Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HONGJAY/B_H6pba-MUkuouuz2KuOWffPrDw.roa
File:                     B_H6pba-MUkuouuz2KuOWffPrDw.roa (raw, json)
Hash identifier:          TnO4YNFIxwgs/ZKlCKWnHGfQO5xiR/YAsQagV30dM+k=
Subject key identifier:   07:F1:FA:A5:B6:BE:31:49:2E:A2:EB:B3:D8:AB:8E:59:F7:CF:AC:3C
Certificate issuer:       /CN=324A7E6EBF678F98B87228EC8466C3690A43DDB6
Certificate serial:       0B12
Authority key identifier: 32:4A:7E:6E:BF:67:8F:98:B8:72:28:EC:84:66:C3:69:0A:43:DD:B6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Mkp-br9nj5i4cijshGbDaQpD3bY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGJAY/B_H6pba-MUkuouuz2KuOWffPrDw.roa
Signing time:             Fri 01 Sep 2023 09:00:05 +0000
ROA not before:           Fri 01 Sep 2023 09:00:05 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     18046
IP address blocks:        220.158.228.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2834 (0xb12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=324A7E6EBF678F98B87228EC8466C3690A43DDB6
        Validity
            Not Before: Sep  1 09:00:05 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=07F1FAA5B6BE31492EA2EBB3D8AB8E59F7CFAC3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:21:06:58:1a:d3:f7:26:48:46:24:c1:93:ec:
                    99:f0:e1:3e:02:0e:54:c4:a8:75:50:04:a8:05:8d:
                    5b:e9:3f:87:cc:10:0a:22:1f:1a:67:6a:e9:e2:3a:
                    20:19:06:31:07:ab:a8:b1:0f:15:4a:b5:8c:45:68:
                    6f:31:93:5a:48:e8:6d:d3:cd:77:93:11:fe:5c:93:
                    5f:f0:f4:15:3c:f2:89:d6:cf:7b:5a:cc:3a:b9:ed:
                    b6:d7:1d:ca:27:21:9c:be:c6:07:14:5f:07:87:5f:
                    e7:b9:56:48:06:9d:ae:21:1b:57:e2:d5:92:b0:c2:
                    a7:6b:84:b1:e6:dd:9a:bb:56:ac:22:d8:3c:d1:88:
                    ba:43:33:78:7f:0b:7c:1a:34:33:05:09:86:22:71:
                    95:28:cf:a9:7c:e3:bd:3e:2d:09:97:c1:d6:9a:54:
                    7b:12:33:ce:5d:80:14:dc:dc:65:22:b6:c0:ed:f4:
                    bf:47:06:ba:3d:10:27:a0:b9:d5:ac:3d:66:cd:36:
                    0e:16:91:3e:54:e4:50:b4:2b:7c:96:d0:ef:0e:11:
                    82:d5:38:99:08:ef:92:8b:a6:d3:3e:73:4f:05:28:
                    b2:f3:b4:5b:f8:a9:8e:ee:da:68:87:bb:26:41:d8:
                    c8:a8:2d:07:b3:44:48:a6:9d:25:1a:36:b9:ad:32:
                    1f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:F1:FA:A5:B6:BE:31:49:2E:A2:EB:B3:D8:AB:8E:59:F7:CF:AC:3C
            X509v3 Authority Key Identifier:
                keyid:32:4A:7E:6E:BF:67:8F:98:B8:72:28:EC:84:66:C3:69:0A:43:DD:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGJAY/Mkp-br9nj5i4cijshGbDaQpD3bY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Mkp-br9nj5i4cijshGbDaQpD3bY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGJAY/B_H6pba-MUkuouuz2KuOWffPrDw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.158.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:78:af:48:91:70:5d:72:6f:a4:9a:ce:63:e1:7b:5a:a4:e8:
         23:7c:cd:2f:ab:e3:fd:93:25:0e:12:6e:4b:f7:0a:cd:7e:e8:
         f3:59:f1:45:5a:d1:81:18:b8:57:f2:44:78:f5:21:d7:6c:c5:
         b0:5d:85:77:6e:30:61:d3:50:b7:1b:95:7a:38:55:61:86:cd:
         6c:28:c8:57:9a:4a:5b:f6:24:32:59:ed:70:b4:d6:55:bb:b1:
         8a:ea:a0:4b:5d:98:8a:a8:e8:af:ee:41:61:f7:75:48:9b:32:
         67:56:3e:dd:c6:0b:11:45:80:83:a8:b8:93:d4:bf:1f:ab:ea:
         2b:a0:3f:91:54:9a:11:4d:07:f7:2b:0a:65:87:e2:df:d8:2a:
         c4:f6:c7:73:e5:60:ef:43:8c:77:f8:d8:79:c7:88:cc:9b:cf:
         55:f0:0d:30:59:18:1f:e3:80:b9:29:c8:cd:f6:6c:c3:ca:12:
         f8:b7:7b:04:2a:ac:57:27:77:c0:45:ce:97:d7:50:4c:0a:b4:
         95:8a:6e:7d:b9:2a:ce:a8:70:05:86:57:8e:22:d3:5e:4f:ab:
         64:42:ba:b1:4c:88:7b:a7:45:bd:26:6e:69:52:06:09:14:57:
         7a:18:0e:37:8d:ba:c4:64:1d:83:b7:ab:86:55:db:ff:50:1d:
         79:1a:00:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:13 2024 by rpki-client on console-ams.rpki-client.org