Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NWCATVISP/yMG9kgZ62uHrq-3mryHh67CB28Q.roa
File:                     yMG9kgZ62uHrq-3mryHh67CB28Q.roa (raw, json)
Hash identifier:          AbS8AZ5DHz7OwXL2sTCL4ZZZZxQVTdD9rpDvBo0sbaE=
Subject key identifier:   C8:C1:BD:92:06:7A:DA:E1:EB:AB:ED:E6:AF:21:E1:EB:B0:81:DB:C4
Certificate issuer:       /CN=A615237B28D4CEF8AFF942181704A1870B0F3F70
Certificate serial:       1058
Authority key identifier: A6:15:23:7B:28:D4:CE:F8:AF:F9:42:18:17:04:A1:87:0B:0F:3F:70
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/phUjeyjUzviv-UIYFwShhwsPP3A.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NWCATVISP/yMG9kgZ62uHrq-3mryHh67CB28Q.roa
Signing time:             Fri 01 Sep 2023 09:34:03 +0000
ROA not before:           Fri 01 Sep 2023 09:34:03 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     18046
IP address blocks:        103.126.252.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4184 (0x1058)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A615237B28D4CEF8AFF942181704A1870B0F3F70
        Validity
            Not Before: Sep  1 09:34:03 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=C8C1BD92067ADAE1EBABEDE6AF21E1EBB081DBC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:0b:5d:85:ec:67:f2:e6:f9:eb:6e:3b:b6:9b:
                    73:04:b0:6c:28:7d:f2:3d:be:1f:69:df:7b:bc:1f:
                    c5:f2:21:d3:34:ba:5b:7f:80:d4:bf:3c:39:4f:ec:
                    b8:48:c2:b0:94:eb:d5:13:3d:3d:f3:ae:d8:a8:be:
                    85:37:2c:77:56:0f:8b:b9:db:5b:55:ab:ca:20:00:
                    9a:55:0d:26:ea:d9:62:ec:0a:49:ed:79:e8:cd:96:
                    1d:a8:16:1b:38:f8:00:a5:3b:b7:c9:19:80:ae:60:
                    a1:96:c4:a3:14:ac:dd:78:d5:80:4f:4a:2d:a0:db:
                    a8:c2:9d:b0:81:1f:59:e0:5a:a0:3e:d1:54:d0:f5:
                    1b:9d:69:16:29:c2:b7:0f:0f:93:7f:a4:1e:42:dd:
                    36:85:96:b6:61:f7:dc:3c:06:4b:42:52:ec:96:8a:
                    6e:ef:83:6e:7e:f8:3f:76:a2:f0:ee:6d:c6:4e:9d:
                    0d:9d:e7:ac:2e:62:5a:39:c0:95:9a:c3:55:bc:39:
                    f4:12:c4:7c:a0:29:13:3c:d9:74:4c:41:e3:a0:46:
                    1f:c3:3e:a2:ec:ef:17:74:e8:28:2a:db:a8:5c:7b:
                    b1:16:79:55:37:0c:0a:a8:60:4d:a0:ee:3d:79:b4:
                    ed:7f:d6:d4:8a:bf:7d:7a:82:74:9a:dc:a6:ac:cf:
                    a8:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:C1:BD:92:06:7A:DA:E1:EB:AB:ED:E6:AF:21:E1:EB:B0:81:DB:C4
            X509v3 Authority Key Identifier:
                keyid:A6:15:23:7B:28:D4:CE:F8:AF:F9:42:18:17:04:A1:87:0B:0F:3F:70

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NWCATVISP/phUjeyjUzviv-UIYFwShhwsPP3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/phUjeyjUzviv-UIYFwShhwsPP3A.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NWCATVISP/yMG9kgZ62uHrq-3mryHh67CB28Q.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.126.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:56:c5:31:60:55:5e:cb:12:a7:ce:cd:36:11:d0:2e:50:c9:
         20:5d:1e:76:ab:b6:41:50:9e:a2:60:f4:f1:5d:72:26:18:75:
         7c:89:c9:f5:e3:a1:a2:3f:b3:6c:b7:87:b5:9a:f6:c6:24:24:
         ec:21:cd:0b:a4:6d:ce:53:c8:0e:69:d7:e6:bd:f3:2a:a1:89:
         4f:6f:e0:c5:de:7a:de:4b:1a:02:13:ea:3b:a9:0b:2b:f4:e7:
         e2:f0:dc:dc:c0:b3:af:02:04:07:bd:7d:8b:9b:a6:62:38:eb:
         89:73:0d:af:67:f0:b0:48:f5:97:22:d3:fe:db:37:34:5a:7a:
         c6:ad:2c:cd:83:2c:9d:89:a7:a2:80:76:09:3a:b1:1d:0e:5e:
         db:f2:34:b4:95:46:b9:6d:ca:c5:61:09:20:2e:48:56:aa:8b:
         03:39:63:78:37:2a:0d:4d:95:6f:59:d3:dd:e1:25:c4:af:6f:
         d1:8f:7c:94:9a:24:e2:32:e8:99:35:d1:ba:32:38:6d:e1:d3:
         4a:6c:7c:3e:e4:6f:ed:27:43:74:48:d8:0d:80:4f:09:81:61:
         27:d8:29:59:80:c3:ba:fe:6b:2d:b8:66:a4:97:aa:a1:d6:d9:
         c4:22:43:a5:f4:d5:18:64:62:61:17:09:08:59:30:d7:da:27:
         01:6d:52:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:22 2024 by rpki-client on console-fra.rpki-client.org