Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/1X0vIMblCr-wkDIXPAluMiKZYRE.roa
File:                     1X0vIMblCr-wkDIXPAluMiKZYRE.roa (raw, json)
Hash identifier:          sK358Y+wUEyl6yycMSlhgi2KeJw9pYaYsyP+i9eimjM=
Subject key identifier:   D5:7D:2F:20:C6:E5:0A:BF:B0:90:32:17:3C:09:6E:32:22:99:61:11
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       0FC8
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/1X0vIMblCr-wkDIXPAluMiKZYRE.roa
Signing time:             Fri 01 Sep 2023 09:37:16 +0000
ROA not before:           Fri 01 Sep 2023 09:37:16 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     9924
IP address blocks:        210.17.80.0/20 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4040 (0xfc8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Sep  1 09:37:16 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=D57D2F20C6E50ABFB09032173C096E3222996111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:56:03:d7:ef:a7:cd:eb:0d:f1:fc:de:93:5f:
                    19:1f:1e:20:d8:d9:fb:fd:2c:37:e5:cd:a0:a6:ae:
                    b6:8f:c4:17:f3:df:9d:f7:1d:9c:65:95:f6:0e:46:
                    f3:b2:29:2c:9c:c1:38:2c:a7:5c:78:cd:6c:b0:a1:
                    91:2f:47:b7:69:f3:3c:88:28:5c:70:e1:a5:5f:08:
                    42:57:e7:68:33:3f:36:fa:3f:25:9a:0f:bb:d2:e1:
                    df:48:ea:ef:5f:76:76:b6:ef:de:90:c5:3f:2c:b4:
                    07:f8:de:af:ff:e5:df:5b:1d:93:5f:05:ef:3c:8c:
                    15:55:0c:c6:c6:5c:f3:94:ad:d9:ef:ab:6b:bf:a3:
                    fb:80:46:68:35:8e:75:57:a6:fc:a2:bd:76:49:51:
                    82:ca:f9:d2:8b:bf:91:ed:14:e4:8d:cf:54:cd:e8:
                    d2:95:fc:90:98:e3:fa:85:85:ea:e4:df:ca:b8:58:
                    96:bb:7f:3e:97:01:99:31:6c:fc:92:f3:65:3f:9e:
                    57:75:f1:af:d9:31:f3:a7:22:6c:5e:8b:99:9a:0c:
                    03:8e:91:df:5d:b2:e2:12:3c:ad:35:e4:3d:7e:57:
                    a8:28:9d:26:e8:c5:05:f9:ac:d0:83:47:3c:db:e7:
                    fc:ac:56:fc:d5:1f:01:34:97:0d:99:ae:19:17:e6:
                    9b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:7D:2F:20:C6:E5:0A:BF:B0:90:32:17:3C:09:6E:32:22:99:61:11
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/1X0vIMblCr-wkDIXPAluMiKZYRE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.17.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0b:a7:9b:33:21:cc:ca:38:d8:c2:0e:bf:e0:c9:ca:de:ed:c2:
         29:2b:c8:2d:bc:41:1f:b8:b7:b8:6d:d2:e1:73:f1:47:a4:2a:
         aa:a5:16:d0:80:6f:38:e8:b1:9c:ae:37:bb:32:8f:4f:cf:c4:
         56:50:3f:21:40:f7:c1:7f:b2:75:2b:5c:24:fe:f3:f3:8c:55:
         7a:df:1a:74:4b:d6:5d:66:8a:a5:39:54:0a:ef:b2:95:f2:e9:
         1c:b7:81:9a:ef:e9:55:20:b6:ed:3d:19:2a:18:62:06:4c:4d:
         e0:9e:7b:da:e5:59:76:3a:56:9b:7f:53:c0:e8:32:25:c9:64:
         69:ac:10:fa:02:8f:ac:d6:46:ec:74:3c:d2:d8:c3:6d:2f:0c:
         b2:60:cb:e8:b3:7a:3c:d3:a3:86:11:02:95:9b:a5:aa:23:6f:
         66:6f:f0:0b:be:19:74:70:4f:a7:bc:81:1f:a3:ea:05:a0:ed:
         c3:eb:40:82:1f:6b:40:d5:c9:04:10:3d:0e:86:79:33:89:9c:
         51:c3:96:89:de:9e:43:cf:19:33:57:36:26:4d:f3:68:1f:3d:
         bd:f5:80:7e:61:ff:b1:bf:a4:13:40:4d:3a:1f:c8:c2:91:08:
         13:31:d4:a0:06:40:db:7b:f7:ef:80:1f:74:f6:e9:51:55:fc:
         06:cf:f3:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:15 2024 by rpki-client on console-ams.rpki-client.org