Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GRONEXT/Ze4IwyDcQVMf-_DMg3unIm3-xKo.roa
File:                     Ze4IwyDcQVMf-_DMg3unIm3-xKo.roa (raw, json)
Hash identifier:          HfWZuj3pwkm3AFyBGj8oya0WpXClcI3nfKCaJwy1Svw=
Subject key identifier:   65:EE:08:C3:20:DC:41:53:1F:FB:F0:CC:83:7B:A7:22:6D:FE:C4:AA
Certificate issuer:       /CN=1A610A62A8A72CD36C1D22C7085EDF1809518994
Certificate serial:       08AC
Authority key identifier: 1A:61:0A:62:A8:A7:2C:D3:6C:1D:22:C7:08:5E:DF:18:09:51:89:94
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GmEKYqinLNNsHSLHCF7fGAlRiZQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/GRONEXT/Ze4IwyDcQVMf-_DMg3unIm3-xKo.roa
Signing time:             Fri 01 Sep 2023 08:54:30 +0000
ROA not before:           Fri 01 Sep 2023 08:54:30 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     131667
IP address blocks:        103.146.210.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2220 (0x8ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A610A62A8A72CD36C1D22C7085EDF1809518994
        Validity
            Not Before: Sep  1 08:54:30 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=65EE08C320DC41531FFBF0CC837BA7226DFEC4AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ad:8b:09:5b:64:2b:7c:8e:14:af:0c:b9:30:
                    91:ab:a0:8f:6c:f9:86:14:91:39:c0:68:73:88:da:
                    fc:41:1b:29:ca:50:f8:9a:40:ff:b5:b3:dc:81:fb:
                    d6:14:5d:55:6c:5f:81:ff:aa:cf:5d:ae:3f:64:a7:
                    64:45:28:86:46:e1:e7:92:c8:9e:7c:ac:28:f8:94:
                    2a:54:3f:f3:23:85:c4:d1:e0:b1:f1:0d:c5:7d:0b:
                    33:13:7c:a5:a1:8c:c1:5f:af:71:32:2a:95:d4:86:
                    a4:fe:d2:5e:0e:c9:b8:1f:44:56:15:5c:f9:d2:da:
                    0c:a9:fb:0b:61:c2:af:31:9b:a5:61:28:21:83:b7:
                    45:98:5e:5b:1a:d6:f6:8f:aa:f7:34:67:35:6f:fc:
                    a6:ad:29:cf:7f:01:05:29:35:23:c4:84:61:df:96:
                    92:5d:dc:ee:36:33:b0:c1:b1:6d:ee:d0:bf:f6:4c:
                    0e:50:c9:d4:ec:d6:77:ac:36:e6:09:97:c4:58:fd:
                    4d:7f:44:de:f8:15:9c:a1:0b:1c:93:fa:c2:8f:3d:
                    cf:50:27:32:7c:10:a6:85:bc:b3:9a:64:54:fa:1c:
                    3f:17:6e:de:5c:3f:65:df:d2:3d:d8:a4:f7:75:87:
                    6a:21:d9:5d:0c:1d:fe:44:ee:66:7f:51:6b:07:15:
                    2a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:EE:08:C3:20:DC:41:53:1F:FB:F0:CC:83:7B:A7:22:6D:FE:C4:AA
            X509v3 Authority Key Identifier:
                keyid:1A:61:0A:62:A8:A7:2C:D3:6C:1D:22:C7:08:5E:DF:18:09:51:89:94

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GRONEXT/GmEKYqinLNNsHSLHCF7fGAlRiZQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GmEKYqinLNNsHSLHCF7fGAlRiZQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GRONEXT/Ze4IwyDcQVMf-_DMg3unIm3-xKo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a7:60:a8:26:5f:be:a7:56:c9:6b:ec:20:50:b0:93:88:b0:37:
         eb:3e:cb:fb:a8:dc:d0:ef:21:0c:81:cd:94:58:ef:2f:08:6e:
         96:bd:d0:58:80:81:7e:91:35:fc:c8:57:07:97:8a:92:35:b6:
         00:4d:15:54:cb:58:47:b3:91:1a:04:61:82:f9:65:e2:48:84:
         91:9e:91:37:6d:fc:93:82:9f:86:3f:ed:ac:ff:59:6a:d3:c4:
         0c:22:fc:00:29:86:9b:5d:8b:d9:47:fb:3e:50:38:a0:e4:23:
         23:6c:79:d9:48:e2:d9:10:9c:96:b0:ec:09:f1:79:fc:b3:55:
         7a:e9:99:67:b7:1d:9e:4e:43:87:23:66:a6:aa:90:25:63:c2:
         5b:31:97:6e:77:a6:27:b1:c0:2d:64:41:5b:18:6f:6a:62:e7:
         01:64:c5:1a:84:fb:5e:16:89:af:3f:bb:29:5a:62:60:d6:27:
         46:6d:e5:b0:ca:22:e3:44:2e:7d:44:74:9d:a3:5a:29:61:9c:
         ff:8a:15:33:7a:cb:c2:ce:f0:94:55:9e:66:43:d8:3a:76:11:
         65:b3:c0:e7:aa:76:74:a2:63:07:62:5f:84:8d:34:dc:00:e8:
         b7:ea:57:32:b4:e8:2e:bb:bd:c8:08:e1:b3:b2:50:b8:79:83:
         b1:12:8c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:20 2024 by rpki-client on console-fra.rpki-client.org