Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/UME2rPGar8u-enS1JpTKM_0M9Zg.roa
File:                     UME2rPGar8u-enS1JpTKM_0M9Zg.roa (raw, json)
Hash identifier:          gFf8QcCgz9pCxKyUqjWQ/FPQCzAsfOzvzahZYA1bKqg=
Subject key identifier:   50:C1:36:AC:F1:9A:AF:CB:BE:7A:74:B5:26:94:CA:33:FD:0C:F5:98
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       0FED
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/UME2rPGar8u-enS1JpTKM_0M9Zg.roa
Signing time:             Fri 01 Sep 2023 09:37:31 +0000
ROA not before:           Fri 01 Sep 2023 09:37:31 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     9924
IP address blocks:        210.208.96.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4077 (0xfed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Sep  1 09:37:31 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=50C136ACF19AAFCBBE7A74B52694CA33FD0CF598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:65:20:66:2b:9b:e4:5a:fc:3b:5c:3c:a2:22:
                    b7:f5:28:05:74:33:82:8a:4f:ce:7a:d5:7c:bc:29:
                    b6:3a:d1:a0:4a:7a:89:b5:d7:96:90:94:2d:05:f8:
                    b0:e8:2a:2c:c0:a7:35:e7:79:04:f9:1c:89:8c:4f:
                    55:d7:21:d5:61:c9:60:b3:6d:cc:80:dc:60:46:cf:
                    be:91:f4:a7:bb:63:40:e3:3b:b9:a2:e4:1b:e9:63:
                    34:81:a1:44:cc:73:d8:86:b3:66:39:cf:8a:d9:59:
                    c8:73:86:d9:bc:88:03:1a:8e:56:42:90:79:33:78:
                    cd:23:5c:9b:5f:09:f5:e2:54:78:66:f5:cb:7d:7e:
                    54:90:68:f1:c9:21:b5:2d:03:aa:ee:db:d0:b5:b1:
                    73:e2:5b:0b:4c:f5:c1:60:fd:e8:6a:d9:5a:cb:46:
                    80:b5:44:64:2b:61:9a:d3:93:c1:a9:f6:78:49:00:
                    91:96:13:08:cc:49:b2:2d:12:02:cf:98:08:49:b6:
                    a6:cd:ab:63:1f:ae:d3:42:ba:7c:5d:05:76:2f:0d:
                    56:de:fb:a3:2b:05:fc:10:67:3d:f5:bc:d2:2d:89:
                    02:d9:0b:3c:fc:94:e3:2e:13:fe:f4:82:9f:98:2a:
                    12:78:9b:17:e9:ba:30:49:9d:c7:13:3d:3a:73:e3:
                    05:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:C1:36:AC:F1:9A:AF:CB:BE:7A:74:B5:26:94:CA:33:FD:0C:F5:98
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/UME2rPGar8u-enS1JpTKM_0M9Zg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.208.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         4b:29:62:60:11:14:28:d9:4c:9a:00:03:21:19:af:ec:a9:00:
         9c:4e:f7:db:33:84:d6:da:7c:ea:c2:a1:e6:9b:0f:02:60:12:
         a7:c0:b3:6a:b2:6c:9e:d6:e7:26:25:4b:12:dc:60:ec:ac:72:
         5c:5e:89:a6:5e:d6:82:46:38:0b:bb:3e:0c:16:bc:3a:28:a0:
         6d:e8:fa:a1:ea:f5:1e:af:a8:8d:f1:26:e4:3b:9f:d4:14:4b:
         2c:8d:4d:d4:44:cc:66:99:24:48:be:33:31:c3:8e:ba:0b:6b:
         c5:74:b1:4c:bf:a9:ed:22:79:5d:82:d9:70:92:e8:18:d6:59:
         32:11:99:83:36:fb:b7:08:a9:9b:88:7a:dc:d3:42:fb:87:0a:
         6d:51:2b:0e:71:b4:63:f3:69:44:c2:b0:f1:22:56:9c:bb:64:
         64:96:66:77:62:e5:21:6f:09:6a:17:40:87:f2:1e:d0:0f:dd:
         59:8a:0d:e4:91:7a:5b:3c:4f:80:dc:ae:2f:ab:77:75:fd:4a:
         fd:69:39:e5:44:e2:71:bc:79:d9:1d:6a:b7:38:92:ce:db:e5:
         6c:e6:f4:3e:1d:34:d1:7c:98:b0:2a:45:4f:58:96:33:72:dc:
         d8:c8:89:9c:06:5b:70:7c:0a:8f:dc:a1:85:35:8d:8b:d3:0f:
         01:8f:dd:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:15 2024 by rpki-client on console-ams.rpki-client.org