Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/ACq_OENWfzpM8sx--bB0DCb5Sts.roa
File:                     ACq_OENWfzpM8sx--bB0DCb5Sts.roa (raw, json)
Hash identifier:          d46HH1YQPpxq72XU0fqYIr7B+zXcnC9XyeFj6d4XTq0=
Subject key identifier:   00:2A:BF:38:43:56:7F:3A:4C:F2:CC:7E:F9:B0:74:0C:26:F9:4A:DB
Certificate issuer:       /CN=01A53261B2001FA7EB57793E2E579B7322F8E76A
Certificate serial:       0BBB
Authority key identifier: 01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/ACq_OENWfzpM8sx--bB0DCb5Sts.roa
Signing time:             Fri 01 Sep 2023 09:40:36 +0000
ROA not before:           Fri 01 Sep 2023 09:40:36 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     9676
IP address blocks:        211.73.0.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3003 (0xbbb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A53261B2001FA7EB57793E2E579B7322F8E76A
        Validity
            Not Before: Sep  1 09:40:36 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=002ABF3843567F3A4CF2CC7EF9B0740C26F94ADB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:71:88:86:bd:d1:73:3b:19:06:db:31:99:fd:
                    b7:d1:34:7a:54:cc:b5:f3:4e:5f:d8:07:26:a0:6c:
                    0d:42:55:43:28:3e:d4:c5:c7:d8:cc:db:78:3d:54:
                    7e:67:d4:2e:6a:df:99:11:41:b6:6e:ee:ca:8d:ce:
                    44:02:64:4f:e4:0d:53:50:5d:f8:04:d1:62:78:db:
                    b2:1d:5b:00:19:da:94:d1:01:52:f5:de:3f:93:e2:
                    7a:c0:0e:39:5b:ba:3d:bf:5b:26:26:0e:63:73:0f:
                    6b:38:6b:61:c0:54:cf:da:02:b3:23:42:b7:8e:e0:
                    cc:89:b0:d5:5e:7d:d1:1e:22:36:e4:18:dd:b9:a3:
                    b0:e7:ef:ca:45:1f:39:3b:93:e5:f1:75:31:81:dc:
                    6a:f9:f2:66:30:14:3f:17:db:a7:a7:7c:cc:23:ad:
                    2b:2b:f1:dd:b2:d5:aa:a9:1f:4f:59:45:95:61:ae:
                    85:0b:c6:ce:34:0c:15:6b:f3:10:6e:1b:f4:f8:3a:
                    65:b7:bf:e9:0f:36:a6:14:90:ed:7a:62:53:b2:cd:
                    5d:33:b8:0b:32:b7:15:73:4d:a1:6a:a7:26:9c:9f:
                    7f:2d:13:70:28:ac:27:04:2a:73:39:1b:c6:41:77:
                    97:d7:ba:fa:db:d4:dc:aa:10:36:4d:59:4a:6a:31:
                    3e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:2A:BF:38:43:56:7F:3A:4C:F2:CC:7E:F9:B0:74:0C:26:F9:4A:DB
            X509v3 Authority Key Identifier:
                keyid:01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/ACq_OENWfzpM8sx--bB0DCb5Sts.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.73.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         91:72:dc:e9:9b:64:05:01:0f:89:23:a7:99:74:e0:63:d1:5a:
         c8:66:3c:3e:ec:eb:72:75:2a:05:3e:83:2a:e5:d7:56:ec:78:
         96:43:d5:70:40:8a:35:2f:9f:35:8d:d5:20:38:35:1b:d6:c1:
         3d:f4:92:e4:b9:80:19:92:3a:13:87:32:fb:d4:9f:cd:c3:94:
         61:65:84:bb:dc:27:87:81:b7:12:eb:05:40:cc:99:6c:79:e9:
         15:28:87:b8:d6:46:f9:27:0c:69:a4:a3:c8:0f:f6:e2:14:f3:
         c9:e0:81:18:70:ed:2e:e3:35:9c:2d:e4:bb:47:31:a9:20:05:
         d6:a4:ee:56:70:c7:2c:67:04:33:0f:58:23:d1:23:51:23:68:
         3c:85:0c:5f:c8:be:c7:4e:48:8a:bd:58:94:03:b2:94:53:bb:
         a9:30:bc:7b:f8:f0:b3:58:36:c8:9a:c7:da:fe:1e:cc:8c:49:
         3b:09:59:b9:96:99:8c:e7:3d:28:9d:cc:81:01:df:cf:b8:0f:
         d3:00:af:63:49:b4:23:5f:ed:1e:55:c9:ec:48:38:16:b6:aa:
         2f:d8:aa:fc:be:08:d0:28:be:e7:b1:53:ee:76:e1:4a:ed:5e:
         9e:9e:15:95:62:ac:3c:3f:41:7e:c4:3d:6f:ca:99:d0:e7:a5:
         df:9b:c2:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:22 2024 by rpki-client on console-fra.rpki-client.org