Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Py8lI0vcJ09Gwoy9PRXk-jT7j4c.roa
File:                     Py8lI0vcJ09Gwoy9PRXk-jT7j4c.roa (raw, json)
Hash identifier:          MNeMJ0v2wvlCHwQcKtQlPbvsAxjZreHqZa7HcquRPV0=
Subject key identifier:   3F:2F:25:23:4B:DC:27:4F:46:C2:8C:BD:3D:15:E4:FA:34:FB:8F:87
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       0FCC
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Py8lI0vcJ09Gwoy9PRXk-jT7j4c.roa
Signing time:             Fri 01 Sep 2023 09:37:18 +0000
ROA not before:           Fri 01 Sep 2023 09:37:18 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     20940
IP address blocks:        2001:4546:1003::/48 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4044 (0xfcc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Sep  1 09:37:18 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=3F2F25234BDC274F46C28CBD3D15E4FA34FB8F87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:9e:d1:a3:e6:d3:fe:ea:ae:de:be:5e:42:85:
                    90:4c:72:16:6a:0a:dc:6b:82:ae:d2:72:78:b7:38:
                    5d:e1:32:2c:a4:c0:0e:9e:ea:55:c6:ad:a7:fb:e9:
                    73:78:fe:37:1d:fa:08:c3:50:11:39:cf:79:00:ff:
                    68:f5:63:2b:03:7a:22:ea:38:44:45:c1:5b:25:ab:
                    87:4c:a9:43:e0:69:f0:61:74:9b:db:45:f9:ff:2e:
                    af:f6:bf:41:d7:2b:e7:ff:1f:85:ab:97:19:46:81:
                    77:6e:ba:e7:a0:54:77:73:4e:ed:41:c7:f1:13:79:
                    76:98:54:c1:6e:e0:14:c6:20:4a:a3:66:70:92:69:
                    9c:61:5f:cf:ea:92:d4:3d:4c:9f:82:0f:aa:5c:99:
                    4b:25:10:41:5f:1a:83:d8:f9:4a:25:76:88:18:00:
                    ed:71:83:db:e6:06:c7:f1:67:71:d9:8a:02:6a:c6:
                    4f:1d:ab:bb:92:4c:a2:35:bf:6e:44:43:38:39:3b:
                    3a:5a:71:ac:bf:0d:5b:1f:47:d6:a9:40:0f:1f:62:
                    40:8d:82:1d:05:3e:a0:a2:e2:99:9d:92:1d:c3:a2:
                    e8:52:e7:34:da:bb:4b:fe:18:a8:da:22:d5:69:24:
                    2b:9e:cf:d3:d1:c6:99:45:67:ec:1a:07:09:7e:4d:
                    b4:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:2F:25:23:4B:DC:27:4F:46:C2:8C:BD:3D:15:E4:FA:34:FB:8F:87
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Py8lI0vcJ09Gwoy9PRXk-jT7j4c.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4546:1003::/48

    Signature Algorithm: sha256WithRSAEncryption
         1b:d9:36:91:0d:5d:26:c9:00:4e:6b:77:de:ae:3f:e6:fe:17:
         bf:86:a5:c9:58:89:66:aa:8a:51:5e:c0:aa:f7:b5:3f:4d:44:
         44:e1:40:72:e0:9a:ce:5a:53:fd:90:c3:e9:d2:18:37:4e:d2:
         4f:b1:5a:e5:13:08:73:f1:c7:e2:9a:f1:79:bb:b8:fc:b6:ab:
         8b:c4:9f:3e:c8:57:9e:24:82:54:21:63:e9:dd:1e:31:24:4c:
         a3:b2:83:22:e5:6e:f8:79:33:6d:e7:30:52:b2:e5:80:48:39:
         64:ef:6e:36:14:e7:bf:9c:a9:3d:f3:fb:38:24:7c:24:40:a2:
         6d:57:6d:4d:12:5a:a6:3c:4c:17:07:40:eb:7e:a8:96:4c:21:
         6c:18:e9:a3:6b:4b:58:ea:56:53:b1:a1:70:eb:53:c0:9d:9e:
         75:31:ae:2e:7d:4d:c4:df:08:18:fb:d4:b3:94:c1:72:79:2b:
         9d:34:4f:b7:12:69:cd:5f:33:c2:37:6e:b0:e0:b3:f6:14:b4:
         0c:5e:bb:ca:3d:94:ef:0a:55:e9:49:a7:9e:ad:62:0b:a8:e6:
         35:c4:ad:11:29:84:73:1e:5f:3b:e4:a5:9e:b7:2c:e7:a2:23:
         39:51:59:da:28:c3:11:14:c8:15:a8:dd:a3:b3:cd:72:a7:56:
         16:31:15:c9
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICD8wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB
NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yMzA5MDEw
OTM3MThaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDNGMkYyNTIzNEJEQzI3
NEY0NkMyOENCRDNEMTVFNEZBMzRGQjhGODcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDhntGj5tP+6q7evl5ChZBMchZqCtxrgq7Scni3OF3hMiykwA6e
6lXGraf76XN4/jcd+gjDUBE5z3kA/2j1YysDeiLqOERFwVslq4dMqUPgafBhdJvb
Rfn/Lq/2v0HXK+f/H4WrlxlGgXduuuegVHdzTu1Bx/ETeXaYVMFu4BTGIEqjZnCS
aZxhX8/qktQ9TJ+CD6pcmUslEEFfGoPY+UoldogYAO1xg9vmBsfxZ3HZigJqxk8d
q7uSTKI1v25EQzg5Ozpacay/DVsfR9apQA8fYkCNgh0FPqCi4pmdkh3DouhS5zTa
u0v+GKjaItVpJCuez9PRxplFZ+waBwl+TbS5AgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUPy8lI0vcJ09Gwoy9PRXk+jT7j4cwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it
/rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O
RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvUHk4bEkwdmNKMDlHd295
OVBSWGstalQ3ajRjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
ACABRUYQAzANBgkqhkiG9w0BAQsFAAOCAQEAG9k2kQ1dJskATmt33q4/5v4Xv4al
yViJZqqKUV7Aqve1P01EROFAcuCazlpT/ZDD6dIYN07ST7Fa5RMIc/HH4prxebu4
/Lari8SfPshXniSCVCFj6d0eMSRMo7KDIuVu+HkzbecwUrLlgEg5ZO9uNhTnv5yp
PfP7OCR8JECibVdtTRJapjxMFwdA636olkwhbBjpo2tLWOpWU7GhcOtTwJ2edTGu
Ln1NxN8IGPvUs5TBcnkrnTRPtxJpzV8zwjdusOCz9hS0DF67yj2U7wpV6Umnnq1i
C6jmNcStESmEcx5fO+Slnrcs56IjOVFZ2ijDERTIFajdo7PNcqdWFjEVyQ==
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:22 2024 by rpki-client on console-fra.rpki-client.org