Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/5HjK2jSWFaPSrZW6yWbEJqCR58s.roa
File:                     5HjK2jSWFaPSrZW6yWbEJqCR58s.roa (raw, json)
Hash identifier:          KkasyxDab3EdiZkbD3nlaty8TitJXfB4d0+uRQ4XlgM=
Subject key identifier:   E4:78:CA:DA:34:96:15:A3:D2:AD:95:BA:C9:66:C4:26:A0:91:E7:CB
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       0FC1
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/5HjK2jSWFaPSrZW6yWbEJqCR58s.roa
Signing time:             Fri 01 Sep 2023 09:37:14 +0000
ROA not before:           Fri 01 Sep 2023 09:37:14 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     9924
IP address blocks:        210.17.51.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4033 (0xfc1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Sep  1 09:37:14 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=E478CADA349615A3D2AD95BAC966C426A091E7CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:10:82:01:df:70:e1:65:4a:27:af:de:52:ec:
                    a4:28:f7:ef:76:70:84:d7:4e:1b:c6:70:44:8e:4c:
                    6d:ec:c9:db:22:b4:97:f8:6b:33:a8:0e:f0:d1:8b:
                    36:85:68:c0:3e:c4:1a:5a:55:0f:52:90:a0:3e:62:
                    f2:09:d5:01:04:ce:fd:61:27:9b:04:98:ba:d8:8b:
                    f7:4f:f8:06:0a:1a:8a:f6:6d:10:8f:13:93:e0:fc:
                    74:b4:ea:0f:5d:4c:97:36:2a:19:66:6d:36:15:f8:
                    d4:04:ae:4f:83:f1:54:f4:50:b0:63:34:53:50:20:
                    b7:fc:0f:60:ef:89:8e:d3:ce:90:1c:b7:ef:27:d6:
                    f4:b2:de:6a:79:00:92:e3:5a:eb:13:f5:6b:05:d4:
                    29:20:1e:31:f7:f4:d6:78:ac:76:89:77:62:cf:95:
                    79:4e:29:a8:50:cb:d4:80:58:7d:11:24:de:df:2d:
                    a3:dd:58:32:5a:5d:85:6b:fc:17:d4:c5:37:a7:2c:
                    9f:bb:c1:8f:8c:24:0a:32:1c:fd:7f:b0:b3:71:8b:
                    b2:3e:6e:ac:8e:ad:ce:f1:77:81:0c:36:7f:7f:a7:
                    3f:6c:1c:0b:a2:7d:40:eb:41:1c:32:8a:31:73:08:
                    8f:61:ce:a7:d7:59:40:8f:7d:9d:06:06:93:48:43:
                    4d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:78:CA:DA:34:96:15:A3:D2:AD:95:BA:C9:66:C4:26:A0:91:E7:CB
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/5HjK2jSWFaPSrZW6yWbEJqCR58s.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.17.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:a8:66:85:60:00:c1:0a:ab:79:30:d8:eb:fc:29:a8:40:d4:
         82:a4:50:80:42:e8:48:c5:7b:8d:4b:c1:38:d4:85:4a:a0:bf:
         12:18:c4:2f:1a:d1:aa:de:df:11:06:f1:b0:c6:24:ac:90:ea:
         2c:a6:b0:31:5d:c6:4c:0e:ee:10:a0:3b:a9:b5:28:b8:70:a3:
         0b:fe:8c:06:52:2a:a6:3c:63:c1:c2:86:f6:84:12:07:df:69:
         08:10:8b:2c:63:61:47:16:f1:02:07:ef:ac:96:cd:0b:f3:80:
         26:8d:24:2c:03:29:bb:7f:26:e5:59:31:2d:e9:11:66:4a:78:
         a7:10:d8:04:4d:6e:e0:be:9d:07:36:37:7c:9b:0f:fc:87:83:
         0f:7f:54:b5:fc:58:56:9f:4b:e1:61:3a:72:75:c6:8b:05:ea:
         8b:54:10:a9:1c:46:b8:68:cb:d5:50:07:56:da:86:f3:49:55:
         23:10:08:5c:32:ed:11:a3:45:9a:f8:35:d8:34:1d:d1:e2:e2:
         1b:95:1c:8a:ab:84:71:79:23:8d:e9:89:6f:55:92:41:85:6b:
         98:c2:c6:91:7e:8d:a9:a4:30:0c:1f:db:c7:46:65:9d:97:43:
         af:26:f9:32:2c:a4:e5:78:2d:72:90:9d:c6:b4:1b:90:4c:68:
         e0:26:12:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:22 2024 by rpki-client on console-fra.rpki-client.org