Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/Sire68ZMSuz49UtU4ex0SbO81Bg.roa
File:                     Sire68ZMSuz49UtU4ex0SbO81Bg.roa (raw, json)
Hash identifier:          bMLQI7MprxmFO63dUkUMHb/fenN09MTjrpoNFxK1+hw=
Subject key identifier:   4A:2A:DE:EB:C6:4C:4A:EC:F8:F5:4B:54:E1:EC:74:49:B3:BC:D4:18
Certificate issuer:       /CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864
Certificate serial:       05DA
Authority key identifier: AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/Sire68ZMSuz49UtU4ex0SbO81Bg.roa
Signing time:             Fri 01 Sep 2023 09:20:02 +0000
ROA not before:           Fri 01 Sep 2023 09:20:02 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     17415
IP address blocks:        103.152.202.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1498 (0x5da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864
        Validity
            Not Before: Sep  1 09:20:02 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=4A2ADEEBC64C4AECF8F54B54E1EC7449B3BCD418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:3e:84:cc:2d:6c:f1:6c:76:e9:3e:16:52:b2:
                    4c:97:8c:db:76:63:cc:54:a9:9c:06:cb:a3:1a:bc:
                    3e:fd:31:42:8d:bd:cf:23:e9:b3:27:ec:b5:bb:aa:
                    33:26:77:d3:a6:49:b1:0f:d8:44:4f:9c:34:dc:65:
                    f3:b1:92:b1:00:40:54:19:22:83:1f:89:ae:9c:07:
                    36:8a:df:32:40:a1:88:c5:48:05:d4:1c:f9:08:28:
                    13:65:f2:94:1f:e8:47:9a:2f:a1:aa:1f:4e:50:05:
                    ce:fb:81:e2:fc:87:c1:98:73:58:3c:66:d5:c1:d9:
                    4c:f1:00:d2:1f:49:5c:73:53:fc:f0:51:79:69:ac:
                    ea:f0:b6:b7:04:62:eb:06:e6:d0:9c:49:20:b3:d6:
                    bc:b4:6f:82:33:70:eb:b0:6b:6a:db:23:b0:34:c2:
                    21:cf:e7:c9:0f:95:8c:d3:21:3b:28:eb:fc:fa:44:
                    ce:36:c9:f9:85:a1:b4:67:8b:e3:df:4f:f2:a7:ef:
                    05:8c:2e:ca:7d:a1:b5:8c:51:7f:09:fb:69:2c:52:
                    86:c1:84:da:8b:cb:a5:2d:0c:d9:63:2f:de:d6:00:
                    ef:67:ab:66:1a:2a:cc:ec:21:0d:81:b5:25:22:64:
                    45:2f:6c:c9:09:f8:52:db:0a:b0:7f:1f:1c:f9:39:
                    4b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:2A:DE:EB:C6:4C:4A:EC:F8:F5:4B:54:E1:EC:74:49:B3:BC:D4:18
            X509v3 Authority Key Identifier:
                keyid:AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/Sire68ZMSuz49UtU4ex0SbO81Bg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         99:b7:22:8b:0f:54:db:17:fc:a1:e7:41:88:e4:d5:2e:86:0f:
         44:b1:79:b9:4e:30:cb:30:d6:ec:39:18:9e:82:af:4c:08:75:
         ea:7b:24:70:d4:60:78:b3:75:8b:63:b8:23:31:2f:1a:c5:53:
         57:c1:5f:7f:80:44:64:1b:42:df:c5:e7:ea:a5:84:eb:80:53:
         23:60:eb:b9:3c:38:38:7e:60:07:be:ff:11:16:c2:05:c1:e9:
         29:8e:65:a7:14:d0:09:d2:91:a9:1e:45:53:cb:46:d8:92:a4:
         2b:e1:ba:a5:61:95:a9:e7:13:97:31:cd:06:50:f1:b6:d8:fe:
         e1:70:44:7d:97:e9:bb:00:fa:05:82:4f:6c:6b:d7:33:ba:1f:
         cf:bf:d0:e7:1c:46:2c:76:b0:d8:52:9c:b5:7f:96:bd:87:c9:
         1d:bc:08:bc:5a:40:95:01:82:2b:f8:c3:4d:8b:2c:51:dd:11:
         40:7b:3d:0c:6f:44:43:7f:01:27:3b:3e:df:5f:24:33:ff:b2:
         3a:db:a8:f1:4c:55:b4:f9:04:12:56:d3:e2:32:82:2b:9e:97:
         4c:8e:3c:04:24:82:fd:6f:e9:52:86:ce:6e:69:9a:bc:dc:27:
         27:b9:bf:49:b2:a8:88:76:2e:74:d5:54:3e:19:34:d2:0c:ae:
         0f:2f:8d:cb
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgICBdowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQURG
RTZFNTZEQUY4NDkyRUM3REU4OEIzQTkwNkIzMTM5QjU1Qjg2NDAeFw0yMzA5MDEw
OTIwMDJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDRBMkFERUVCQzY0QzRB
RUNGOEY1NEI1NEUxRUM3NDQ5QjNCQ0Q0MTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDYPoTMLWzxbHbpPhZSskyXjNt2Y8xUqZwGy6MavD79MUKNvc8j
6bMn7LW7qjMmd9OmSbEP2ERPnDTcZfOxkrEAQFQZIoMfia6cBzaK3zJAoYjFSAXU
HPkIKBNl8pQf6EeaL6GqH05QBc77geL8h8GYc1g8ZtXB2UzxANIfSVxzU/zwUXlp
rOrwtrcEYusG5tCcSSCz1ry0b4IzcOuwa2rbI7A0wiHP58kPlYzTITso6/z6RM42
yfmFobRni+PfT/Kn7wWMLsp9obWMUX8J+2ksUobBhNqLy6UtDNljL97WAO9nq2Ya
KszsIQ2BtSUiZEUvbMkJ+FLbCrB/Hxz5OUtBAgMBAAGjggH0MIIB8DAdBgNVHQ4E
FgQUSire68ZMSuz49UtU4ex0SbO81BgwHwYDVR0jBBgwFoAUrf5uVtr4SS7H3oiz
qQazE5tVuGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg
UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlOR1lJ
VEVBL3JmNXVWdHI0U1M3SDNvaXpxUWF6RTV0VnVHUS5jcmwwYAYIKwYBBQUHAQEE
VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX
TklDQ0EvcmY1dVZ0cjRTUzdIM29penFRYXpFNXRWdUdRLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw
a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlOR1lJVEVBL1NpcmU2OFpNU3V6
NDlVdFU0ZXgwU2JPODFCZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50
d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAFnmMowDQYJKoZIhvcNAQELBQADggEBAJm3IosPVNsX/KHnQYjk1S6GD0Sx
eblOMMsw1uw5GJ6Cr0wIdep7JHDUYHizdYtjuCMxLxrFU1fBX3+ARGQbQt/F5+ql
hOuAUyNg67k8ODh+YAe+/xEWwgXB6SmOZacU0AnSkakeRVPLRtiSpCvhuqVhlann
E5cxzQZQ8bbY/uFwRH2X6bsA+gWCT2xr1zO6H8+/0OccRix2sNhSnLV/lr2HyR28
CLxaQJUBgiv4w02LLFHdEUB7PQxvREN/ASc7Pt9fJDP/sjrbqPFMVbT5BBJW0+Iy
giuel0yOPAQkgv1v6VKGzm5pmrzcJye5v0myqIh2LnTVVD4ZNNIMrg8vjcs=
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:14 2024 by rpki-client on console-ams.rpki-client.org