Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/gLlkezHqamN6wE8sYOYQOvH2yOA.roa
File:                     gLlkezHqamN6wE8sYOYQOvH2yOA.roa (raw, json)
Hash identifier:          y4mTf6237yszYWWKOlF7G03S4tuMspyFzhIKOCeI2Q0=
Subject key identifier:   80:B9:64:7B:31:EA:6A:63:7A:C0:4F:2C:60:E6:10:3A:F1:F6:C8:E0
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       0F85
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/gLlkezHqamN6wE8sYOYQOvH2yOA.roa
Signing time:             Fri 01 Sep 2023 09:36:57 +0000
ROA not before:           Fri 01 Sep 2023 09:36:57 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     9924
IP address blocks:        210.67.192.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3973 (0xf85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Sep  1 09:36:57 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=80B9647B31EA6A637AC04F2C60E6103AF1F6C8E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f3:13:30:50:71:75:f8:4d:3f:f3:a6:d4:6a:
                    05:53:26:e9:34:5d:d6:ff:99:23:6c:ef:8c:15:d7:
                    95:19:37:03:54:8d:a5:08:1f:f8:ce:6e:99:05:25:
                    46:ad:9e:04:5d:fa:10:f1:f7:e5:d8:4c:73:59:f9:
                    ad:97:f6:e9:29:13:48:20:f5:da:34:e8:f0:8d:87:
                    50:30:8c:2a:6f:53:26:f7:28:93:5b:1c:53:07:1e:
                    18:6f:89:bb:23:07:03:f2:0f:ba:5c:0b:f2:ed:a2:
                    29:68:b8:c2:92:e8:73:41:9e:eb:f5:b5:ae:db:f8:
                    80:26:4b:ac:d4:b8:46:b3:3f:b2:2d:68:b7:4d:2a:
                    c2:39:0e:80:e9:f0:ee:77:16:59:2d:ce:da:85:3c:
                    03:ff:e8:61:a0:9b:23:72:6e:80:d1:25:57:ac:e6:
                    94:4f:7f:9a:de:14:c9:0b:2a:e5:54:5b:29:05:9a:
                    64:3e:f8:72:41:ee:52:17:f5:2e:b6:47:1c:87:dc:
                    8a:33:9d:4f:ae:fd:30:19:6d:cb:2c:dd:43:61:e6:
                    7d:aa:ee:0b:12:62:7c:3d:e9:25:0b:a8:67:67:78:
                    66:67:9a:42:04:53:d1:dd:cf:e5:91:8a:eb:58:a8:
                    a2:fc:18:44:89:2f:74:06:ad:9e:bb:02:06:c5:58:
                    82:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:B9:64:7B:31:EA:6A:63:7A:C0:4F:2C:60:E6:10:3A:F1:F6:C8:E0
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/gLlkezHqamN6wE8sYOYQOvH2yOA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.67.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         0c:89:e8:a8:f8:c9:c1:ba:f2:7f:98:00:1f:9a:63:73:31:1d:
         2d:c2:00:1a:31:d6:7e:4f:91:86:8c:8b:6a:b9:01:8d:9d:9a:
         9e:91:d9:67:30:c4:8e:31:48:24:63:7b:ed:70:f9:c3:c3:c0:
         fa:49:f9:0a:8d:da:bd:24:71:8a:c7:c2:97:33:da:ee:75:dd:
         73:e0:ba:b8:8b:81:8a:ae:52:d9:72:7a:38:7a:85:76:3d:bf:
         cc:14:66:b9:01:a7:de:45:e0:62:e4:05:b2:6c:9f:85:5c:b1:
         16:a1:97:ee:c7:fb:7a:81:7f:07:0a:28:d3:e9:a6:d1:db:17:
         19:42:ad:2a:cc:90:32:9a:19:9f:92:cc:2a:b3:59:f4:13:7f:
         80:06:ed:2a:71:05:71:e7:9a:4c:99:87:d0:b3:1d:1c:ee:d3:
         39:70:32:fe:7b:7d:0f:a6:48:7f:02:6f:0a:d0:a1:7f:f0:85:
         b3:77:c6:ea:8e:b8:f4:66:ba:2a:49:5a:58:07:a4:8c:db:90:
         21:f3:dc:cc:b4:b6:f2:96:e5:41:c5:15:71:9e:09:06:33:25:
         b2:7b:dd:8c:f0:94:f1:04:80:d4:59:e4:30:80:48:12:55:e5:
         de:97:7d:c3:de:7f:e7:54:55:f5:27:31:44:aa:df:8c:e8:34:
         57:97:5a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:22 2024 by rpki-client on console-fra.rpki-client.org