Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HONGDA/YUxygLnf3DbXvOqijfsmqsBv9TE.roa
File:                     YUxygLnf3DbXvOqijfsmqsBv9TE.roa (raw, json)
Hash identifier:          32FwMqKzmI/VPpa1a6G/B47muw/EbIgixGD5mR6wQSQ=
Subject key identifier:   61:4C:72:80:B9:DF:DC:36:D7:BC:EA:A2:8D:FB:26:AA:C0:6F:F5:31
Certificate issuer:       /CN=257DB7B9919975697366B7014F8CFE28EF364E73
Certificate serial:       05BD
Authority key identifier: 25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/YUxygLnf3DbXvOqijfsmqsBv9TE.roa
Signing time:             Thu 12 Oct 2023 08:30:24 +0000
ROA not before:           Thu 12 Oct 2023 08:30:24 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     134823
IP address blocks:        103.122.191.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1469 (0x5bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=257DB7B9919975697366B7014F8CFE28EF364E73
        Validity
            Not Before: Oct 12 08:30:24 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=614C7280B9DFDC36D7BCEAA28DFB26AAC06FF531
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ec:16:b6:69:e7:27:4c:3a:0c:79:17:d4:ca:
                    c5:b7:27:c7:dd:7a:61:b2:c3:27:7c:81:c7:78:78:
                    ed:07:8b:a0:2b:74:57:b9:5a:e2:bc:cf:96:2a:e3:
                    f2:6e:52:f3:f0:57:11:89:f3:af:70:cf:85:66:f1:
                    de:8e:a7:5a:06:b2:db:88:f6:de:02:52:ab:f9:87:
                    3f:9b:64:22:0d:98:48:78:2a:1d:30:cf:bf:fb:81:
                    aa:72:de:26:0a:b0:e3:6b:cf:51:1d:a6:90:e9:c1:
                    e6:f1:6a:44:20:bb:b4:a9:28:ba:61:80:9c:12:3f:
                    fb:29:93:89:7c:f0:cf:a5:b3:70:95:b4:49:c4:9a:
                    03:40:73:19:5f:a5:27:cf:31:67:42:aa:68:8c:18:
                    f6:31:70:8c:95:5e:db:11:ff:97:db:fc:53:59:5a:
                    55:8f:9f:c6:f8:7d:4c:bc:38:7e:aa:9f:e5:d7:c8:
                    56:6b:e1:16:1d:d8:1a:f8:1b:18:00:46:2a:30:cb:
                    c9:f5:fb:12:eb:8e:9e:64:e9:f8:9d:26:90:80:53:
                    df:e4:0f:28:e9:3e:d7:24:32:48:e1:4a:d9:9c:67:
                    c4:25:ac:03:f0:f4:47:1b:42:64:a0:a4:16:c3:fa:
                    28:ef:51:ca:1d:36:7f:15:de:22:a4:13:45:11:ec:
                    58:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:4C:72:80:B9:DF:DC:36:D7:BC:EA:A2:8D:FB:26:AA:C0:6F:F5:31
            X509v3 Authority Key Identifier:
                keyid:25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/YUxygLnf3DbXvOqijfsmqsBv9TE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.122.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:c3:ec:1e:e3:c7:eb:0c:37:f5:7c:05:57:e1:ae:79:1b:0f:
         03:b7:cd:df:84:1a:a4:09:47:98:13:a5:5f:d0:1c:61:4a:61:
         e2:f7:a7:ec:fb:18:5e:f4:96:1f:18:6f:f9:81:58:b8:1c:7a:
         b1:c9:dd:4a:5f:b0:57:50:f4:c0:67:c9:17:9c:fc:fc:f9:d1:
         14:72:0e:45:d6:f5:0a:e0:5b:0b:41:d3:fb:cb:1f:6c:df:bd:
         95:63:c6:a3:bd:bc:fb:71:1d:43:a5:fd:ed:8f:8e:7a:24:f3:
         b9:3e:55:d2:c4:9d:8d:04:8d:b0:5a:de:66:ad:f6:a7:cd:4b:
         be:d7:b5:94:33:ac:fb:85:f4:49:50:44:d7:fa:62:2f:8b:10:
         3c:10:99:51:e3:0c:71:7b:db:dc:1d:03:1a:4c:44:43:62:96:
         f6:f5:ea:dc:4f:4c:b0:63:16:71:0d:2a:c2:54:1c:90:e3:c9:
         cc:a8:60:b7:79:b4:87:9d:17:51:90:93:f1:fd:b8:35:ee:a7:
         16:a8:4d:d7:2c:3c:30:3a:da:de:94:a5:3e:ee:02:18:be:c8:
         68:6f:96:bc:0b:99:92:c8:41:2e:09:58:17:de:93:33:d4:0a:
         e1:25:c3:a6:67:1b:fa:6a:b1:2c:a8:3a:5e:b6:96:d1:cb:65:
         8f:fc:fb:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:13 2024 by rpki-client on console-ams.rpki-client.org