:b9:cf:c0:aa:ba:ef:96:0f:64:48:
                    64:9e:53:f3:40:30:55:e0:9c:a7:26:01:3c:2a:9d:
                    11:b3:f3:a9:a3:7d:73:d9:d9:17:fa:88:8c:6c:92:
                    09:08:0b:8f:45:13:ae:ba:77:e1:9f:26:e3:34:93:
                    d7:f6:9d:7d:68:1a:44:23:d5:27:ab:62:bc:21:81:
                    88:39:da:24:4a:86:65:d3:1c:5b:1e:ac:f8:1c:90:
                    11:ff:f2:8d:a6:28:56:a8:b5:61:7a:b9:b2:ff:52:
                    7c:f8:ad:46:e5:c1:19:52:cd:6f:a8:15:1a:3d:55:
                    79:9f:f6:e8:8a:ce:df:d8:bf:11:cb:5f:aa:29:e6:
                    20:98:9c:cc:ba:90:5c:07:da:f7:6e:29:ee:9a:a4:
                    f2:68:63:16:d3:99:d8:1c:d5:fa:37:b5:73:8e:b8:
                    fc:2b:8e:37:8a:1f:02:bd:4d:a9:97:62:b2:56:a1:
                    3f:31:17:d9:1f:1f:3c:f8:38:9f:1b:d1:ee:52:9c:
                    c7:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:C4:56:B5:BB:14:E7:48:63:EE:42:53:15:18:1A:A4:B1:BE:C5:02
            X509v3 Authority Key Identifier:
                keyid:80:92:F6:14:E0:EF:75:39:50:97:E8:96:46:9B:C8:B7:B3:19:D8:52

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GCMM/gJL2FODvdTlQl-iWRpvIt7MZ2FI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gJL2FODvdTlQl-iWRpvIt7MZ2FI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GCMM/a8RWtbsU50hj7kJTFRgapLG-xQI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:d9:0e:de:fb:79:af:16:70:47:05:31:a8:87:24:ad:1d:e2:
         0a:b5:0b:60:5f:30:da:41:49:57:3e:ab:6d:67:43:de:88:6b:
         5b:09:c3:01:1f:2b:c4:d9:0b:bb:76:1f:e6:99:cf:38:ff:48:
         cf:fb:ac:30:36:bf:68:40:0a:65:64:ee:16:2d:fb:f0:4c:cb:
         49:a8:db:34:93:76:8b:2d:97:89:b7:22:47:c8:32:67:b8:40:
         4a:7d:9c:39:cf:a1:32:28:82:c8:58:a8:69:b3:d5:e5:cd:3f:
         c4:a5:86:d2:5f:a8:8c:86:6b:10:d1:ed:e1:be:6b:ed:f0:ba:
         d1:52:11:e1:61:e9:b2:1c:01:b3:be:43:b1:3a:66:5c:99:f2:
         6e:86:a2:9b:11:49:2f:5c:e0:d8:19:a5:51:2b:39:bd:f3:9c:
         c1:ed:fc:14:0e:7e:d5:ad:29:78:63:98:89:a1:b0:44:ad:64:
         f0:fb:81:67:6a:0f:f1:bc:81:41:cc:33:b3:54:f4:3d:6d:88:
         1e:88:29:2e:52:04:54:96:2c:c6:78:b5:8c:73:8c:b5:40:07:
         66:a0:10:2c:2f:1f:9c:d8:21:ae:b6:8a:c9:95:a9:7a:01:39:
         74:b6:b0:9f:86:83:7a:4f:90:ee:0c:ca:9a:f2:d7:5e:0d:3c:
         73:05:a2:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:07 2024 by rpki-client on console-ams.rpki-client.org