Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/msICjnuxsA2kgKe6h4KIlcaYKII.roa
File:                     msICjnuxsA2kgKe6h4KIlcaYKII.roa (raw, json)
Hash identifier:          2jUurzYhhS+NVby53brW1id8yDJKV0QHtV26N9FumNw=
Subject key identifier:   9A:C2:02:8E:7B:B1:B0:0D:A4:80:A7:BA:87:82:88:95:C6:98:28:82
Certificate issuer:       /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial:       0F49
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/msICjnuxsA2kgKe6h4KIlcaYKII.roa
Signing time:             Fri 01 Sep 2023 08:56:52 +0000
ROA not before:           Fri 01 Sep 2023 08:56:52 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     15133
IP address blocks:        61.221.181.64/26 maxlen: 26

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3913 (0xf49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
        Validity
            Not Before: Sep  1 08:56:52 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=9AC2028E7BB1B00DA480A7BA87828895C6982882
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:90:27:0e:79:16:57:7c:cc:f0:5f:bd:a5:25:
                    4e:73:48:08:38:70:fc:5a:be:6c:70:35:de:4a:34:
                    98:2d:67:ee:38:ed:a5:1b:4a:eb:86:5b:0e:07:7d:
                    b1:db:2e:c3:7f:f0:58:06:8a:25:97:ce:4c:4e:d8:
                    e9:12:78:e7:f3:ef:45:80:18:a3:60:34:f0:6a:22:
                    85:b4:65:a1:c5:de:82:2f:9d:37:eb:7f:d6:31:ce:
                    5d:94:67:20:18:3a:bb:be:71:47:a3:b6:92:56:df:
                    95:98:01:6c:3c:4b:a4:d2:9b:3d:fb:5b:60:f0:37:
                    a6:71:7b:d5:ef:74:a9:6a:f8:3c:11:3c:66:b7:ec:
                    73:01:9f:3e:1f:04:24:95:f1:4d:94:b7:09:2f:cf:
                    05:ee:95:8c:ec:06:41:ec:e9:21:7d:31:94:53:b1:
                    c7:d7:de:d7:0f:7c:27:dc:43:fd:8c:19:77:fb:df:
                    71:be:a1:1a:4e:5d:98:f5:ed:9d:9d:3f:36:d6:1a:
                    cd:28:24:67:1a:f5:d1:90:63:ba:61:de:49:fb:af:
                    43:bd:34:f0:d6:f8:2b:f1:ac:f9:d5:cd:9a:00:6f:
                    1d:dd:00:17:6a:9c:2c:f7:66:4b:86:78:93:fe:3b:
                    d4:87:e0:f0:29:77:dd:a9:4c:54:63:55:18:6e:1c:
                    bd:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:C2:02:8E:7B:B1:B0:0D:A4:80:A7:BA:87:82:88:95:C6:98:28:82
            X509v3 Authority Key Identifier:
                keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/msICjnuxsA2kgKe6h4KIlcaYKII.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.221.181.64/26

    Signature Algorithm: sha256WithRSAEncryption
         84:a9:66:b0:9b:15:60:de:cf:9c:22:d8:14:86:54:97:04:60:
         ee:ae:f5:de:8c:d2:8d:c0:53:a2:16:ae:10:75:6e:8f:54:75:
         95:49:c6:1e:63:5b:65:00:1e:8e:67:de:db:6f:56:8e:1b:36:
         9f:2b:2a:44:c5:a5:ce:43:ec:65:41:55:c9:2b:e1:f5:6b:bd:
         ff:06:45:46:50:bc:0a:57:37:5d:96:f0:fa:28:7f:e8:e5:ab:
         5f:a5:47:17:01:52:2a:ea:46:e3:04:fb:78:57:c5:1e:74:08:
         08:a9:0d:25:07:63:37:49:11:43:a1:2f:40:54:0b:42:40:88:
         16:81:b5:d5:c5:ec:5b:e0:57:b6:77:cf:80:6d:fe:df:0e:da:
         08:9f:2b:6d:42:c7:05:13:74:83:13:09:45:c2:9b:91:ef:a4:
         0e:af:35:f1:96:76:46:d2:d2:08:7d:23:5c:a9:ab:74:e5:8a:
         24:b6:b9:8e:43:c3:9d:8e:f1:8c:73:75:61:f1:a4:56:60:b8:
         8a:b1:02:88:7b:1b:11:5a:b3:fe:af:04:08:81:6c:70:6e:83:
         2b:e7:70:f3:07:5e:01:d8:77:39:8e:6d:02:80:49:cb:d5:ca:
         24:36:22:db:fe:43:e3:a1:4c:a6:b8:19:cf:01:8e:bf:65:05:
         30:f4:f7:60
-----BEGIN CERTIFICATE-----
MIIE0TCCA7mgAwIBAgICD0kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMzA5MDEw
ODU2NTJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDlBQzIwMjhFN0JCMUIw
MERBNDgwQTdCQTg3ODI4ODk1QzY5ODI4ODIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCjkCcOeRZXfMzwX72lJU5zSAg4cPxavmxwNd5KNJgtZ+447aUb
SuuGWw4HfbHbLsN/8FgGiiWXzkxO2OkSeOfz70WAGKNgNPBqIoW0ZaHF3oIvnTfr
f9Yxzl2UZyAYOru+cUejtpJW35WYAWw8S6TSmz37W2DwN6Zxe9XvdKlq+DwRPGa3
7HMBnz4fBCSV8U2UtwkvzwXulYzsBkHs6SF9MZRTscfX3tcPfCfcQ/2MGXf733G+
oRpOXZj17Z2dPzbWGs0oJGca9dGQY7ph3kn7r0O9NPDW+CvxrPnVzZoAbx3dABdq
nCz3ZkuGeJP+O9SH4PApd92pTFRjVRhuHL1dAgMBAAGjggHtMIIB6TAdBgNVHQ4E
FgQUmsICjnuxsA2kgKe6h4KIlcaYKIIwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9tc0lDam51eHNBMmtnS2U2aDRL
SWxjYVlLSUkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUGPd21
QDANBgkqhkiG9w0BAQsFAAOCAQEAhKlmsJsVYN7PnCLYFIZUlwRg7q713ozSjcBT
ohauEHVuj1R1lUnGHmNbZQAejmfe229Wjhs2nysqRMWlzkPsZUFVySvh9Wu9/wZF
RlC8Clc3XZbw+ih/6OWrX6VHFwFSKupG4wT7eFfFHnQICKkNJQdjN0kRQ6EvQFQL
QkCIFoG11cXsW+BXtnfPgG3+3w7aCJ8rbULHBRN0gxMJRcKbke+kDq818ZZ2RtLS
CH0jXKmrdOWKJLa5jkPDnY7xjHN1YfGkVmC4irECiHsbEVqz/q8ECIFscG6DK+dw
8wdeAdh3OY5tAoBJy9XKJDYi2/5D46FMprgZzwGOv2UFMPT3YA==
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:20 2024 by rpki-client on console-fra.rpki-client.org