Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/IMCLOUD/c45q-jgdv2bI588pKm-4tiVA8Fk.roa
File:                     c45q-jgdv2bI588pKm-4tiVA8Fk.roa (raw, json)
Hash identifier:          NgFGPaKw1TntupTX29YydKusb2JgAxAo8dzxkKtrk2Q=
Subject key identifier:   73:8E:6A:FA:38:1D:BF:66:C8:E7:CF:29:2A:6F:B8:B6:25:40:F0:59
Certificate issuer:       /CN=61E0EE79428B85EDABB5F6EB9578EFB19E63C98F
Certificate serial:       0D98
Authority key identifier: 61:E0:EE:79:42:8B:85:ED:AB:B5:F6:EB:95:78:EF:B1:9E:63:C9:8F
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/YeDueUKLhe2rtfbrlXjvsZ5jyY8.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCLOUD/c45q-jgdv2bI588pKm-4tiVA8Fk.roa
Signing time:             Fri 01 Sep 2023 09:02:34 +0000
ROA not before:           Fri 01 Sep 2023 09:02:34 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     134823
IP address blocks:        103.137.22.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3480 (0xd98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61E0EE79428B85EDABB5F6EB9578EFB19E63C98F
        Validity
            Not Before: Sep  1 09:02:34 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=738E6AFA381DBF66C8E7CF292A6FB8B62540F059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:cb:5a:d9:3c:ea:bc:fa:36:15:fa:d4:1b:8d:
                    ea:be:4b:da:89:1f:f8:36:f6:6e:9f:54:2e:e8:5d:
                    55:c7:64:67:2c:4f:5c:c9:cf:4f:cf:43:1b:9a:ba:
                    9c:f5:62:4a:b8:e3:92:18:07:79:66:ac:be:de:56:
                    fd:8d:85:5f:c4:6c:68:7b:11:3f:14:60:c1:be:4e:
                    69:95:7c:e2:03:07:9c:e7:b4:a5:c8:91:31:5a:82:
                    f3:ec:d0:61:e1:d2:1a:49:85:b3:4d:21:16:90:59:
                    54:2c:9b:ad:e7:47:b0:48:b5:44:54:ab:84:41:e5:
                    77:35:6c:18:9a:2a:f5:87:fd:de:dc:39:c0:22:98:
                    71:fb:50:65:0a:93:59:0d:bc:58:81:f0:22:4e:54:
                    f9:7e:f1:b1:c9:dc:a5:b0:9f:51:0d:92:5f:2c:60:
                    af:7c:3b:14:8e:4a:70:5a:2a:8f:13:3e:24:85:cb:
                    60:31:d6:a5:c8:6e:7e:15:cb:d6:b4:a9:eb:7d:db:
                    05:d8:67:f8:51:dd:33:c1:08:75:d5:fc:e2:79:8c:
                    a0:b0:f2:5b:0c:fe:f4:24:64:2b:50:7c:da:83:f6:
                    7b:73:0b:8d:4b:e9:b3:8a:11:96:6b:65:19:5c:c5:
                    95:35:2a:21:65:33:8e:e6:05:13:5d:85:1a:90:d4:
                    f0:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:8E:6A:FA:38:1D:BF:66:C8:E7:CF:29:2A:6F:B8:B6:25:40:F0:59
            X509v3 Authority Key Identifier:
                keyid:61:E0:EE:79:42:8B:85:ED:AB:B5:F6:EB:95:78:EF:B1:9E:63:C9:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCLOUD/YeDueUKLhe2rtfbrlXjvsZ5jyY8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YeDueUKLhe2rtfbrlXjvsZ5jyY8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCLOUD/c45q-jgdv2bI588pKm-4tiVA8Fk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.137.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         af:ea:4a:14:26:e6:59:ed:08:42:ac:ba:59:9c:35:65:9e:48:
         d2:a8:a5:2a:a9:57:30:27:dd:45:5b:a7:4f:bd:aa:a8:8a:a1:
         f4:32:84:51:5e:8f:40:15:95:be:3a:98:a5:3b:4d:62:94:b1:
         fc:22:f6:92:cd:71:86:84:a2:49:d4:b7:bf:f0:b4:ad:3c:2d:
         4e:52:6f:75:40:70:c4:66:64:1c:ac:fd:b6:a7:8b:58:53:59:
         d5:41:38:8e:4c:9b:78:de:10:88:db:3a:43:1b:60:c3:5d:9a:
         14:92:c2:4b:45:dc:24:a6:eb:53:c6:f7:63:b5:9a:5f:3d:57:
         87:f9:af:88:e2:e9:5c:cd:2c:1b:f0:8a:e6:4b:c7:7a:96:01:
         92:06:99:27:37:fc:84:24:71:8a:75:e3:3a:cb:db:84:c1:21:
         74:e2:48:91:11:f5:dd:c2:48:d0:f8:4d:09:60:5a:0a:8c:30:
         c9:2d:2b:d8:27:f7:d8:93:d2:6b:76:a2:14:8f:b0:bc:84:68:
         82:37:d5:35:1d:d3:ce:e4:ea:c3:34:60:ff:76:cf:be:21:c4:
         10:25:9b:df:cf:d1:9e:95:e7:40:95:c1:a6:d9:9a:74:f5:db:
         34:be:31:1d:f9:fb:bd:63:7f:f8:b1:3c:a6:15:62:2f:35:2f:
         a5:a3:dc:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:20 2024 by rpki-client on console-fra.rpki-client.org