Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/LqJN8JlFQEnWHCjgZtjlZ3juMFc.roa
File:                     LqJN8JlFQEnWHCjgZtjlZ3juMFc.roa (raw, json)
Hash identifier:          SY2R/N75TcL8KqPtQUIok60EcbpxemV2Bp5F1l4hY1E=
Subject key identifier:   2E:A2:4D:F0:99:45:40:49:D6:1C:28:E0:66:D8:E5:67:78:EE:30:57
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       0FC5
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/LqJN8JlFQEnWHCjgZtjlZ3juMFc.roa
Signing time:             Fri 01 Sep 2023 09:37:15 +0000
ROA not before:           Fri 01 Sep 2023 09:37:15 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     24158
IP address blocks:        2001:4546:1000:da00::/56 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4037 (0xfc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Sep  1 09:37:15 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=2EA24DF099454049D61C28E066D8E56778EE3057
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:96:c3:fc:c3:12:2d:f6:34:a2:51:e5:fa:12:
                    d5:55:9b:eb:1c:30:12:3a:c3:dd:eb:c7:df:50:77:
                    7f:12:38:86:56:4c:e0:b3:df:cb:f5:84:eb:21:30:
                    fa:e1:06:1a:f7:e8:7f:88:4b:32:39:3f:44:36:33:
                    08:07:71:eb:d8:a5:9d:00:71:25:be:52:2c:42:78:
                    a9:32:87:3b:0d:af:fa:ce:f0:a5:3a:56:53:0d:e2:
                    91:17:25:6e:82:97:0e:3f:e5:77:37:a4:70:28:c5:
                    c6:4b:03:c4:2d:d3:42:3f:fe:0c:00:9d:28:be:d4:
                    62:68:8f:da:01:0d:74:11:78:45:d1:c7:95:4b:88:
                    fe:71:fa:71:fb:c4:aa:52:bd:f8:42:62:ad:63:90:
                    0f:f2:d0:06:c7:5a:03:56:2c:9c:88:a5:2a:0f:cb:
                    d4:92:2a:54:28:c4:31:93:26:de:6c:b0:e5:ba:20:
                    30:8a:2f:b8:04:ae:b6:26:06:6e:68:fd:13:3a:ba:
                    e8:dc:1c:d0:f8:7e:cf:cc:53:12:ad:87:7e:99:77:
                    57:8f:c4:3d:d4:08:a0:a8:10:ba:99:74:53:64:4e:
                    43:6d:38:70:b4:2d:24:0f:ec:60:52:90:ba:89:ab:
                    67:2f:83:1c:2f:18:0e:28:e4:89:1a:f3:b8:0f:1b:
                    95:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:A2:4D:F0:99:45:40:49:D6:1C:28:E0:66:D8:E5:67:78:EE:30:57
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/LqJN8JlFQEnWHCjgZtjlZ3juMFc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4546:1000:da00::/56

    Signature Algorithm: sha256WithRSAEncryption
         00:ac:1c:e5:c5:55:44:62:73:6b:0b:af:f1:cd:f2:8a:e4:56:
         46:49:44:0e:22:eb:22:42:8a:7c:db:8e:f8:28:81:7e:e8:a2:
         47:47:cc:b7:d5:24:f4:92:48:0c:1a:cb:e4:87:d3:0f:9d:02:
         04:b4:e8:e8:30:46:b5:95:3b:b3:1e:d2:87:86:b0:cd:06:9a:
         1e:a4:c2:47:31:80:5e:16:f7:4a:f0:b5:f4:f2:8a:70:07:d1:
         35:73:52:b1:bc:20:0a:b0:a3:3a:79:23:ba:b2:54:e2:55:41:
         f7:be:61:f5:6e:fe:2b:94:a8:52:36:3a:50:3b:bc:06:63:99:
         dc:ab:d7:78:a8:42:32:9b:8b:d1:f5:01:36:1a:8a:3c:d6:04:
         1a:2b:d8:76:e4:03:f7:4e:79:51:eb:01:24:77:c6:15:dc:e2:
         a4:5f:05:75:00:f0:a8:68:c3:15:88:ac:3a:30:aa:ce:de:ac:
         22:17:a1:83:0b:89:1e:3c:66:8d:7d:ae:03:58:20:6a:d8:71:
         e8:c7:a8:18:42:6a:aa:06:00:4a:22:b4:83:5b:ae:c6:da:4b:
         7c:60:67:63:71:5d:ca:79:8d:9f:69:1a:8d:0d:c0:1b:61:cf:
         35:58:27:30:38:13:fe:31:20:5c:08:78:30:c8:34:77:46:b0:
         3f:c7:81:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:22 2024 by rpki-client on console-fra.rpki-client.org