Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PIINET/vqv5eb1EjDa7g3g_W33R5aphRMM.roa
File:                     vqv5eb1EjDa7g3g_W33R5aphRMM.roa (raw, json)
Hash identifier:          6S+3TwdMJsyCGvJMJh8u57PNPKIJWwVQdsfiUXQcoX0=
Subject key identifier:   BE:AB:F9:79:BD:44:8C:36:BB:83:78:3F:5B:7D:D1:E5:AA:61:44:C3
Certificate issuer:       /CN=69797BDE8D0581FA299D8E1420ED2957C4208A07
Certificate serial:       0B10
Authority key identifier: 69:79:7B:DE:8D:05:81:FA:29:9D:8E:14:20:ED:29:57:C4:20:8A:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/aXl73o0FgfopnY4UIO0pV8Qgigc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PIINET/vqv5eb1EjDa7g3g_W33R5aphRMM.roa
Signing time:             Fri 01 Sep 2023 09:35:53 +0000
ROA not before:           Fri 01 Sep 2023 09:35:53 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     17710
IP address blocks:        103.234.80.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2832 (0xb10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69797BDE8D0581FA299D8E1420ED2957C4208A07
        Validity
            Not Before: Sep  1 09:35:53 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=BEABF979BD448C36BB83783F5B7DD1E5AA6144C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:31:76:b5:82:1a:67:4e:21:6f:5c:aa:7a:c2:
                    60:d4:ad:b0:90:f2:51:6d:a6:49:da:27:49:a6:27:
                    d0:b9:07:90:61:95:b8:a9:d3:91:13:bb:ec:30:ed:
                    44:7e:b6:48:e6:8c:e0:de:ce:28:7d:b4:45:fc:f1:
                    6b:8d:01:ab:5e:e9:99:28:c3:1c:31:c8:e4:41:56:
                    cb:ff:67:00:c7:1c:22:ab:28:31:89:0b:fe:7b:3c:
                    f6:c9:92:af:d2:45:52:6c:ed:4b:8a:2c:20:17:8c:
                    32:06:2f:19:3f:78:71:ea:16:11:0b:a9:20:67:21:
                    e8:de:08:12:73:7e:bc:1f:9d:a6:e8:0a:09:49:4b:
                    2b:f7:67:d8:0c:c6:f9:37:74:04:48:a1:81:b8:78:
                    95:12:8a:b4:b3:65:f4:ea:5d:18:7e:a5:3f:0a:5a:
                    e5:1f:67:3f:a4:49:84:58:ff:c0:be:0d:9d:60:25:
                    f0:f3:76:ed:dd:f7:c0:a1:83:ed:2f:77:21:b8:53:
                    29:42:b6:2c:d2:d3:9e:9a:10:bb:3d:b9:43:7e:f8:
                    0c:75:59:e2:1e:ae:4b:e5:a8:76:48:e1:93:29:7d:
                    88:fb:cc:3b:48:cd:80:57:9f:7d:f9:37:8f:51:5a:
                    83:05:89:8f:da:c2:81:2e:ff:77:3a:e3:3b:58:8b:
                    b0:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:AB:F9:79:BD:44:8C:36:BB:83:78:3F:5B:7D:D1:E5:AA:61:44:C3
            X509v3 Authority Key Identifier:
                keyid:69:79:7B:DE:8D:05:81:FA:29:9D:8E:14:20:ED:29:57:C4:20:8A:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PIINET/aXl73o0FgfopnY4UIO0pV8Qgigc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/aXl73o0FgfopnY4UIO0pV8Qgigc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PIINET/vqv5eb1EjDa7g3g_W33R5aphRMM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.234.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         40:7a:54:2c:7c:05:1e:7b:f7:cd:66:ce:78:08:67:cc:45:57:
         e4:cf:a4:b9:58:da:8b:5d:db:a7:95:1e:50:6a:9d:f0:f9:c5:
         c3:f1:48:30:0a:46:ee:eb:2d:b8:63:2d:62:d4:44:fd:e4:ed:
         47:2e:7a:47:48:d9:27:06:c0:00:8e:fc:4e:f8:65:d7:21:b1:
         af:e9:6a:90:0f:c0:80:f2:bf:60:33:95:78:7f:28:4e:47:38:
         04:94:d5:e9:35:61:25:60:76:c4:ae:fd:22:43:c7:b6:28:ab:
         af:8c:34:d9:b0:8f:65:fb:86:a4:a3:96:f4:24:c9:d5:03:71:
         fc:cc:ba:e8:de:3a:b2:d0:38:d8:a5:35:6b:ae:12:ec:87:c3:
         0d:8f:39:8f:95:f6:80:01:66:3a:14:1b:4f:01:35:7a:a0:a6:
         6a:03:a1:c6:e5:99:a8:0d:f4:ff:11:2f:a0:3c:3c:c5:83:34:
         d3:ef:84:8e:c6:c0:93:3f:8c:64:fc:62:c1:20:82:d1:5d:4f:
         6d:e1:39:8f:46:5a:36:fe:fe:3d:de:fa:6b:8a:8c:af:54:51:
         b0:62:3b:bc:d7:9e:71:0e:f7:05:0e:da:20:ff:7f:87:8d:3c:
         17:3a:cc:cb:01:8e:3b:d9:e2:50:00:00:80:93:16:f6:a2:2b:
         69:81:d0:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:22 2024 by rpki-client on console-fra.rpki-client.org