Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/ieNSVAAEje6AiJm_08VVkwoUUHg.roa
File:                     ieNSVAAEje6AiJm_08VVkwoUUHg.roa (raw, json)
Hash identifier:          nmvbFXw2PZfOcDCuYGHcAFblJk5jtChF+1EwhZx6vZo=
Subject key identifier:   89:E3:52:54:00:04:8D:EE:80:88:99:BF:D3:C5:55:93:0A:14:50:78
Certificate issuer:       /CN=0DF94AB0728C7A38C50F0D61554D49D651F33AA2
Certificate serial:       0B52
Authority key identifier: 0D:F9:4A:B0:72:8C:7A:38:C5:0F:0D:61:55:4D:49:D6:51:F3:3A:A2
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/ieNSVAAEje6AiJm_08VVkwoUUHg.roa
Signing time:             Fri 01 Sep 2023 09:35:25 +0000
ROA not before:           Fri 01 Sep 2023 09:35:25 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     131593
IP address blocks:        43.251.63.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2898 (0xb52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DF94AB0728C7A38C50F0D61554D49D651F33AA2
        Validity
            Not Before: Sep  1 09:35:25 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=89E3525400048DEE808899BFD3C555930A145078
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:0b:8d:94:5c:da:9b:e1:1f:13:5f:e0:ce:5a:
                    98:70:41:bf:65:f6:c5:f7:c7:05:f5:a3:32:eb:ba:
                    83:d3:79:27:7c:74:ce:e6:43:16:23:2c:5c:74:a1:
                    ef:18:ce:4a:22:b2:37:09:e3:3c:05:a7:bf:e9:85:
                    6d:94:6c:61:b7:a2:59:6d:b8:3d:aa:53:57:dd:ff:
                    ba:99:af:22:29:e6:ac:73:6e:db:60:34:db:46:f9:
                    93:db:c1:b0:e8:be:29:0c:0a:bc:7a:ea:19:bc:e9:
                    66:66:b8:4d:74:cd:83:1e:c0:17:fd:c2:c7:33:1f:
                    db:ca:08:73:06:54:1c:b2:d5:b6:37:f4:3c:8b:06:
                    9f:c6:aa:91:46:8e:bc:0d:31:1a:e6:69:9e:76:7c:
                    08:8c:97:4f:49:16:f7:89:d1:eb:ee:9b:2f:4a:61:
                    17:5f:39:e9:7b:70:73:0d:e3:27:18:fa:47:04:d7:
                    fe:ac:8b:d9:42:94:46:8c:f7:d0:bd:3f:42:a3:7f:
                    7c:99:b7:3f:ea:a8:ac:4b:1e:1f:d2:63:cd:8e:a2:
                    8b:3f:6a:33:78:78:11:c7:fa:bf:a1:7f:33:8a:c2:
                    79:54:dd:9f:d2:9e:df:eb:0d:ea:93:21:7c:cc:2c:
                    ff:32:14:c4:21:fe:d7:ac:c6:82:11:26:a7:22:bf:
                    f9:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:E3:52:54:00:04:8D:EE:80:88:99:BF:D3:C5:55:93:0A:14:50:78
            X509v3 Authority Key Identifier:
                keyid:0D:F9:4A:B0:72:8C:7A:38:C5:0F:0D:61:55:4D:49:D6:51:F3:3A:A2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/ieNSVAAEje6AiJm_08VVkwoUUHg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.251.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:b8:88:66:8d:f5:18:ab:a6:8d:5e:8e:15:a5:f1:bc:8d:f9:
         4a:1b:cc:72:65:fd:fc:c7:9e:1f:12:3f:9d:b9:ec:48:f1:6e:
         13:ad:37:f1:bb:97:de:82:90:2f:27:30:2d:a3:d2:66:65:8e:
         d1:1d:81:bb:61:cb:c0:5d:bd:6d:ba:92:e8:3a:d1:33:b7:dc:
         cd:91:09:d9:b4:6d:8c:da:23:76:1d:1d:e6:e6:94:85:bc:8c:
         6e:37:ba:62:22:9a:23:8d:a3:9e:f3:64:4f:96:1a:e6:28:54:
         5e:41:cf:27:71:9f:81:b5:8e:c3:da:02:84:0e:c6:78:fe:88:
         d5:bb:ce:8c:c3:67:69:8d:6e:61:12:7d:c4:22:48:ae:40:6f:
         91:cb:98:35:a0:ab:38:41:4b:3a:fe:ba:8e:47:cf:84:d7:3a:
         56:97:4d:01:88:ab:fa:ff:43:dc:86:04:00:fb:5c:56:28:ba:
         66:ff:77:8a:b8:9e:ca:ca:f1:90:41:8d:58:e5:16:30:6f:c9:
         f6:03:67:52:6a:a1:b5:ba:85:dc:ba:c2:e3:84:e3:52:e9:78:
         3b:ba:38:3b:c0:c9:f5:9c:02:54:4a:44:39:5a:64:86:d8:bb:
         3c:fd:eb:66:b5:72:88:68:1b:23:7b:fd:d9:81:b7:0d:30:7e:
         3d:48:16:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:15 2024 by rpki-client on console-ams.rpki-client.org