Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/JjPPtcZeYHrirTj4DxBxfUrcg2w.roa
File:                     JjPPtcZeYHrirTj4DxBxfUrcg2w.roa (raw, json)
Hash identifier:          FJmKSPTyFlHAV2rstikUdyatpZkyGywOW6dS3MIcajg=
Subject key identifier:   26:33:CF:B5:C6:5E:60:7A:E2:AD:38:F8:0F:10:71:7D:4A:DC:83:6C
Certificate issuer:       /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial:       0F3A
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/JjPPtcZeYHrirTj4DxBxfUrcg2w.roa
Signing time:             Fri 01 Sep 2023 08:56:47 +0000
ROA not before:           Fri 01 Sep 2023 08:56:47 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     54994
IP address blocks:        61.221.181.128/25 maxlen: 25

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3898 (0xf3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
        Validity
            Not Before: Sep  1 08:56:47 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=2633CFB5C65E607AE2AD38F80F10717D4ADC836C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:85:49:f2:1b:a3:a5:bd:59:bf:65:bb:2b:25:
                    37:e9:1d:5f:78:9c:ff:26:43:ed:17:20:71:81:b5:
                    76:c3:b0:98:c6:72:84:9c:ba:9a:04:02:51:d0:9b:
                    b1:f7:e6:fb:99:81:38:fb:3b:34:ce:f3:1f:8f:3a:
                    e8:f9:88:1d:b6:dd:68:3c:f6:d2:50:a2:44:b3:b4:
                    24:db:6f:76:8a:27:1d:a0:bc:64:a2:9a:c9:c9:39:
                    98:2e:28:6b:d8:8e:76:09:22:8b:63:d8:bd:e9:d8:
                    07:28:0f:28:4c:79:e5:26:ea:89:1a:51:64:9f:1b:
                    23:e2:ad:f9:68:54:68:f3:a7:fe:f7:80:11:84:af:
                    53:08:4a:0b:32:3f:e7:96:60:24:41:7a:e8:4c:38:
                    77:de:03:a2:81:66:20:98:8e:22:ff:52:35:1f:36:
                    84:4e:3a:a8:1e:f2:02:51:dd:bf:8e:fc:84:f1:6e:
                    4e:85:76:97:f8:4a:08:a1:b6:d8:ec:80:9c:fe:16:
                    a3:ca:56:1e:69:82:bd:d1:ea:ff:7b:6d:c3:b6:73:
                    db:dc:fa:ce:39:76:bb:4c:ad:7d:32:f9:c0:80:c4:
                    45:f6:ab:9a:8e:98:c9:33:76:4b:b2:58:e9:40:1a:
                    0e:9a:7f:ec:90:b7:8a:cd:cc:45:d5:ae:52:c8:9f:
                    b4:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:33:CF:B5:C6:5E:60:7A:E2:AD:38:F8:0F:10:71:7D:4A:DC:83:6C
            X509v3 Authority Key Identifier:
                keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/JjPPtcZeYHrirTj4DxBxfUrcg2w.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.221.181.128/25

    Signature Algorithm: sha256WithRSAEncryption
         43:e0:1b:6d:72:0a:b0:6a:ae:6d:50:b8:e2:a0:e5:e7:19:38:
         e8:f1:c7:ba:78:da:8c:96:69:ca:f6:0e:09:12:38:b5:08:43:
         e2:cf:e7:88:a1:56:6d:ff:cb:07:08:10:3d:2e:65:b1:a9:3a:
         3e:2f:48:10:4f:e8:c5:9c:56:bb:dc:62:bc:eb:29:d1:43:d8:
         58:69:4f:03:e4:77:f8:50:04:ee:84:7d:f6:e2:f3:65:dc:8c:
         a2:60:0a:fb:7a:54:2e:f0:b1:56:f9:1b:75:f4:1b:df:1b:54:
         24:bb:38:b6:84:3b:2e:b7:55:b0:a4:fc:6e:05:cd:04:69:17:
         40:6b:9a:14:34:e3:60:ec:e0:31:98:b0:80:34:7a:8a:d1:e2:
         e6:67:1a:9f:31:70:78:08:34:18:a1:c4:55:39:13:eb:69:66:
         65:9a:25:dc:9a:fa:55:45:27:97:19:ba:14:8a:14:51:b2:0e:
         de:a3:27:cd:de:73:b3:33:62:88:2f:7c:57:84:14:6b:ff:e8:
         e2:66:26:e3:5f:ab:d1:5f:0f:d6:a9:40:29:8d:6c:91:40:84:
         ff:7e:bd:1c:c7:6e:f8:f7:1c:b6:57:19:f6:a6:4d:3d:ee:cc:
         49:4b:86:93:b6:18:21:24:17:98:0a:dd:56:2d:9f:fc:f4:d7:
         17:3f:cd:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:13 2024 by rpki-client on console-ams.rpki-client.org