Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/ZCDKh7R_wfi7OAajs0m-SzbrqAo.roa
File:                     ZCDKh7R_wfi7OAajs0m-SzbrqAo.roa (raw, json)
Hash identifier:          cSolg6mP/QcHMTM3DZ0ZP4gGaYDkLWZJVOmUB4nAd98=
Subject key identifier:   64:20:CA:87:B4:7F:C1:F8:BB:38:06:A3:B3:49:BE:4B:36:EB:A8:0A
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       1006
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/ZCDKh7R_wfi7OAajs0m-SzbrqAo.roa
Signing time:             Fri 01 Sep 2023 09:37:38 +0000
ROA not before:           Fri 01 Sep 2023 09:37:38 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     24165
IP address blocks:        203.77.44.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4102 (0x1006)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Sep  1 09:37:38 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=6420CA87B47FC1F8BB3806A3B349BE4B36EBA80A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:91:8d:4b:8b:cb:aa:c2:ba:4a:2d:e7:5d:5b:
                    13:08:d3:62:18:b3:f1:bf:28:89:fb:ed:b4:de:74:
                    66:70:cc:dd:3f:6a:30:32:1f:fa:93:a9:6f:8c:a0:
                    47:2d:80:7b:bc:ff:66:a0:e5:4c:ab:3f:64:51:ab:
                    8c:2b:93:f9:98:85:6c:f9:d0:d1:d6:9c:03:5d:e1:
                    c3:56:a6:dc:fb:b4:c9:89:a8:5a:f2:61:fb:65:e4:
                    c9:13:55:ba:72:27:0e:98:a9:c3:40:aa:0a:29:31:
                    f2:7c:03:32:c1:a6:d8:c3:9c:58:ed:88:dd:ef:d1:
                    9a:b0:2d:c4:db:5d:e3:2a:08:43:61:72:fd:43:5f:
                    c6:69:65:b8:35:f6:db:b5:0d:3e:e8:ee:3e:3c:1a:
                    04:38:43:9b:6b:a9:3c:83:65:4c:80:6e:89:08:e1:
                    91:35:e8:2e:5c:15:a0:67:f0:bd:13:d1:53:a3:10:
                    57:8c:2d:7f:7d:cb:00:aa:ce:18:d4:10:f7:12:5d:
                    eb:59:8c:c1:0d:45:6b:ed:2a:9f:b6:27:c9:b4:73:
                    95:ff:d8:b9:86:09:29:48:24:b3:be:64:0a:81:5e:
                    d6:c6:f0:e9:0c:13:8a:d3:b5:7c:14:df:63:99:a3:
                    cc:28:cc:1f:bc:7e:31:21:22:ba:bf:90:1a:25:b4:
                    f2:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:20:CA:87:B4:7F:C1:F8:BB:38:06:A3:B3:49:BE:4B:36:EB:A8:0A
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/ZCDKh7R_wfi7OAajs0m-SzbrqAo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.77.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:9c:09:b7:4d:fa:01:ff:c5:d4:85:2c:48:d7:44:b1:07:53:
         3f:85:1c:9f:a7:b6:a3:5e:c0:57:a6:d3:a0:6b:a5:68:9d:d8:
         da:28:75:9d:2f:15:d6:75:df:22:fa:3a:32:7e:35:c5:c6:e3:
         d8:ef:d4:e5:d3:b8:ac:3a:84:04:a0:b4:94:ee:72:05:f0:3a:
         1e:b1:cb:ec:7f:cc:72:ec:08:a3:54:c4:2b:8c:49:a2:87:e3:
         72:1a:c3:86:9c:4e:4a:cd:89:ba:7f:dc:17:47:26:fa:73:dd:
         43:a7:3b:f7:d4:70:c9:82:2f:d8:2c:b2:f2:fa:0a:12:94:b2:
         f5:e0:db:3c:9f:19:2b:47:03:55:d9:bd:fe:25:0f:ca:eb:7d:
         56:b3:8e:ae:5c:b0:bc:1e:80:a4:50:66:51:30:a2:98:e6:b0:
         8a:9b:00:f1:52:db:60:c0:e7:84:cc:d3:fa:6e:32:02:34:7a:
         a5:b8:7a:64:ac:9c:30:c6:3d:62:98:ef:5e:57:5f:7d:6b:1a:
         e1:4f:83:30:e1:be:d6:ef:45:52:6f:ed:15:f4:40:61:48:b9:
         2c:44:c3:b6:04:e5:80:49:51:13:36:1a:de:ba:27:3f:16:37:
         d3:8e:78:e2:0c:6a:cb:70:ff:3c:af:62:a8:14:e9:a8:bc:40:
         08:19:2f:7a
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICEAYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB
NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yMzA5MDEw
OTM3MzhaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDY0MjBDQTg3QjQ3RkMx
RjhCQjM4MDZBM0IzNDlCRTRCMzZFQkE4MEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDEkY1Li8uqwrpKLeddWxMI02IYs/G/KIn77bTedGZwzN0/ajAy
H/qTqW+MoEctgHu8/2ag5UyrP2RRq4wrk/mYhWz50NHWnANd4cNWptz7tMmJqFry
Yftl5MkTVbpyJw6YqcNAqgopMfJ8AzLBptjDnFjtiN3v0ZqwLcTbXeMqCENhcv1D
X8ZpZbg19tu1DT7o7j48GgQ4Q5trqTyDZUyAbokI4ZE16C5cFaBn8L0T0VOjEFeM
LX99ywCqzhjUEPcSXetZjMENRWvtKp+2J8m0c5X/2LmGCSlIJLO+ZAqBXtbG8OkM
E4rTtXwU32OZo8wozB+8fjEhIrq/kBoltPKNAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUZCDKh7R/wfi7OAajs0m+SzbrqAowHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it
/rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O
RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvWkNES2g3Ul93Zmk3T0Fh
anMwbS1TemJycUFvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
AstNLDANBgkqhkiG9w0BAQsFAAOCAQEAQ5wJt036Af/F1IUsSNdEsQdTP4Ucn6e2
o17AV6bToGulaJ3Y2ih1nS8V1nXfIvo6Mn41xcbj2O/U5dO4rDqEBKC0lO5yBfA6
HrHL7H/McuwIo1TEK4xJoofjchrDhpxOSs2Jun/cF0cm+nPdQ6c799RwyYIv2Cyy
8voKEpSy9eDbPJ8ZK0cDVdm9/iUPyut9VrOOrlywvB6ApFBmUTCimOawipsA8VLb
YMDnhMzT+m4yAjR6pbh6ZKycMMY9YpjvXldffWsa4U+DMOG+1u9FUm/tFfRAYUi5
LETDtgTlgElREzYa3ronPxY304544gxqy3D/PK9iqBTpqLxACBkveg==
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:15 2024 by rpki-client on console-ams.rpki-client.org