Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/IPV6PO/7V-C8Vc5uIh6CPMYsGBZQ9SrIvw.roa
File:                     7V-C8Vc5uIh6CPMYsGBZQ9SrIvw.roa (raw, json)
Hash identifier:          PBxZ87L6nFJ/agadpGJbEqwbjMeOIM6XKocyj1dSE4o=
Subject key identifier:   ED:5F:82:F1:57:39:B8:88:7A:08:F3:18:B0:60:59:43:D4:AB:22:FC
Certificate issuer:       /CN=931FFD22F0D53451D2C91569196A8973A767F8EE
Certificate serial:       05
Authority key identifier: 93:1F:FD:22:F0:D5:34:51:D2:C9:15:69:19:6A:89:73:A7:67:F8:EE
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/kx_9IvDVNFHSyRVpGWqJc6dn-O4.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/IPV6PO/7V-C8Vc5uIh6CPMYsGBZQ9SrIvw.roa
Signing time:             Thu 28 Dec 2023 08:38:24 +0000
ROA not before:           Thu 28 Dec 2023 08:38:24 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     18417
IP address blocks:        119.75.245.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=931FFD22F0D53451D2C91569196A8973A767F8EE
        Validity
            Not Before: Dec 28 08:38:24 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=ED5F82F15739B8887A08F318B0605943D4AB22FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:43:cd:12:dd:88:c0:3f:44:71:ed:32:82:6b:
                    e5:75:3e:34:86:44:36:c8:8f:fe:0b:13:21:7b:7b:
                    b3:c8:1e:21:25:a2:f1:1f:8f:bd:00:b1:4f:ee:b6:
                    a4:1d:b5:c4:6b:62:46:a5:61:f0:af:d7:e5:db:b6:
                    76:46:50:8a:93:e7:9b:9b:41:4d:19:a9:ab:a8:03:
                    f8:ee:7b:e8:7a:5f:aa:a0:c7:41:94:30:de:f2:28:
                    6e:db:82:4b:e9:23:49:ef:51:d0:75:fc:d6:cb:50:
                    c6:c4:c0:59:13:e4:4e:62:ab:3b:ef:28:18:04:d1:
                    61:c1:00:24:5f:79:a3:95:6d:79:26:8c:30:ce:d8:
                    33:f4:74:5a:e0:b7:8f:e3:d4:05:eb:32:db:54:9a:
                    21:e2:d7:e2:dd:58:75:47:4f:26:09:d2:aa:3b:fa:
                    09:5b:bf:2e:92:ec:ba:5d:cc:de:38:f4:81:ac:b5:
                    b2:0d:ab:06:9e:2e:57:24:1e:e6:62:b9:38:2f:c5:
                    47:16:b9:31:38:fe:b0:24:9a:dd:15:09:c4:a8:25:
                    b8:f6:8a:19:96:70:9a:de:f9:fb:75:2b:f5:03:53:
                    cc:ae:d5:67:4e:05:73:2d:4f:00:80:e7:df:2f:f5:
                    9c:82:ec:17:dd:4c:04:82:da:ad:db:1b:9f:46:f1:
                    b7:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:5F:82:F1:57:39:B8:88:7A:08:F3:18:B0:60:59:43:D4:AB:22:FC
            X509v3 Authority Key Identifier:
                keyid:93:1F:FD:22:F0:D5:34:51:D2:C9:15:69:19:6A:89:73:A7:67:F8:EE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IPV6PO/kx_9IvDVNFHSyRVpGWqJc6dn-O4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/kx_9IvDVNFHSyRVpGWqJc6dn-O4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IPV6PO/7V-C8Vc5uIh6CPMYsGBZQ9SrIvw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.75.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:4c:32:6c:ba:0a:b1:5e:bd:d1:c6:4f:c1:80:75:d4:e7:2f:
         95:c9:ae:8b:c7:fc:b9:d0:92:96:3c:e4:28:42:4d:86:49:c8:
         49:b2:28:fa:d0:eb:2c:05:54:fc:33:82:e8:88:23:76:9c:de:
         b0:e9:cf:19:47:2f:04:3a:ff:7d:25:21:7b:10:b9:75:e5:8b:
         6f:07:49:46:91:b6:67:0f:16:20:ca:44:fc:a9:3a:c6:f0:77:
         18:80:03:41:83:cb:22:04:40:3b:58:4a:32:e1:6e:6b:5b:2c:
         42:e5:3a:d0:3d:c5:f2:3b:14:bb:48:2e:cf:eb:c9:0a:c1:c0:
         82:53:fe:26:6b:4f:10:41:05:74:85:03:f7:06:ac:bd:6d:e6:
         62:b4:c0:b3:0d:2b:45:88:e2:47:ba:15:92:a2:1f:a4:ff:e3:
         f5:4e:d1:42:a4:c5:2c:2f:c1:38:f1:2c:6f:b2:54:9d:42:8d:
         1b:83:6b:01:d8:d7:ca:e0:8a:0c:a4:fe:34:1f:6e:f9:ad:6f:
         62:13:55:50:e3:3f:22:97:a8:39:fe:ef:ae:5e:04:8c:f4:85:
         24:8a:cb:a8:f2:c1:54:62:49:4d:8d:f2:31:b4:3e:14:eb:a5:
         48:dc:f0:13:54:ef:d7:71:ec:fb:aa:75:9a:40:cd:e8:a5:17:
         a8:9f:62:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:38 2024 by rpki-client on console-fra.rpki-client.org