Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/P3TInIem0LhaO0roDpyXj4c5vv8.roa
File:                     P3TInIem0LhaO0roDpyXj4c5vv8.roa (raw, json)
Hash identifier:          8nXHENCMywn7ZITfj1kTzMVubCSTNqHiXbGdQIwziII=
Subject key identifier:   3F:74:C8:9C:87:A6:D0:B8:5A:3B:4A:E8:0E:9C:97:8F:87:39:BE:FF
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       0FB9
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/P3TInIem0LhaO0roDpyXj4c5vv8.roa
Signing time:             Fri 01 Sep 2023 09:37:12 +0000
ROA not before:           Fri 01 Sep 2023 09:37:12 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     9924
IP address blocks:        210.62.32.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4025 (0xfb9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Sep  1 09:37:12 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=3F74C89C87A6D0B85A3B4AE80E9C978F8739BEFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:75:10:5b:f4:1b:25:e2:7f:68:89:92:e9:81:
                    3b:85:4a:75:e7:b1:e6:de:77:04:dc:e7:27:2c:f8:
                    1a:62:07:2f:ea:cd:a8:fc:1a:d6:e7:90:9e:ad:b8:
                    97:c5:72:50:e8:be:c8:ce:4a:41:02:ee:93:ad:be:
                    5c:b1:c9:2f:17:bf:9d:8f:9e:c5:c5:55:0b:f8:3f:
                    b2:ef:bf:38:f6:9b:b2:7c:51:9b:d4:bf:a6:0c:b6:
                    a8:5e:a7:e5:85:a7:c3:cb:11:5a:f4:2c:82:b4:7b:
                    66:e4:a5:48:5c:bc:04:dd:08:f9:12:60:9a:20:a1:
                    45:91:52:4a:90:74:2a:c8:68:ae:cb:42:da:7a:0a:
                    0e:4f:00:b8:72:16:34:9a:24:a8:51:e6:35:d2:fe:
                    6c:00:86:18:84:2c:4f:50:14:21:23:70:4e:be:f3:
                    1b:f9:26:e1:0d:35:7e:d7:a0:7c:08:23:2c:70:fb:
                    72:c1:97:88:f6:10:5e:fe:94:d6:3c:29:8a:87:a5:
                    90:65:64:e8:a0:c1:9a:1e:9d:3c:3b:a2:2f:97:45:
                    ac:9e:f4:b0:21:b6:c9:1f:0f:d9:6f:f6:d0:31:af:
                    7b:9f:12:07:d9:39:f7:35:f5:9a:86:24:ab:7b:bd:
                    7a:98:83:fc:20:44:4c:82:f0:d8:02:e0:ad:03:60:
                    8e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:74:C8:9C:87:A6:D0:B8:5A:3B:4A:E8:0E:9C:97:8F:87:39:BE:FF
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/P3TInIem0LhaO0roDpyXj4c5vv8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.62.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         6f:98:94:e9:48:fc:c5:66:b9:eb:03:13:2b:b9:90:e3:7e:69:
         1c:20:10:06:01:60:ef:8a:ee:51:7c:1c:66:1b:43:51:6b:9d:
         a5:c7:05:8b:1b:ad:c8:0a:16:ca:51:09:35:a8:80:18:75:d0:
         33:20:7e:97:0d:38:22:45:55:95:8a:f7:50:12:1c:df:bf:a1:
         e9:90:f2:af:86:f8:d1:20:3d:b2:01:ec:dd:6a:51:de:26:6d:
         ed:39:f5:3e:69:be:c7:f4:e1:e0:d3:11:fb:e1:ac:14:28:83:
         b1:4a:51:89:84:9d:c6:57:96:9c:26:6c:87:5c:04:eb:4d:c9:
         7b:13:7a:e7:d3:ac:47:96:7b:3a:49:f7:c8:1c:e8:15:4c:09:
         4d:d0:27:0c:37:b6:fe:7a:ce:a3:b4:35:77:c1:56:06:21:03:
         10:b5:b7:43:70:ee:97:15:06:85:2c:e9:37:9f:66:54:1c:76:
         a8:ba:cd:78:e9:ff:3b:cb:82:c9:fb:61:4b:99:9d:09:7c:99:
         40:f4:0d:aa:ac:b9:61:4b:14:0a:43:23:6b:28:8a:97:86:fa:
         7c:d4:40:f8:85:f2:a1:ba:7b:88:27:77:0d:8c:36:87:dc:f9:
         6d:47:1d:9b:a6:83:9d:64:e4:01:06:34:a6:49:36:69:fa:7c:
         86:28:73:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:22 2024 by rpki-client on console-fra.rpki-client.org