Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/G9k0be2tBiSGN8aA49BcJMnN-fY.roa
File:                     G9k0be2tBiSGN8aA49BcJMnN-fY.roa (raw, json)
Hash identifier:          aSlyszmjmH6Z/6B02qLJaLEwxT2/p/qxRgjMUU+pxvo=
Subject key identifier:   1B:D9:34:6D:ED:AD:06:24:86:37:C6:80:E3:D0:5C:24:C9:CD:F9:F6
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       0F6E
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/G9k0be2tBiSGN8aA49BcJMnN-fY.roa
Signing time:             Fri 01 Sep 2023 09:36:50 +0000
ROA not before:           Fri 01 Sep 2023 09:36:50 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     9924
IP address blocks:        60.199.134.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3950 (0xf6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Sep  1 09:36:50 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=1BD9346DEDAD06248637C680E3D05C24C9CDF9F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:57:75:09:6b:ce:50:da:c0:11:9b:dc:3e:f9:
                    a1:f6:12:90:61:5a:6b:98:15:f2:b5:a6:f7:0d:fe:
                    7d:ed:9a:0e:8c:ac:48:4c:1d:46:35:5a:61:ac:96:
                    75:85:d0:8f:9e:4e:65:53:55:22:43:88:01:02:00:
                    d0:51:3f:5a:2a:df:3b:89:42:6d:cd:f1:c7:c0:5f:
                    4f:c8:33:ce:f1:ff:ba:a8:2c:3f:65:f0:dc:5f:c3:
                    c4:d1:04:4a:83:92:bc:cb:b1:fb:f8:39:e7:0b:f6:
                    71:c3:34:9d:99:e0:1a:bd:b2:ce:44:fc:8d:49:d4:
                    e8:ca:95:06:57:5b:b7:91:c0:73:31:31:ac:d3:60:
                    0a:d3:ba:9c:46:3e:08:56:7a:71:0b:44:73:13:96:
                    a3:c1:06:48:d7:40:94:cf:8e:a4:8f:28:38:03:05:
                    23:af:78:9b:75:59:5f:43:83:0f:67:d8:05:80:c9:
                    d2:6a:12:19:69:e6:ed:7b:10:a5:a4:77:cd:dd:33:
                    3e:d1:6d:fc:cb:87:b0:51:3a:b0:2b:09:8f:e2:67:
                    3f:a8:f2:b2:7c:c5:dc:26:29:4e:03:32:35:c6:26:
                    93:7c:53:6f:41:d1:46:d7:70:37:e2:9b:55:bc:7b:
                    bd:84:87:20:3d:7d:08:bc:b0:66:11:0c:34:c1:71:
                    67:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:D9:34:6D:ED:AD:06:24:86:37:C6:80:E3:D0:5C:24:C9:CD:F9:F6
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/G9k0be2tBiSGN8aA49BcJMnN-fY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  60.199.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:07:c7:56:b2:34:65:43:ee:40:14:9f:e9:b8:58:f8:47:3a:
         4b:51:a9:45:41:e7:1a:da:81:5a:e8:1e:5a:04:08:c0:2a:c5:
         68:16:64:59:d8:80:15:a8:8d:24:f6:3c:b7:8b:5b:f4:f4:e3:
         da:d0:6c:30:15:6b:fe:d9:66:d9:ba:e5:66:ce:24:5c:a9:bd:
         2a:38:d0:0a:1a:a5:71:38:be:5b:58:d2:b0:e5:b4:0f:64:e1:
         6d:11:06:1f:39:f1:fd:ae:49:f9:22:89:64:6a:4e:f2:66:1e:
         45:c2:15:52:a7:1b:9c:6c:8d:c9:e9:89:e0:e3:d2:68:45:a0:
         a2:bc:95:80:4e:28:2f:ad:3e:45:90:8c:75:2c:47:e2:f5:37:
         b8:5e:77:28:23:91:d1:0f:64:9f:ad:8e:1f:be:01:ca:58:ac:
         b7:59:1a:ff:55:6a:61:af:12:1b:06:13:48:73:13:35:24:37:
         b3:90:84:7d:38:99:d9:53:bb:3b:13:77:de:df:ae:a2:97:c4:
         15:a7:5c:4e:41:28:2a:70:78:34:48:db:07:72:6f:a0:14:f9:
         28:c4:a7:7a:b4:18:67:6c:f2:bd:b9:81:12:ad:79:c9:12:84:
         68:98:e6:ab:e6:34:fd:c8:ac:1e:a2:7b:3c:09:75:d5:18:9a:
         f4:a7:ab:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:15 2024 by rpki-client on console-ams.rpki-client.org