Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/5UMSLVDUH1Iie0MKl61Orkj3APQ.roa
File:                     5UMSLVDUH1Iie0MKl61Orkj3APQ.roa (raw, json)
Hash identifier:          Ixtr7egdd4wAjQnyIZovwbFwsntFZFrPlBBN0jDCvzA=
Subject key identifier:   E5:43:12:2D:50:D4:1F:52:22:7B:43:0A:97:AD:4E:AE:48:F7:00:F4
Certificate issuer:       /CN=0DF94AB0728C7A38C50F0D61554D49D651F33AA2
Certificate serial:       0B53
Authority key identifier: 0D:F9:4A:B0:72:8C:7A:38:C5:0F:0D:61:55:4D:49:D6:51:F3:3A:A2
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/5UMSLVDUH1Iie0MKl61Orkj3APQ.roa
Signing time:             Fri 01 Sep 2023 09:35:26 +0000
ROA not before:           Fri 01 Sep 2023 09:35:26 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     131593
IP address blocks:        43.251.60.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2899 (0xb53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DF94AB0728C7A38C50F0D61554D49D651F33AA2
        Validity
            Not Before: Sep  1 09:35:26 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=E543122D50D41F52227B430A97AD4EAE48F700F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:cf:db:da:82:d6:84:8e:19:37:84:05:06:bf:
                    f6:82:0f:78:d9:ff:bb:19:19:c7:f7:09:ed:aa:37:
                    5a:73:78:32:64:99:ec:1d:a7:21:a7:59:b8:9f:eb:
                    a5:9a:e6:41:f4:a4:43:dc:3a:fd:d9:6d:b2:48:f6:
                    4f:d5:f0:ee:7d:ec:58:e4:43:a7:41:61:53:0a:00:
                    0b:71:ad:57:7f:69:ff:25:8e:9d:16:9e:79:06:96:
                    1f:26:b1:71:5d:81:06:fa:e2:69:a2:02:15:ee:71:
                    ee:78:46:36:22:19:ff:c0:99:59:c7:0a:24:d2:be:
                    3d:83:77:15:8c:cb:7d:72:9f:a8:7e:5e:c8:54:f5:
                    74:01:89:3f:dd:28:96:fb:fc:0f:c4:4b:6c:ed:b1:
                    ab:51:66:6c:f1:b0:0c:cb:40:c6:9e:b3:08:f0:2f:
                    d4:64:46:1b:59:88:1a:26:8d:85:3e:cd:5b:8a:4c:
                    3b:b1:21:74:63:f2:28:b9:3c:00:e5:eb:8c:cb:e8:
                    d0:6f:eb:78:00:46:9a:46:b1:43:0d:f2:fb:d8:cf:
                    a6:97:57:c3:c1:f1:d6:67:4a:32:00:40:9c:e0:3e:
                    ed:7f:53:ef:95:e6:83:75:00:c7:99:fc:48:8e:d3:
                    62:d8:0f:b7:a1:45:73:6f:74:81:64:6d:9d:e0:8e:
                    69:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:43:12:2D:50:D4:1F:52:22:7B:43:0A:97:AD:4E:AE:48:F7:00:F4
            X509v3 Authority Key Identifier:
                keyid:0D:F9:4A:B0:72:8C:7A:38:C5:0F:0D:61:55:4D:49:D6:51:F3:3A:A2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/5UMSLVDUH1Iie0MKl61Orkj3APQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.251.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:db:32:ad:22:23:ff:0c:9b:11:3d:dd:42:ee:dc:6c:8d:e4:
         f3:af:f9:cf:b0:7c:c6:1d:37:da:5b:dd:b1:cd:dd:12:19:0d:
         3f:d1:f5:d5:00:e2:51:54:15:92:80:f1:73:ec:cb:93:6b:d2:
         d7:d2:31:77:76:3a:ea:a1:10:35:39:07:d0:8e:24:d2:3a:8d:
         c1:4e:f5:9b:4f:86:6a:be:b8:03:09:5e:9d:96:4c:a9:e2:50:
         15:8d:42:34:7b:62:b7:c9:58:a4:fe:73:86:d1:c5:06:f4:1d:
         6d:67:a2:ff:66:6d:5b:4f:82:44:af:52:c0:0a:8f:9d:47:4c:
         96:4d:87:1f:fb:83:59:8b:5a:44:30:02:50:5b:94:32:d4:b9:
         01:37:8c:d6:fe:06:13:34:3d:56:88:43:a8:09:83:e4:70:39:
         e6:e1:39:df:5f:ac:e9:0b:64:21:ea:d2:bd:5c:e4:42:00:7d:
         5e:33:21:64:94:7d:2d:06:80:15:a5:3a:87:a6:e6:3f:30:cb:
         1c:94:07:83:26:76:11:9a:00:7f:82:bf:59:0f:bf:50:e7:05:
         73:11:0f:38:4d:f1:ad:bd:af:20:77:a2:2a:5e:5d:42:cb:bf:
         fa:1b:84:9b:a8:ad:35:c1:8e:96:54:1a:9f:1d:e7:76:2f:88:
         3b:f8:36:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:22 2024 by rpki-client on console-fra.rpki-client.org