Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/DNA7-SG3rT7Z9tSJQVMSwltfWcg.roa
File:                     DNA7-SG3rT7Z9tSJQVMSwltfWcg.roa (raw, json)
Hash identifier:          lWjuRQIxzQBd3r9iREV+d2m00QdbX/xtmpSOn+Btpss=
Subject key identifier:   0C:D0:3B:F9:21:B7:AD:3E:D9:F6:D4:89:41:53:12:C2:5B:5F:59:C8
Certificate issuer:       /CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864
Certificate serial:       05D6
Authority key identifier: AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/DNA7-SG3rT7Z9tSJQVMSwltfWcg.roa
Signing time:             Fri 01 Sep 2023 09:20:00 +0000
ROA not before:           Fri 01 Sep 2023 09:20:00 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     134098
IP address blocks:        103.152.203.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1494 (0x5d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864
        Validity
            Not Before: Sep  1 09:20:00 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=0CD03BF921B7AD3ED9F6D489415312C25B5F59C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:db:0f:ec:98:77:f2:59:a4:d1:fb:c0:9e:0a:
                    5e:cd:3f:a5:d1:e2:bf:64:2b:9d:96:eb:30:2a:e2:
                    01:7b:75:98:a2:71:ac:70:bd:86:5a:95:d1:5a:c7:
                    26:21:3c:3f:eb:0d:89:a3:58:4c:c9:d4:9d:30:a4:
                    fa:d1:4f:36:8d:ce:fa:34:7f:af:f1:1f:f6:f5:d7:
                    f5:5d:15:8f:e5:39:ed:4c:ca:57:9b:fc:7a:90:45:
                    81:02:97:89:1e:5d:42:c0:23:c3:07:e1:06:07:0f:
                    aa:f2:0f:d4:f2:28:87:d5:95:2d:81:f5:d9:e6:ac:
                    ee:2b:3a:33:ab:50:8b:1a:3c:ba:b3:81:d7:f3:52:
                    49:95:57:26:1b:43:7e:07:dc:16:77:0c:cb:28:d0:
                    48:63:6b:33:76:06:42:30:02:92:c4:3c:5e:dc:52:
                    e4:6c:89:21:e8:42:5f:95:e0:cf:19:32:53:df:fa:
                    4c:53:53:48:ed:a3:da:21:38:22:2f:8e:b4:88:16:
                    b4:e2:09:dd:93:37:47:58:03:33:b5:06:fa:98:ed:
                    f9:79:fe:3e:7d:da:f8:bf:8d:7c:c5:12:b2:78:65:
                    d8:72:a7:8a:ab:73:86:b8:83:85:ce:58:ec:7a:2a:
                    fe:dd:9a:97:b5:e7:ce:a2:a8:ff:db:24:62:aa:e7:
                    f5:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:D0:3B:F9:21:B7:AD:3E:D9:F6:D4:89:41:53:12:C2:5B:5F:59:C8
            X509v3 Authority Key Identifier:
                keyid:AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/DNA7-SG3rT7Z9tSJQVMSwltfWcg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:51:a1:40:82:ae:b2:df:d9:bb:08:1e:bf:7e:e9:8e:a0:9e:
         82:ae:7e:19:9d:aa:26:2b:c1:fd:2d:07:6f:cd:47:17:72:22:
         f9:8d:a3:52:5e:55:ca:9b:45:2b:e3:4e:c6:51:62:67:f5:0b:
         59:a5:e6:a8:d5:b1:f9:79:3a:96:f8:67:93:36:1e:c8:d3:97:
         3e:df:79:e8:37:42:3a:2e:16:75:89:47:b2:16:6a:3d:a8:27:
         a5:53:d5:67:0f:6d:d6:3b:ac:6c:40:f1:24:5a:81:80:ae:c0:
         2f:84:4d:49:39:6c:8a:45:2c:0c:80:24:56:d6:a5:a1:98:27:
         af:8d:b1:02:64:83:54:08:99:92:1e:34:a7:80:bd:88:1a:9a:
         31:d5:38:7c:be:2e:d5:e5:ed:a0:cb:34:4e:ae:78:11:bb:9c:
         0e:d1:6c:09:ad:40:5e:a7:ab:05:69:52:9c:36:b7:27:06:34:
         9d:72:b8:97:62:e9:e9:70:54:fc:22:d0:74:80:83:c4:7f:0d:
         ec:26:81:22:7d:9c:a9:67:72:05:68:52:22:89:3b:9e:f2:c1:
         3c:6f:20:cd:86:af:36:0a:d2:e9:44:06:f6:1b:fa:e7:31:a3:
         70:b4:6e:bf:5d:4c:da:75:ef:48:87:0d:f5:a7:a5:fa:58:0f:
         e8:07:83:5c
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgICBdYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQURG
RTZFNTZEQUY4NDkyRUM3REU4OEIzQTkwNkIzMTM5QjU1Qjg2NDAeFw0yMzA5MDEw
OTIwMDBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDBDRDAzQkY5MjFCN0FE
M0VEOUY2RDQ4OTQxNTMxMkMyNUI1RjU5QzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDG2w/smHfyWaTR+8CeCl7NP6XR4r9kK52W6zAq4gF7dZiicaxw
vYZaldFaxyYhPD/rDYmjWEzJ1J0wpPrRTzaNzvo0f6/xH/b11/VdFY/lOe1Myleb
/HqQRYECl4keXULAI8MH4QYHD6ryD9TyKIfVlS2B9dnmrO4rOjOrUIsaPLqzgdfz
UkmVVyYbQ34H3BZ3DMso0EhjazN2BkIwApLEPF7cUuRsiSHoQl+V4M8ZMlPf+kxT
U0jto9ohOCIvjrSIFrTiCd2TN0dYAzO1BvqY7fl5/j592vi/jXzFErJ4Zdhyp4qr
c4a4g4XOWOx6Kv7dmpe1586iqP/bJGKq5/WTAgMBAAGjggH0MIIB8DAdBgNVHQ4E
FgQUDNA7+SG3rT7Z9tSJQVMSwltfWcgwHwYDVR0jBBgwFoAUrf5uVtr4SS7H3oiz
qQazE5tVuGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg
UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlOR1lJ
VEVBL3JmNXVWdHI0U1M3SDNvaXpxUWF6RTV0VnVHUS5jcmwwYAYIKwYBBQUHAQEE
VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX
TklDQ0EvcmY1dVZ0cjRTUzdIM29penFRYXpFNXRWdUdRLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw
a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlOR1lJVEVBL0ROQTctU0czclQ3
Wjl0U0pRVk1Td2x0ZldjZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50
d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABnmMswDQYJKoZIhvcNAQELBQADggEBADJRoUCCrrLf2bsIHr9+6Y6gnoKu
fhmdqiYrwf0tB2/NRxdyIvmNo1JeVcqbRSvjTsZRYmf1C1ml5qjVsfl5Opb4Z5M2
HsjTlz7feeg3QjouFnWJR7IWaj2oJ6VT1WcPbdY7rGxA8SRagYCuwC+ETUk5bIpF
LAyAJFbWpaGYJ6+NsQJkg1QImZIeNKeAvYgamjHVOHy+LtXl7aDLNE6ueBG7nA7R
bAmtQF6nqwVpUpw2tycGNJ1yuJdi6elwVPwi0HSAg8R/DewmgSJ9nKlncgVoUiKJ
O57ywTxvIM2GrzYK0ulEBvYb+ucxo3C0br9dTNp170iHDfWnpfpYD+gHg1w=
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:21 2024 by rpki-client on console-fra.rpki-client.org