Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/INFORICH/H8Z-NM_Wq5AEklWg__z9pTj-w_E.roa
File:                     H8Z-NM_Wq5AEklWg__z9pTj-w_E.roa (raw, json)
Hash identifier:          iY9X56ymkmNxmvo6J7tUxwCAbDcFfMRvtOMesbu5Zwo=
Subject key identifier:   1F:C6:7E:34:CF:D6:AB:90:04:92:55:A0:FF:FC:FD:A5:38:FE:C3:F1
Certificate issuer:       /CN=9197E979AFBB1BEC2EFC2647207560561BE900B6
Certificate serial:       040D
Authority key identifier: 91:97:E9:79:AF:BB:1B:EC:2E:FC:26:47:20:75:60:56:1B:E9:00:B6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/kZfpea-7G-wu_CZHIHVgVhvpALY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/INFORICH/H8Z-NM_Wq5AEklWg__z9pTj-w_E.roa
Signing time:             Fri 01 Sep 2023 09:04:05 +0000
ROA not before:           Fri 01 Sep 2023 09:04:05 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     131674
IP address blocks:        103.152.252.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1037 (0x40d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9197E979AFBB1BEC2EFC2647207560561BE900B6
        Validity
            Not Before: Sep  1 09:04:05 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=1FC67E34CFD6AB90049255A0FFFCFDA538FEC3F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:37:2c:9f:1e:ef:f4:58:c7:4b:ed:94:32:6f:
                    23:b8:80:51:64:c6:fb:2e:65:95:b3:46:d8:3e:88:
                    29:d2:8d:fe:ae:48:f2:b8:9f:9d:c8:15:ea:54:d6:
                    1e:1a:4c:73:35:6b:a0:18:8f:77:f2:f9:40:e6:fb:
                    bf:fd:fb:17:a6:55:79:03:9d:ff:35:84:9f:34:5b:
                    82:dc:12:d8:2d:fb:f4:a0:6d:6f:2d:cb:24:15:bb:
                    d2:eb:28:6b:95:3e:21:06:a5:3e:43:3b:b3:2c:72:
                    e0:6c:c6:49:69:38:cf:02:a4:29:40:ee:c3:40:73:
                    a9:6f:66:97:67:e2:23:24:02:bc:94:1e:6b:21:33:
                    17:2f:1f:1a:85:d0:35:5d:ca:09:ba:13:87:44:e6:
                    75:c3:c4:78:3d:b6:7f:45:08:aa:0c:a8:96:f0:0b:
                    86:4e:f5:d9:52:7e:e8:3e:35:98:75:72:00:47:54:
                    2f:b9:85:52:d9:f2:9b:1b:37:6a:ad:7f:99:db:05:
                    f5:6e:95:67:69:bd:d0:59:27:1c:4b:f4:5a:11:1c:
                    3d:d9:79:bc:00:03:b9:16:93:97:cc:44:5d:4b:b9:
                    ce:f6:cf:82:cb:be:ee:f3:e6:15:7c:9d:56:95:fd:
                    f4:28:68:93:20:4c:3c:c7:dd:eb:e9:23:2e:10:10:
                    45:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:C6:7E:34:CF:D6:AB:90:04:92:55:A0:FF:FC:FD:A5:38:FE:C3:F1
            X509v3 Authority Key Identifier:
                keyid:91:97:E9:79:AF:BB:1B:EC:2E:FC:26:47:20:75:60:56:1B:E9:00:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/INFORICH/kZfpea-7G-wu_CZHIHVgVhvpALY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/kZfpea-7G-wu_CZHIHVgVhvpALY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/INFORICH/H8Z-NM_Wq5AEklWg__z9pTj-w_E.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:9b:45:d7:12:be:1d:48:f0:b3:64:6c:e1:5d:62:3c:31:0d:
         b8:85:9a:03:75:13:fb:84:b6:e1:6b:d2:b0:2a:b9:a8:1a:6a:
         35:6b:f7:b3:9c:70:d8:1c:11:16:67:17:e3:ad:88:f4:80:f8:
         46:cc:eb:c9:8e:9f:3b:ff:ac:b1:3e:5f:fa:c2:05:53:31:f4:
         1d:c7:66:1b:f2:b2:e4:3d:78:ff:a1:18:1a:30:eb:12:02:a4:
         54:31:d6:40:98:83:e0:cc:a7:82:f1:4c:7e:e2:ac:90:1d:80:
         96:ad:82:aa:ab:d7:8c:3a:a9:da:23:bd:4c:96:cd:59:33:b7:
         cb:54:4c:88:a8:98:55:a6:0a:98:62:81:52:bf:9a:a8:e9:21:
         47:7e:43:ae:4e:5b:c3:9f:6b:5e:32:2c:5f:91:97:38:1e:69:
         2d:f9:df:ae:39:70:5d:b5:8f:1f:aa:89:86:86:98:39:a1:4b:
         1e:0f:37:37:39:8a:26:2b:70:b9:b5:a0:ff:52:15:41:0f:47:
         64:8e:57:ef:30:c2:f1:28:38:97:1d:3c:df:c6:de:dc:48:f6:
         06:b2:57:a4:55:2c:5b:de:20:c5:30:b2:b2:69:ae:ef:c4:54:
         f1:31:12:e0:1e:f3:a7:78:59:23:62:6f:62:45:d5:a6:8d:fc:
         72:7e:b0:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:20 2024 by rpki-client on console-fra.rpki-client.org