Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/t8ugT-7mpphV0DyuXpeD7BLb0tc.roa
File:                     t8ugT-7mpphV0DyuXpeD7BLb0tc.roa (raw, json)
Hash identifier:          SWqEtt3RXRE8xvf8kClycmYcCt/yXR+7vtOKgc6nFrs=
Subject key identifier:   B7:CB:A0:4F:EE:E6:A6:98:55:D0:3C:AE:5E:97:83:EC:12:DB:D2:D7
Certificate issuer:       /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial:       0FC3
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/t8ugT-7mpphV0DyuXpeD7BLb0tc.roa
Signing time:             Fri 01 Sep 2023 08:57:27 +0000
ROA not before:           Fri 01 Sep 2023 08:57:27 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     3462
IP address blocks:        1.34.0.0/15 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4035 (0xfc3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
        Validity
            Not Before: Sep  1 08:57:27 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=B7CBA04FEEE6A69855D03CAE5E9783EC12DBD2D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:97:7f:ff:3c:52:25:3e:ac:83:d8:be:81:3f:
                    38:18:32:dc:0d:9b:99:a8:3a:59:b1:91:44:8e:29:
                    15:ab:2f:13:ed:08:0c:bf:e6:da:b7:8d:a9:79:1f:
                    9f:2c:33:26:b0:3e:69:40:51:03:26:06:11:c5:0f:
                    d8:bc:c3:16:89:d3:21:00:08:1b:65:52:46:44:0f:
                    5e:68:61:14:e2:37:74:e0:6c:66:c5:2c:9e:8e:b6:
                    6b:57:c8:8d:c5:4d:e5:c2:6c:18:15:d6:56:55:cd:
                    8d:d5:f8:03:e8:d8:a5:77:3a:4b:a6:4f:fe:3f:77:
                    6b:68:c2:8b:7f:98:91:c8:09:3d:8c:69:f9:7a:26:
                    44:6b:c0:8b:78:a3:c0:19:24:d2:ba:dc:5c:c9:8e:
                    af:79:2a:36:4d:4a:cc:49:1e:07:16:c3:1c:80:f4:
                    2e:ce:6e:e9:c9:4b:8d:b2:bc:ae:60:47:d2:c6:5d:
                    ed:ac:4b:ab:c7:91:05:6b:f7:d2:99:80:ec:0b:1c:
                    5b:90:d1:33:84:c2:0a:39:ba:96:0b:1d:7e:83:de:
                    fc:0f:f7:79:f4:8c:91:28:93:a7:00:80:65:5a:df:
                    6d:cb:2a:5d:e3:e5:4a:fc:3b:5e:69:ac:c3:9a:6e:
                    e7:75:22:98:dc:c6:48:8b:1d:60:72:e8:61:c4:d5:
                    10:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:CB:A0:4F:EE:E6:A6:98:55:D0:3C:AE:5E:97:83:EC:12:DB:D2:D7
            X509v3 Authority Key Identifier:
                keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/t8ugT-7mpphV0DyuXpeD7BLb0tc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.34.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         c4:82:61:6b:7e:af:16:09:6f:dc:36:34:60:a6:a2:79:5a:e0:
         97:38:e0:db:87:50:4e:ad:36:f1:ce:a3:53:aa:65:c3:00:b8:
         b6:db:d4:4a:73:d6:e1:0e:43:d6:b6:bd:e8:1b:71:de:e1:7a:
         5c:51:48:1f:22:a2:f1:93:a1:3d:a4:d6:83:29:05:1a:2a:a6:
         b8:29:f7:c4:49:25:86:9e:33:d4:83:89:be:d1:2a:74:c2:08:
         bc:6a:33:9c:a3:27:91:50:7d:e5:c4:be:dc:29:17:21:bc:ad:
         39:a6:ff:eb:cf:89:29:f6:a2:68:e9:91:01:90:dd:4e:bf:22:
         fb:e6:7c:10:39:c7:43:36:95:e3:dd:cc:d6:c8:4f:08:c3:8c:
         dc:19:7f:9a:20:3d:65:28:38:ea:2c:63:0b:b1:af:4c:3f:16:
         3e:55:19:49:b1:51:ca:b0:5d:39:d2:12:7a:d8:a1:a3:d9:40:
         d5:6c:e2:7d:fc:5c:76:82:84:5c:03:ce:c2:5b:d1:5b:d9:0b:
         1d:c0:66:39:11:7c:ef:33:57:ad:c1:c2:67:58:b7:29:66:af:
         98:2e:c2:47:dc:b5:24:8a:9f:be:a9:51:7c:45:c0:4b:ec:7e:
         89:bc:a7:16:27:c3:c9:e3:a5:70:79:07:cb:0f:a0:b1:da:a2:
         a9:e6:52:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:20 2024 by rpki-client on console-fra.rpki-client.org