Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/_rlbfTRvffaI8sBY-Chf4QZs8ec.roa
File:                     _rlbfTRvffaI8sBY-Chf4QZs8ec.roa (raw, json)
Hash identifier:          dInRd4Xjmvv71WI88Ua8CVDBhGADOrstT06W/plemyM=
Subject key identifier:   FE:B9:5B:7D:34:6F:7D:F6:88:F2:C0:58:F8:28:5F:E1:06:6C:F1:E7
Certificate issuer:       /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial:       0F5F
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/_rlbfTRvffaI8sBY-Chf4QZs8ec.roa
Signing time:             Fri 01 Sep 2023 08:57:00 +0000
ROA not before:           Fri 01 Sep 2023 08:57:00 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     198949
IP address blocks:        210.242.83.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3935 (0xf5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
        Validity
            Not Before: Sep  1 08:57:00 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=FEB95B7D346F7DF688F2C058F8285FE1066CF1E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:73:7c:41:c2:22:d7:63:84:a3:bd:25:04:d2:
                    d4:35:2f:b5:81:52:25:f3:4b:73:90:79:36:1a:b8:
                    13:4c:60:63:4a:c4:d2:29:e8:a1:4a:0e:c9:9d:70:
                    72:a9:56:a5:45:37:bb:8b:66:35:a2:6d:9b:6e:4d:
                    8b:a4:2f:37:2f:f5:85:eb:ad:59:74:0e:5c:94:74:
                    f3:42:93:e1:24:99:2a:e9:58:15:f6:66:7d:8f:a9:
                    4d:5e:8d:94:8c:e4:dc:f4:d1:a9:de:c7:92:00:dc:
                    59:11:13:22:0d:d5:fc:35:b0:96:5b:4f:bd:67:57:
                    47:e3:f8:f1:2d:de:17:42:b9:de:e8:b7:76:b2:21:
                    c9:c1:f9:a7:d3:5c:43:d9:48:08:27:c7:88:73:d4:
                    83:d1:77:86:d1:55:59:c3:60:48:ed:f9:6f:1d:36:
                    67:02:3b:9a:98:c9:18:5f:0c:03:f8:62:a0:17:80:
                    42:a8:ff:cc:d8:78:b9:a8:41:81:ae:2b:aa:4a:bc:
                    96:9d:43:9a:f5:a1:9b:8b:c2:d7:3f:dd:9e:a5:dd:
                    ea:02:83:31:42:28:9b:60:dd:e5:01:17:68:f1:70:
                    92:f0:03:be:04:b3:c4:ee:bb:0e:09:8d:25:a1:29:
                    ff:02:8f:a2:ed:70:c6:76:aa:49:a3:90:c9:67:7b:
                    0e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:B9:5B:7D:34:6F:7D:F6:88:F2:C0:58:F8:28:5F:E1:06:6C:F1:E7
            X509v3 Authority Key Identifier:
                keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/_rlbfTRvffaI8sBY-Chf4QZs8ec.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.242.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:83:bf:14:0c:1f:63:e8:22:5a:65:22:55:00:f3:62:55:55:
         dd:84:a9:32:f7:f0:61:9d:7c:7e:cb:65:66:0e:6d:29:bd:40:
         fd:23:8d:43:c7:50:98:ae:a7:b7:94:56:39:df:69:91:c5:a2:
         ba:86:92:3a:76:89:df:6b:bd:a3:60:ab:56:f0:70:ae:55:ce:
         3e:42:0b:50:b9:77:d5:4d:b2:21:f2:c2:d0:fd:fb:77:4f:9e:
         35:6f:93:d1:8e:f0:00:18:4c:ac:80:2c:ec:52:17:48:f6:a4:
         e9:2c:36:6b:bb:34:0e:92:9d:b1:ab:f1:55:f5:53:92:ca:01:
         8a:71:e1:ab:0d:2c:58:b0:5c:44:15:db:3e:b6:b8:69:8a:d5:
         56:a1:48:db:f0:4a:3a:9b:88:7b:65:b3:64:5e:70:2b:d6:d0:
         47:f6:c3:21:74:c1:56:ed:3e:a0:42:6a:09:3b:4d:3b:37:90:
         83:b1:53:ff:59:58:d3:91:32:73:88:8e:21:5e:fa:66:39:e5:
         4c:3a:2a:3e:af:5a:f0:4e:82:4a:6d:31:47:dc:ad:d4:9d:75:
         0e:d7:4c:12:92:6d:2f:cd:f9:bd:06:7b:76:8a:f1:0f:f4:30:
         16:0b:d5:c1:bc:39:30:85:5f:d8:aa:0e:e4:4a:60:23:f6:da:
         7e:25:64:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:13 2024 by rpki-client on console-ams.rpki-client.org