Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/META/SnhVHvoyZV-qE8UWz_ukQu7LE4k.roa
File:                     SnhVHvoyZV-qE8UWz_ukQu7LE4k.roa (raw, json)
Hash identifier:          TjfQ/ugwGGVlPp6GlmcV/2wP0528JuaDNnxw3gXurdM=
Subject key identifier:   4A:78:55:1E:FA:32:65:5F:AA:13:C5:16:CF:FB:A4:42:EE:CB:13:89
Certificate issuer:       /CN=C87695C6B48F13DD56A76B299DD54D8F1EB369D5
Certificate serial:       0E31
Authority key identifier: C8:76:95:C6:B4:8F:13:DD:56:A7:6B:29:9D:D5:4D:8F:1E:B3:69:D5
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/yHaVxrSPE91Wp2spndVNjx6zadU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/META/SnhVHvoyZV-qE8UWz_ukQu7LE4k.roa
Signing time:             Tue 29 Sep 2020 10:04:57 +0000
ROA not before:           Tue 29 Sep 2020 10:04:57 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     131631
IP address blocks:        103.131.149.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3633 (0xe31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87695C6B48F13DD56A76B299DD54D8F1EB369D5
        Validity
            Not Before: Sep 29 10:04:57 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=4A78551EFA32655FAA13C516CFFBA442EECB1389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7b:2b:e7:49:3e:f6:27:34:da:d3:55:a7:ab:
                    85:ce:dc:7f:d6:13:d3:47:1d:4f:42:7a:6e:b3:01:
                    18:dc:0d:4e:99:da:b4:5b:29:ff:d2:18:22:d8:7c:
                    a3:29:5b:c5:ac:cb:32:ad:f4:56:23:99:e9:ea:3d:
                    cb:53:40:4e:e6:37:c0:71:ed:64:35:5a:34:de:13:
                    50:1e:db:d3:ce:3e:7d:34:2e:41:bc:46:8c:29:37:
                    22:32:5a:ea:b9:b3:0b:27:b0:9a:a5:3f:a0:d2:11:
                    3a:91:bb:f1:be:01:9d:a0:cb:9d:c1:2f:48:25:6b:
                    9b:ec:49:ee:d9:36:94:2e:5e:d1:b9:f3:c8:57:18:
                    ff:57:43:ad:ea:f6:83:aa:d2:1e:e7:2a:97:a7:cc:
                    c1:63:36:ec:4c:72:4c:6b:17:15:60:fc:35:79:f2:
                    8d:52:f8:e4:b3:33:80:29:d9:c6:ac:bc:34:22:d7:
                    74:f4:13:aa:7b:21:de:3d:ea:f8:2b:60:6c:d5:02:
                    48:ce:7d:62:43:52:6c:af:f5:e9:a0:1d:6e:a8:88:
                    02:02:7e:ed:6b:07:5b:ab:02:7f:de:0e:8e:de:74:
                    70:69:71:a8:3a:f5:1c:f7:6a:11:df:1c:82:78:35:
                    91:5a:4e:c7:a0:2c:1d:28:13:cf:a4:aa:f7:45:73:
                    a8:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:78:55:1E:FA:32:65:5F:AA:13:C5:16:CF:FB:A4:42:EE:CB:13:89
            X509v3 Authority Key Identifier:
                keyid:C8:76:95:C6:B4:8F:13:DD:56:A7:6B:29:9D:D5:4D:8F:1E:B3:69:D5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/META/yHaVxrSPE91Wp2spndVNjx6zadU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/yHaVxrSPE91Wp2spndVNjx6zadU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/META/SnhVHvoyZV-qE8UWz_ukQu7LE4k.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:82:f7:18:47:62:ed:0e:57:b7:64:55:74:d1:b6:b2:7f:0d:
         d7:27:6c:5b:f3:f9:06:ff:40:97:ff:30:3f:39:67:a7:30:22:
         a7:85:47:49:4e:b8:b2:21:ee:18:1f:43:8c:1b:89:dd:08:5c:
         e6:cd:16:0f:f7:88:71:58:80:44:26:2d:1f:be:1d:00:62:c8:
         57:ee:e0:9a:8c:af:74:cd:73:0e:60:8e:02:54:b9:e7:e9:14:
         c2:b3:22:31:88:e6:9a:fe:2f:3e:11:28:62:f7:46:b8:e6:ab:
         06:95:32:da:11:d2:91:41:99:2e:07:02:ea:c9:d3:43:e2:ea:
         37:5c:29:ae:05:10:26:19:fa:0a:30:fe:7f:72:fa:0b:80:61:
         e0:34:26:55:97:36:78:a4:e1:cc:b4:3e:e3:fd:c2:55:4d:7d:
         4a:97:ee:ee:05:38:31:ff:db:bf:bd:04:ea:1f:7b:06:1f:eb:
         24:63:63:a9:96:ca:bc:1b:45:90:90:a2:f4:7f:ce:68:e4:7b:
         bd:68:a8:ed:3c:cd:33:e8:e4:a4:1a:2c:69:39:8e:df:11:0d:
         f0:d4:6a:f6:84:e9:c4:02:a9:28:c7:18:ed:54:a6:e2:b0:6f:
         02:e6:8e:b8:32:6a:75:17:fc:37:ec:ee:d0:36:e3:d5:5b:16:
         f5:6e:ea:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:09 2023 by rpki-client on console-fra.rpki-client.org