Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/7Nd6kbWvRbz6toZLMtCuu4pobDo.roa
File:                     7Nd6kbWvRbz6toZLMtCuu4pobDo.roa (raw, json)
Hash identifier:          uEzVQFUZc4e7Qs8VEe49TIYJq+EAu1IupDiV0JntkaM=
Subject key identifier:   EC:D7:7A:91:B5:AF:45:BC:FA:B6:86:4B:32:D0:AE:BB:8A:68:6C:3A
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       0FD3
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/7Nd6kbWvRbz6toZLMtCuu4pobDo.roa
Signing time:             Fri 01 Sep 2023 09:37:20 +0000
ROA not before:           Fri 01 Sep 2023 09:37:20 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     24163
IP address blocks:        60.198.36.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4051 (0xfd3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Sep  1 09:37:20 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=ECD77A91B5AF45BCFAB6864B32D0AEBB8A686C3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7e:5b:c8:69:31:d9:fa:22:db:6d:f8:14:44:
                    ac:76:3f:83:63:3b:8a:41:17:66:79:ae:19:7b:86:
                    4f:74:12:b7:ca:ee:b1:ea:3c:2e:4e:b1:88:39:b8:
                    7e:d0:6e:3e:56:9b:80:b3:ca:89:3b:a8:32:8b:ee:
                    9c:e8:58:fd:52:cb:3f:fa:77:1e:28:d6:a2:fc:aa:
                    57:61:c8:40:9e:3f:f8:47:f8:2a:07:d7:d5:c6:23:
                    a3:c6:26:43:2d:f6:56:39:e7:83:c4:57:cd:5c:12:
                    8c:cd:4f:be:27:fd:b1:3d:87:88:5e:c5:96:73:88:
                    f8:e7:39:e0:67:d3:33:b7:cc:7c:1e:6b:b9:00:be:
                    20:f7:4f:b7:7e:3b:07:20:b0:ce:85:a5:1f:e1:c4:
                    de:a1:ae:cc:27:71:64:c0:51:71:da:09:96:a3:4d:
                    4e:f8:28:8b:fc:79:2f:bc:f5:5b:ee:53:a2:f2:c0:
                    36:ca:d7:fd:82:2e:b5:0d:69:7e:aa:42:bd:74:37:
                    64:c4:7e:2f:c6:6a:b1:a3:f4:54:b6:a8:2c:76:3c:
                    0c:85:d3:c5:59:79:29:cc:bf:b1:b7:3e:f4:6f:6d:
                    54:06:b4:78:d1:84:cf:b6:e2:41:12:ff:63:c1:b0:
                    2f:8d:e7:95:03:4c:ee:6a:79:0e:11:2a:76:eb:27:
                    78:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:D7:7A:91:B5:AF:45:BC:FA:B6:86:4B:32:D0:AE:BB:8A:68:6C:3A
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/7Nd6kbWvRbz6toZLMtCuu4pobDo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  60.198.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:d0:fc:ee:62:87:c8:ca:10:d6:2d:48:37:8b:90:94:77:31:
         bd:4d:d9:8c:06:1a:df:cd:4a:8e:51:17:bd:8f:59:fc:df:54:
         7e:fd:94:e1:40:23:86:9a:07:b6:c3:3d:66:ed:26:47:f4:d6:
         0b:30:d6:88:aa:3b:1a:40:11:da:3a:2a:85:5f:46:25:a9:83:
         02:5e:48:93:53:66:6f:3b:5f:9e:15:c0:62:ba:8b:33:db:aa:
         fb:53:08:21:ae:64:b2:d5:ce:82:ec:f6:57:19:fe:a8:ff:90:
         56:24:eb:30:b6:47:fb:c5:01:b7:f7:37:7b:28:a2:15:ea:03:
         0c:c9:86:74:91:82:ce:6a:a6:7a:8b:8c:35:df:d0:29:8c:a3:
         f2:0a:66:c1:c9:3c:a7:02:ca:21:4d:b0:9f:fd:55:39:28:ca:
         ac:08:bd:1b:11:e4:28:6b:19:a2:1f:95:ef:d6:c4:80:43:04:
         fa:5c:05:1c:a1:dc:f6:d9:32:11:c4:36:98:1c:28:52:f5:d9:
         54:bc:92:67:7e:1e:f0:6b:e2:88:c2:49:95:5b:91:91:9d:28:
         5a:a7:d8:3d:75:c0:69:99:b3:c1:39:31:af:fe:17:10:60:ce:
         0d:01:6a:0d:11:14:6b:5a:3f:26:40:48:f0:3c:c4:d2:2b:63:
         fa:7a:4d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:15 2024 by rpki-client on console-ams.rpki-client.org