Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/2Z--0V3exPl24KduyU5PG_JbMpQ.roa
File:                     2Z--0V3exPl24KduyU5PG_JbMpQ.roa (raw, json)
Hash identifier:          9emLg/0cKq5wAzrzo54KHaNQKGE16GkFthtRqzyDrjE=
Subject key identifier:   D9:9F:BE:D1:5D:DE:C4:F9:76:E0:A7:6E:C9:4E:4F:1B:F2:5B:32:94
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       10E2
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/2Z--0V3exPl24KduyU5PG_JbMpQ.roa
Signing time:             Tue 25 Jun 2024 01:55:50 +0000
ROA not before:           Tue 25 Jun 2024 01:55:50 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     135596
IP address blocks:        60.198.155.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4322 (0x10e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Jun 25 01:55:50 2024 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=D99FBED15DDEC4F976E0A76EC94E4F1BF25B3294
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:34:49:85:d9:4d:3a:b4:3a:57:fd:a3:ea:7c:
                    ff:3a:ad:6d:83:b3:00:e5:45:be:e5:b4:4f:13:72:
                    6c:cb:4b:d9:c2:7e:80:6a:9e:21:63:f2:df:c8:33:
                    81:3e:93:ac:89:1d:37:75:a7:41:da:6c:74:e4:8c:
                    12:75:d6:6e:ed:e2:5c:bf:ea:d0:e1:87:00:26:38:
                    f7:59:9a:6f:f6:c2:b7:c5:5f:7d:fe:e9:f7:20:6a:
                    68:f6:82:47:8b:b1:7a:bb:2d:87:1d:ba:73:a0:32:
                    93:75:6b:1e:5d:0a:65:eb:58:1f:b9:e8:bb:69:05:
                    ba:3d:ad:9a:11:43:4a:8e:a5:96:40:5b:7c:3a:a5:
                    29:43:2d:27:f5:c6:28:71:7d:ad:a7:8c:ae:f8:48:
                    21:57:b9:c5:a3:cf:76:cd:c2:69:59:82:7b:a2:c9:
                    01:bb:8a:f0:e9:cf:23:f3:d7:eb:09:ca:d6:ac:03:
                    cb:72:de:9b:17:aa:84:c2:67:0e:e6:0d:7c:7a:08:
                    31:09:b9:70:0f:a2:c6:f1:0b:b5:dc:f8:f4:cc:cd:
                    62:72:31:10:c9:25:f2:59:dd:14:98:6b:f1:03:c5:
                    38:02:79:fe:b4:11:cc:cf:ac:5b:64:2e:8a:ff:e6:
                    af:0f:f7:7e:a9:b4:de:02:3a:81:b5:d7:94:9c:b3:
                    df:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:9F:BE:D1:5D:DE:C4:F9:76:E0:A7:6E:C9:4E:4F:1B:F2:5B:32:94
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/2Z--0V3exPl24KduyU5PG_JbMpQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  60.198.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:c4:27:82:57:92:23:30:7e:db:5a:97:8e:b1:22:5c:a3:7c:
         cd:ce:6d:86:54:29:02:a1:77:e8:55:a0:ce:ae:61:f9:ec:a2:
         07:46:d4:e6:f5:16:8e:52:05:37:aa:63:cf:0f:5d:4b:33:3f:
         ce:75:e2:86:c2:70:db:ec:57:fd:bd:be:02:94:07:26:06:a5:
         4f:5d:aa:22:a4:b9:da:e7:94:fc:7a:b1:50:2c:62:30:31:8f:
         a9:c3:09:20:41:ed:4c:a1:6c:28:f2:1d:b1:07:3a:4b:60:5c:
         02:ce:97:55:36:1c:ec:6d:b4:ed:62:b4:67:65:7c:81:44:e1:
         3f:d9:2c:26:72:4f:3e:cb:69:a5:f0:10:6c:b5:b3:37:bd:cc:
         d1:8c:61:45:28:ee:b9:ed:05:3e:49:05:03:ae:2d:85:73:da:
         3b:54:11:db:f4:8d:8c:dc:d0:45:25:e4:e1:88:62:40:29:a3:
         18:c1:f7:16:51:f5:9d:79:13:b0:a6:85:c2:ec:82:95:3b:fd:
         f4:b9:9f:79:7d:ef:ed:6a:6a:b9:1b:b2:ea:ce:5a:29:a0:42:
         1d:b6:21:ab:50:e6:05:bf:63:80:5f:29:47:fb:8f:9e:3f:61:
         1b:6a:46:70:9c:0d:b3:f0:d0:e4:fc:42:c1:45:aa:6c:9f:c5:
         a0:87:1a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:15 2024 by rpki-client on console-ams.rpki-client.org