Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ROUNDROAD/kW4zTYcDA6-e5jpJMm_jVWFf-p8.roa
File:                     kW4zTYcDA6-e5jpJMm_jVWFf-p8.roa (raw, json)
Hash identifier:          vhm2eAhiMU9kijSEpGOhGm6zVCuudm/uiI1p7f8T4iQ=
Subject key identifier:   91:6E:33:4D:87:03:03:AF:9E:E6:3A:49:32:6F:E3:55:61:5F:FA:9F
Certificate issuer:       /CN=10F0AFEDD16DF216580B4F8ED75AFCA328694F19
Certificate serial:       0762
Authority key identifier: 10:F0:AF:ED:D1:6D:F2:16:58:0B:4F:8E:D7:5A:FC:A3:28:69:4F:19
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/EPCv7dFt8hZYC0-O11r8oyhpTxk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ROUNDROAD/kW4zTYcDA6-e5jpJMm_jVWFf-p8.roa
Signing time:             Tue 29 Sep 2020 10:05:42 +0000
ROA not before:           Tue 29 Sep 2020 10:05:42 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     131149
IP address blocks:        103.123.192.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1890 (0x762)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10F0AFEDD16DF216580B4F8ED75AFCA328694F19
        Validity
            Not Before: Sep 29 10:05:42 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=916E334D870303AF9EE63A49326FE355615FFA9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0a:36:ee:f1:bf:01:40:9b:2d:80:5e:f5:19:
                    2d:2b:3c:8c:9d:ce:89:54:e2:48:e4:a4:fa:e6:f7:
                    92:c5:a0:cb:81:62:a9:c5:53:98:10:c0:cf:8b:52:
                    79:ad:a6:b3:fc:8d:09:29:47:ec:56:fa:c9:48:ca:
                    22:cf:69:29:65:a9:98:2c:04:73:01:f4:89:7c:44:
                    07:10:7c:55:b5:b4:ee:ba:01:b3:93:85:84:78:3b:
                    5d:e0:ce:de:88:fa:58:d2:ad:79:1a:ed:30:ab:ef:
                    2c:64:68:83:5a:28:24:9f:7c:51:61:63:08:68:01:
                    22:f1:60:13:5b:fc:b0:f1:cb:21:cb:58:5b:c0:a1:
                    f4:f5:f6:f8:fe:05:ee:93:a9:e4:00:e0:3e:1d:3a:
                    79:da:45:38:7f:9e:1c:50:54:24:d1:db:fd:a0:f6:
                    57:e7:26:1a:40:bc:11:e1:6a:d4:a3:58:4c:8b:e9:
                    dc:47:52:47:7a:32:8c:72:c2:fb:85:b0:e1:1e:8f:
                    21:96:82:ad:e5:93:53:18:3f:2d:cf:49:48:bf:96:
                    41:ad:e3:d4:4d:4b:61:15:4a:cc:fd:b6:0b:99:55:
                    6b:f3:18:ee:d8:fd:d1:fa:b6:da:48:30:cc:c2:bb:
                    f5:e7:00:5c:e8:50:fb:23:10:8c:9d:db:81:65:a4:
                    71:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:6E:33:4D:87:03:03:AF:9E:E6:3A:49:32:6F:E3:55:61:5F:FA:9F
            X509v3 Authority Key Identifier:
                keyid:10:F0:AF:ED:D1:6D:F2:16:58:0B:4F:8E:D7:5A:FC:A3:28:69:4F:19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ROUNDROAD/EPCv7dFt8hZYC0-O11r8oyhpTxk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EPCv7dFt8hZYC0-O11r8oyhpTxk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ROUNDROAD/kW4zTYcDA6-e5jpJMm_jVWFf-p8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.123.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:00:02:79:35:71:f9:0a:b2:98:af:92:38:db:c4:ee:a3:17:
         34:97:ff:22:a9:0e:ff:4b:23:17:f4:91:10:1b:12:59:68:e1:
         d2:27:49:88:09:7d:22:51:ed:fe:69:71:7c:25:e9:50:c5:d7:
         ab:05:24:11:bc:82:3b:a0:a2:a8:74:54:23:84:34:68:f7:66:
         c9:3b:d3:93:4f:96:1f:b2:54:13:36:fc:ae:f5:a0:8c:6a:0e:
         dd:ec:64:5d:60:f5:5a:35:13:8c:b6:8d:cd:36:85:2b:8f:f6:
         1b:e8:d8:ed:27:9b:f4:76:80:ca:2e:3c:a3:57:65:a8:6b:b4:
         9c:95:a1:7c:26:dc:de:40:8d:f7:5b:4f:7c:38:b0:18:06:61:
         64:e2:58:22:2e:a5:8d:99:f2:13:6e:27:f2:a2:b9:82:3b:57:
         fc:61:68:ae:2e:5f:53:6f:b1:d5:6e:f7:a0:d3:24:a9:c6:e5:
         47:e7:c3:2e:6b:13:1d:80:6b:65:53:0f:08:fc:25:53:54:d3:
         73:91:f2:9b:39:02:0e:4a:96:9c:e8:56:45:42:c5:3b:45:96:
         b5:3e:63:c0:f4:ba:99:17:15:5d:a1:f5:6d:ea:4f:59:80:3d:
         26:48:8c:57:b6:bf:03:00:f3:45:5f:37:21:85:7c:5c:6c:28:
         61:ad:cc:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:44 2024 by rpki-client on console-fra.rpki-client.org