Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/BI_udLwF1PFWHg-FTbNfZrzv5Qc.roa
File:                     BI_udLwF1PFWHg-FTbNfZrzv5Qc.roa (raw, json)
Hash identifier:          QwoBUJ9cCOHNzUogaeibZH9rBVK6JrGGYTXk5AIdw3E=
Subject key identifier:   04:8F:EE:74:BC:05:D4:F1:56:1E:0F:85:4D:B3:5F:66:BC:EF:E5:07
Certificate issuer:       /CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864
Certificate serial:       05DD
Authority key identifier: AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/BI_udLwF1PFWHg-FTbNfZrzv5Qc.roa
Signing time:             Fri 01 Sep 2023 09:20:03 +0000
ROA not before:           Fri 01 Sep 2023 09:20:03 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     38840
IP address blocks:        2406:3540:fff8::/46 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1501 (0x5dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864
        Validity
            Not Before: Sep  1 09:20:03 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=048FEE74BC05D4F1561E0F854DB35F66BCEFE507
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:94:dc:ac:bd:22:ef:82:c4:95:98:93:db:c9:
                    52:3e:9e:d5:2a:c4:22:3e:5d:6f:1b:bc:83:53:50:
                    ff:cc:0a:3f:1e:3d:d0:66:53:c6:82:28:bf:eb:d8:
                    db:60:7f:82:93:f8:25:3f:1f:a9:41:a9:d9:3d:88:
                    51:ea:a3:15:7f:60:ca:ab:3e:9c:ad:f7:d1:fc:8e:
                    93:b7:38:53:78:a9:d8:62:90:55:ad:9b:f3:3b:e5:
                    f0:45:fc:26:9d:44:79:cc:fa:56:cf:fc:be:ad:04:
                    d8:f7:49:55:c8:05:21:5b:40:17:ce:57:48:9d:b0:
                    b7:e0:b7:1b:33:0f:08:fa:9d:63:84:a4:c7:ea:82:
                    bb:c8:ef:f5:34:59:98:d9:03:70:e8:e7:57:f9:40:
                    28:50:c4:eb:24:c4:3f:3c:2b:4f:78:95:f9:b8:1e:
                    b6:97:3c:ef:86:07:14:a6:77:99:be:65:05:c9:2f:
                    d2:a4:20:69:a6:cf:6f:11:f6:bb:d4:00:16:0d:f9:
                    90:6f:8e:e5:14:35:2b:94:cc:cf:37:5c:74:b2:3d:
                    e0:29:40:44:23:db:fb:3c:48:87:34:e4:65:75:ad:
                    11:0c:8d:2e:00:f8:f6:e8:5f:d5:2a:08:3a:38:f8:
                    e6:22:62:2d:ab:13:5b:4e:87:bd:ab:9c:1b:20:75:
                    0c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:8F:EE:74:BC:05:D4:F1:56:1E:0F:85:4D:B3:5F:66:BC:EF:E5:07
            X509v3 Authority Key Identifier:
                keyid:AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/BI_udLwF1PFWHg-FTbNfZrzv5Qc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:3540:fff8::/46

    Signature Algorithm: sha256WithRSAEncryption
         b9:c4:7c:c6:48:95:fe:3d:e0:95:f4:af:9e:fd:a2:ca:1e:8f:
         3f:c8:3f:c1:00:da:cb:a8:1b:6d:0f:1a:b7:ce:5b:69:34:e9:
         b1:41:20:b5:5a:8e:0b:47:31:96:36:62:f9:ff:2d:d7:ad:2f:
         50:64:be:12:32:df:52:21:31:ec:96:e6:d8:b1:f9:e3:6f:74:
         4b:b9:53:ef:61:9f:1e:bb:df:5a:c3:ec:7f:db:3a:4f:a9:e7:
         b3:d5:2d:c3:f6:8f:4e:df:82:e2:ff:03:32:93:9b:88:90:80:
         f9:d2:f0:4e:58:29:51:26:ab:a3:8d:c3:88:45:96:97:3d:af:
         76:6d:02:3c:84:93:f2:5e:82:21:8b:7b:d2:10:fe:fa:75:5b:
         ad:b9:cc:9e:89:21:49:f6:fb:f0:53:ed:ab:86:6a:76:82:ed:
         a0:db:fc:68:a7:cf:66:1d:ae:ef:f6:05:54:59:50:b8:f2:d7:
         f4:62:80:c1:05:ae:3b:36:e0:85:bd:6c:46:6b:cd:16:17:24:
         ca:06:33:51:f6:06:f2:59:15:00:37:98:0e:72:63:60:e8:6e:
         81:9f:d2:97:af:e0:0c:47:1e:a2:f7:4c:f3:95:4c:63:0b:16:
         69:8a:91:1f:e3:cb:e0:ba:74:a7:2e:92:15:9a:88:43:17:43:
         f3:33:96:79
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:14 2024 by rpki-client on console-ams.rpki-client.org