Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/JWBvJOPc2HvQdAS_8LnF0koO1wU.roa
File:                     JWBvJOPc2HvQdAS_8LnF0koO1wU.roa (raw, json)
Hash identifier:          WPc7jAeeMqePPX/fBFp3ZDtbjZ68eZJru9u1OxwNx8s=
Subject key identifier:   25:60:6F:24:E3:DC:D8:7B:D0:74:04:BF:F0:B9:C5:D2:4A:0E:D7:05
Certificate issuer:       /CN=0DF94AB0728C7A38C50F0D61554D49D651F33AA2
Certificate serial:       0B58
Authority key identifier: 0D:F9:4A:B0:72:8C:7A:38:C5:0F:0D:61:55:4D:49:D6:51:F3:3A:A2
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/JWBvJOPc2HvQdAS_8LnF0koO1wU.roa
Signing time:             Fri 01 Sep 2023 09:35:27 +0000
ROA not before:           Fri 01 Sep 2023 09:35:27 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     131593
IP address blocks:        43.251.62.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2904 (0xb58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DF94AB0728C7A38C50F0D61554D49D651F33AA2
        Validity
            Not Before: Sep  1 09:35:27 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=25606F24E3DCD87BD07404BFF0B9C5D24A0ED705
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:97:97:a3:df:77:31:8f:23:e5:53:25:ed:aa:
                    99:57:0d:e3:a4:ab:e1:6f:8e:6c:7f:71:2e:5e:34:
                    9f:67:3a:b5:2a:f4:b9:61:8b:a6:ae:27:0f:98:73:
                    f5:8a:ae:0f:03:54:ee:bd:7b:13:d6:e8:43:f9:bc:
                    aa:68:dc:12:33:d3:4b:64:6f:84:92:ae:9e:87:a3:
                    9b:83:50:f9:af:7a:85:4d:7c:a2:4f:c4:8f:22:93:
                    6c:9f:e4:00:8f:1d:28:b0:9d:9e:5d:07:8b:0c:61:
                    94:2b:a7:52:63:c7:ac:1c:14:c2:d7:7f:5b:dc:9c:
                    a0:51:ef:73:c5:da:58:6f:20:d8:93:73:71:a3:8e:
                    cf:f4:c9:98:90:8b:fa:68:21:9f:41:43:81:21:2b:
                    2f:80:23:ad:d5:31:05:49:dc:bc:b5:86:8f:b9:1b:
                    f4:0e:63:83:41:d5:0b:77:c8:15:05:a1:5e:7b:d6:
                    a9:9d:3a:24:f2:f3:06:49:b1:3d:e1:2b:7a:af:3e:
                    28:95:27:58:32:ad:e4:bf:e1:73:31:45:56:1a:40:
                    18:c7:43:19:98:65:21:e7:5b:bd:02:ff:48:c1:b6:
                    5f:f0:f9:4f:6d:be:d6:20:40:31:af:ea:f1:c7:5c:
                    47:e5:51:32:43:c8:d7:27:7c:ac:08:6d:d2:e1:28:
                    e7:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:60:6F:24:E3:DC:D8:7B:D0:74:04:BF:F0:B9:C5:D2:4A:0E:D7:05
            X509v3 Authority Key Identifier:
                keyid:0D:F9:4A:B0:72:8C:7A:38:C5:0F:0D:61:55:4D:49:D6:51:F3:3A:A2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/JWBvJOPc2HvQdAS_8LnF0koO1wU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.251.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:73:ec:f5:9d:db:70:a5:66:37:c9:6d:57:3c:2d:9a:34:64:
         c4:bc:61:09:af:d5:1a:02:9d:42:a4:30:cf:93:04:28:b4:a7:
         10:91:1c:c4:70:16:a6:f3:d0:b4:e8:10:10:5b:08:a5:31:34:
         c0:28:a1:bd:4f:2c:f9:24:f7:57:46:94:b3:5e:eb:37:31:f6:
         e2:06:77:36:27:42:2c:cf:c8:3d:d4:8f:51:79:8e:2a:13:de:
         30:17:37:6e:6e:2a:1a:e3:7c:d9:fd:12:ca:03:a6:18:a5:40:
         f3:12:db:db:fa:aa:66:f9:a1:7e:9b:e8:f3:54:f0:05:d5:1c:
         b6:5e:3d:96:a6:df:f7:9d:f9:58:65:de:ed:67:24:04:23:b2:
         eb:61:c6:3d:e7:48:6f:27:c3:f9:fa:4b:01:79:6c:62:d1:b1:
         e6:cf:62:db:7b:4c:77:17:7d:3b:d7:7b:c9:ec:c0:bf:4a:59:
         a0:0d:a7:c7:8b:88:47:89:56:8d:a8:af:df:65:94:04:21:18:
         b2:d6:17:60:76:68:53:0f:b9:9f:43:87:f4:a3:47:e5:81:0e:
         46:4a:ab:26:e0:30:a5:78:9e:2a:fd:37:a6:eb:c8:96:62:da:
         f5:d0:59:12:16:ac:57:4d:86:fc:de:4d:83:bf:25:b9:12:ac:
         22:4c:71:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:22 2024 by rpki-client on console-fra.rpki-client.org