Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/RMZPT4QeL0-gkiwHsyIAvt53Zgk.roa
File:                     RMZPT4QeL0-gkiwHsyIAvt53Zgk.roa (raw, json)
Hash identifier:          8oM2xZxy2YYYiU88cYSflWUhwMprgdqqfQBx4/24ROQ=
Subject key identifier:   44:C6:4F:4F:84:1E:2F:4F:A0:92:2C:07:B3:22:00:BE:DE:77:66:09
Certificate issuer:       /CN=0DF94AB0728C7A38C50F0D61554D49D651F33AA2
Certificate serial:       0B55
Authority key identifier: 0D:F9:4A:B0:72:8C:7A:38:C5:0F:0D:61:55:4D:49:D6:51:F3:3A:A2
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/RMZPT4QeL0-gkiwHsyIAvt53Zgk.roa
Signing time:             Fri 01 Sep 2023 09:35:26 +0000
ROA not before:           Fri 01 Sep 2023 09:35:26 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     131593
IP address blocks:        43.251.60.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2901 (0xb55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DF94AB0728C7A38C50F0D61554D49D651F33AA2
        Validity
            Not Before: Sep  1 09:35:26 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=44C64F4F841E2F4FA0922C07B32200BEDE776609
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:fe:e1:41:94:4e:0a:93:9e:bc:27:62:b5:0a:
                    63:a0:e3:41:0f:1e:b7:4d:4a:b2:f4:85:a7:44:52:
                    8a:8e:b0:24:70:ab:4e:00:4a:72:c5:13:80:df:60:
                    4a:82:54:67:c8:36:22:5b:c6:3e:f1:f4:0a:9b:42:
                    dc:8e:ac:19:bc:88:b3:0d:ef:1d:3f:91:76:e6:b2:
                    29:1d:bc:4a:5c:e2:ad:71:bc:6d:6c:16:54:f5:35:
                    43:ef:0b:42:64:98:b0:da:f5:16:cf:07:54:3e:0d:
                    64:08:21:78:f4:3f:7c:6a:00:a2:b7:c5:0b:10:ae:
                    45:3a:c5:90:1c:53:63:2b:19:0e:6d:bf:7b:f6:c9:
                    b2:51:30:9b:8e:35:97:f8:80:ab:d7:90:07:1c:18:
                    9d:fd:77:81:97:1d:0a:0f:44:61:5d:6c:9e:5a:bc:
                    d1:b9:c6:fd:ea:45:43:66:ab:a8:38:83:2b:b4:f7:
                    98:45:55:ec:2e:d0:ad:c7:3f:76:3e:8f:62:bb:bc:
                    3a:b9:7c:7a:68:a0:54:29:77:6d:04:72:41:74:9c:
                    82:b7:b6:9c:33:72:dc:7e:33:85:ca:ee:c7:a7:62:
                    ae:0c:bd:18:a2:6f:5d:3a:01:94:c5:a6:42:75:32:
                    27:cd:bd:a7:bb:e1:52:c1:e6:fa:29:3e:2b:1e:67:
                    b8:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:C6:4F:4F:84:1E:2F:4F:A0:92:2C:07:B3:22:00:BE:DE:77:66:09
            X509v3 Authority Key Identifier:
                keyid:0D:F9:4A:B0:72:8C:7A:38:C5:0F:0D:61:55:4D:49:D6:51:F3:3A:A2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/RMZPT4QeL0-gkiwHsyIAvt53Zgk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.251.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:60:65:93:81:12:91:2a:bb:c4:1f:0e:2c:a5:e8:61:2f:7d:
         a5:8c:c2:b3:24:86:7f:e9:20:82:47:5d:ce:62:c9:e7:a1:67:
         e1:d1:8a:24:8c:c2:4b:24:bc:33:0c:5c:f0:e3:68:8d:7a:1e:
         db:81:40:76:10:46:9f:1b:22:db:1e:8b:84:fa:03:e0:f4:5b:
         44:b9:d0:c0:6b:ae:c7:93:86:1a:a2:5a:40:f8:e5:b1:63:74:
         ba:6f:a4:04:5d:45:25:a4:af:40:c9:ce:ea:7b:13:ed:87:bd:
         11:c3:c9:c4:e8:97:27:4e:fa:21:ef:11:84:0c:b0:ab:25:a8:
         11:10:1c:15:8c:bb:bc:80:0a:f0:52:48:d1:44:65:7e:e2:ca:
         61:70:03:52:c6:81:b3:f4:70:19:54:ee:47:26:6a:98:ab:6f:
         b1:a5:16:98:75:b4:f8:05:e0:d7:f0:82:62:88:87:41:90:e7:
         27:d0:ca:95:a4:b9:64:64:d4:7d:b0:de:23:e6:3b:f5:31:99:
         fd:4a:0a:03:52:c4:05:6d:67:86:18:67:44:e6:fa:ef:9a:72:
         27:16:b0:69:48:7d:95:81:8f:6f:93:9e:e9:ec:95:fa:94:c4:
         b8:0d:ad:d5:65:9a:0f:e6:04:0a:b5:b9:77:f2:38:f0:5b:7c:
         ff:2a:78:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:22 2024 by rpki-client on console-fra.rpki-client.org