Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/44VXmAU8e5gsxCkJ_l9XSBNHHYU.roa
File:                     44VXmAU8e5gsxCkJ_l9XSBNHHYU.roa (raw, json)
Hash identifier:          yPyqQSnd3K7DGGqiQbVwUcJh9DOt1DXVc50T9ETF1xY=
Subject key identifier:   E3:85:57:98:05:3C:7B:98:2C:C4:29:09:FE:5F:57:48:13:47:1D:85
Certificate issuer:       /CN=0DF94AB0728C7A38C50F0D61554D49D651F33AA2
Certificate serial:       0B54
Authority key identifier: 0D:F9:4A:B0:72:8C:7A:38:C5:0F:0D:61:55:4D:49:D6:51:F3:3A:A2
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/44VXmAU8e5gsxCkJ_l9XSBNHHYU.roa
Signing time:             Fri 01 Sep 2023 09:35:26 +0000
ROA not before:           Fri 01 Sep 2023 09:35:26 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     131593
IP address blocks:        103.42.148.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2900 (0xb54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DF94AB0728C7A38C50F0D61554D49D651F33AA2
        Validity
            Not Before: Sep  1 09:35:26 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=E3855798053C7B982CC42909FE5F574813471D85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:bd:9f:be:44:0e:81:ed:75:85:f4:41:60:ba:
                    af:0f:40:bb:60:1a:c2:c2:cc:c0:af:88:ed:eb:91:
                    58:d5:d2:de:19:69:3d:38:ab:97:a9:ae:ad:8f:46:
                    83:49:0b:a9:1e:56:10:1f:dc:91:5b:a8:81:af:c6:
                    5d:33:47:36:fc:bb:b9:c5:4c:cf:89:e9:d8:61:68:
                    f1:a3:c7:d6:ba:c6:20:be:f8:df:37:95:06:5c:b2:
                    de:fc:3d:44:89:4d:14:4e:67:51:fe:e7:e3:5b:2f:
                    9a:0d:9c:b9:ee:df:28:31:ac:95:bd:1a:f0:fb:48:
                    ed:15:cd:55:df:db:b4:1a:d3:8e:b0:ef:e6:26:0e:
                    8a:98:b3:6a:0f:f2:2b:05:2e:de:27:6d:5e:5c:a4:
                    2d:0f:a4:b2:33:d1:bc:d9:e5:b3:f9:e7:f6:70:e3:
                    90:82:f1:f0:00:28:cc:2f:47:7d:3a:f2:d3:b1:fc:
                    a5:d9:43:20:77:30:18:42:c6:14:ca:78:88:4b:90:
                    e7:5e:8c:f1:ca:e2:3b:77:7c:33:cf:9b:11:f6:b9:
                    d4:3b:2e:94:cd:83:b0:4a:c7:cb:0a:bf:5d:56:5b:
                    49:69:41:58:53:cf:5e:b1:02:9b:42:08:89:99:22:
                    e7:54:ac:ef:a8:a3:1c:f2:f9:0a:dd:b3:e8:92:6d:
                    4c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:85:57:98:05:3C:7B:98:2C:C4:29:09:FE:5F:57:48:13:47:1D:85
            X509v3 Authority Key Identifier:
                keyid:0D:F9:4A:B0:72:8C:7A:38:C5:0F:0D:61:55:4D:49:D6:51:F3:3A:A2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/44VXmAU8e5gsxCkJ_l9XSBNHHYU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.42.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:96:dc:b6:1e:fd:4b:1a:8d:64:b8:d6:b1:9b:e2:a8:9d:ae:
         1e:50:04:93:33:f5:c5:25:3c:0e:00:cf:0f:9b:8f:ff:7e:62:
         0a:19:01:e9:9c:5e:ba:a4:0a:fe:a8:34:77:47:18:8e:72:0c:
         17:83:3f:40:fb:ee:9a:20:d9:4b:c9:c8:6a:02:30:d3:13:60:
         b0:ab:2d:29:62:c7:60:cf:a3:31:c8:7d:e8:07:87:44:83:e3:
         e7:b1:05:20:52:21:8a:1d:35:5c:4e:9f:e1:34:d5:71:d4:4e:
         1f:35:90:2f:c7:c1:66:3a:59:7e:f9:6d:3c:d8:a4:9e:20:a2:
         e8:4c:f4:57:4b:63:92:53:6f:5f:6d:6f:34:0e:db:f6:2a:84:
         4f:7a:8c:97:9e:9d:1e:03:84:ac:8b:ec:1d:7f:ae:d5:11:d9:
         58:93:f8:73:7f:92:06:f6:f0:03:73:5d:5b:66:b3:d2:1f:bb:
         aa:57:5f:e0:db:bc:12:89:31:bb:a9:8e:68:3a:d9:5a:7d:0e:
         f7:59:20:6e:a4:75:9c:4d:b5:9b:a2:68:12:80:6f:0d:9f:91:
         3d:85:bc:79:28:b8:da:9b:4b:8f:f3:68:ad:43:a2:02:8d:10:
         74:ed:5b:93:02:4d:a8:ad:81:d7:1e:9b:cf:c8:b0:5e:3f:3c:
         09:d6:f8:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:22 2024 by rpki-client on console-fra.rpki-client.org