Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/6kSRDWQ7KlIEyg22EQ7_ZuMaUJ4.roa
File:                     6kSRDWQ7KlIEyg22EQ7_ZuMaUJ4.roa (raw, json)
Hash identifier:          oMc5k2RwDj9pTAX49hIR4qL+Cj2X5PKVgj+dNMv7nmM=
Subject key identifier:   EA:44:91:0D:64:3B:2A:52:04:CA:0D:B6:11:0E:FF:66:E3:1A:50:9E
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       0F72
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/6kSRDWQ7KlIEyg22EQ7_ZuMaUJ4.roa
Signing time:             Fri 01 Sep 2023 09:36:51 +0000
ROA not before:           Fri 01 Sep 2023 09:36:51 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     131634
IP address blocks:        60.199.50.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3954 (0xf72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Sep  1 09:36:51 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=EA44910D643B2A5204CA0DB6110EFF66E31A509E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ba:07:76:d7:e4:ee:16:b8:19:61:a0:21:8e:
                    c1:cc:70:86:08:c9:68:89:e7:cf:92:7b:d0:89:1f:
                    4e:ea:1e:ba:58:33:24:89:36:46:c4:da:bf:63:1d:
                    4f:12:90:3c:87:3d:d6:95:68:77:a0:b4:b8:db:53:
                    b8:d1:e7:a2:cf:44:77:7f:b4:1d:f5:64:0a:93:9d:
                    90:ba:7a:f3:09:31:f6:fb:4d:ad:ac:f3:dd:07:d2:
                    7f:96:cb:75:b9:a8:f2:c2:cb:8b:17:76:82:12:08:
                    25:32:5f:86:bd:f7:be:a7:6c:69:3e:73:f4:e7:87:
                    8f:7d:12:1f:a0:ca:cc:85:6c:40:17:78:7c:7b:ef:
                    ff:b6:e1:76:39:88:5f:6f:e1:30:f1:d1:27:95:d4:
                    01:83:20:77:cc:40:d9:b5:94:43:d0:d6:1e:6d:db:
                    68:35:7f:38:10:1d:e5:af:8f:a7:c8:16:db:5a:a1:
                    25:f7:98:5c:70:da:3b:61:a8:fe:3e:7f:57:d3:51:
                    cc:4e:a1:23:70:1f:39:3b:b8:26:d7:33:f8:19:6a:
                    b6:cb:b7:2a:c9:5b:90:4e:46:b8:47:8b:62:a1:10:
                    ff:0b:09:1f:ba:27:14:a1:64:d7:8e:64:49:e9:05:
                    64:b2:8f:17:01:e3:bb:a8:12:72:b2:97:36:07:88:
                    17:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:44:91:0D:64:3B:2A:52:04:CA:0D:B6:11:0E:FF:66:E3:1A:50:9E
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/6kSRDWQ7KlIEyg22EQ7_ZuMaUJ4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  60.199.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:09:af:ec:2b:40:8d:ee:00:98:ad:27:66:1c:f2:29:85:ce:
         c1:15:49:e4:d1:a3:a3:95:c4:f8:e2:da:cd:37:53:a2:8c:94:
         14:91:fb:36:2f:73:e1:69:12:bc:37:7d:45:be:75:25:5d:a9:
         06:99:98:13:f7:8f:87:53:20:f4:26:5f:4b:c3:60:28:ee:6d:
         7c:3a:e9:82:3d:dc:52:14:ed:d9:5d:86:b5:28:0a:f1:d3:b2:
         3c:ce:9b:ce:2e:e1:34:3c:fa:36:b8:83:5b:bc:2d:5f:96:e5:
         78:66:8a:b1:4c:e9:c4:f5:bd:52:a6:b8:49:09:0d:9c:9b:71:
         09:f6:90:2b:14:c2:61:5c:f4:2c:14:c1:4d:27:46:83:bc:57:
         7d:da:56:e9:98:f1:5a:e1:65:05:5c:57:eb:e8:57:1f:64:2c:
         c4:88:0e:c4:de:cf:02:54:82:48:36:16:3e:0b:82:0d:ff:7a:
         5f:c3:b3:9c:53:42:03:ce:94:7a:2c:53:9c:52:3a:59:bf:6e:
         73:b5:61:85:c3:af:d8:e4:de:8f:4a:3f:3f:8e:1b:95:7c:5c:
         24:ec:ea:bd:23:1d:e2:9a:f8:88:3e:a0:fa:a0:7b:59:34:d8:
         14:33:fa:ca:c1:8b:80:0e:a0:ae:b8:67:d9:6c:8c:3f:10:9e:
         6b:0b:fa:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:22 2024 by rpki-client on console-fra.rpki-client.org