Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/gwNZwfrkPf-IuUvPddwZY67wpyU.roa
File:                     gwNZwfrkPf-IuUvPddwZY67wpyU.roa (raw, json)
Hash identifier:          xwGKFoYQ5EN5two/GgcamvULZfKRaGeZ+mXGV6HGgAs=
Subject key identifier:   83:03:59:C1:FA:E4:3D:FF:88:B9:4B:CF:75:DC:19:63:AE:F0:A7:25
Certificate issuer:       /CN=01A53261B2001FA7EB57793E2E579B7322F8E76A
Certificate serial:       0BC0
Authority key identifier: 01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/gwNZwfrkPf-IuUvPddwZY67wpyU.roa
Signing time:             Fri 01 Sep 2023 09:40:37 +0000
ROA not before:           Fri 01 Sep 2023 09:40:37 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     9676
IP address blocks:        118.99.128.0/17 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3008 (0xbc0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A53261B2001FA7EB57793E2E579B7322F8E76A
        Validity
            Not Before: Sep  1 09:40:37 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=830359C1FAE43DFF88B94BCF75DC1963AEF0A725
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:21:94:db:98:9a:11:5c:bd:f4:1c:8b:d0:b4:
                    38:37:07:06:2d:09:11:90:30:3f:0a:1d:8c:4c:40:
                    c6:24:17:2c:32:ef:07:9b:9a:c2:94:41:2f:f5:15:
                    13:2b:de:42:b7:d6:31:99:ac:b0:53:60:7b:a1:82:
                    68:de:8c:6e:ba:68:c4:46:d6:0b:35:7b:03:64:f8:
                    35:36:bd:2c:1f:6f:6c:38:6c:89:49:99:58:ee:a4:
                    94:54:f3:ec:18:eb:8a:d4:f9:48:22:29:80:86:03:
                    cb:3d:81:e7:e5:f5:0a:3d:26:cb:09:47:2a:db:48:
                    4f:1c:49:02:ef:ae:8a:50:18:79:3f:95:39:c1:a2:
                    a1:21:6e:e8:6c:c0:f1:fb:23:9e:7a:62:da:30:b4:
                    c3:0b:25:35:8c:41:1c:94:40:a5:4b:99:1c:e4:e7:
                    88:89:0b:d3:cc:d5:34:ae:f1:89:08:a6:93:1d:b7:
                    64:24:7f:2d:69:db:dc:34:38:9d:5f:c9:32:4b:8c:
                    3a:f3:01:a8:33:1a:88:2f:d8:ec:19:e5:44:e4:f3:
                    79:ac:bc:eb:2a:0d:a5:9b:53:aa:5e:aa:1b:40:38:
                    f1:ff:cc:94:17:6a:22:4e:20:e1:9e:26:74:19:da:
                    78:fd:76:d0:d6:e9:b3:76:fa:ff:50:6d:81:0a:dd:
                    51:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:03:59:C1:FA:E4:3D:FF:88:B9:4B:CF:75:DC:19:63:AE:F0:A7:25
            X509v3 Authority Key Identifier:
                keyid:01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/gwNZwfrkPf-IuUvPddwZY67wpyU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.99.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         c8:b9:71:24:f5:0c:a0:d4:35:4a:fe:cb:7f:cc:32:f6:13:8d:
         f8:99:5b:80:a3:74:d7:d8:a8:27:33:6b:68:c3:72:35:00:f0:
         7e:ed:2f:e1:89:06:73:c6:3c:58:4d:d2:6e:02:a6:4d:c2:b6:
         4b:86:2f:9e:91:ed:8d:5b:37:39:16:30:4a:43:41:0c:0b:f9:
         a4:df:ec:d6:f5:80:9e:37:8c:0a:33:cf:5f:cc:f5:59:81:1b:
         08:95:d8:ec:a7:eb:4f:0f:78:42:4d:85:d3:64:93:7f:05:28:
         25:de:14:78:bb:02:42:9e:3e:01:f6:23:75:13:88:87:b9:f2:
         83:f0:e3:9b:bb:3a:f5:de:53:a3:67:51:f8:c0:93:b7:57:7f:
         8d:ec:64:19:24:09:fb:2d:96:91:b2:3b:c7:9b:6c:a0:af:93:
         32:f6:9c:bb:46:5a:d0:7c:79:3a:f2:b8:61:6c:ef:88:58:9f:
         1d:ad:07:dd:b2:9e:76:ff:3c:09:2f:e4:b6:8b:b5:f1:c9:03:
         60:1f:e0:eb:b2:f4:1d:b5:fa:a0:cc:39:75:29:4b:ff:e0:34:
         77:3a:88:5b:97:11:34:b6:cf:38:b0:53:c6:ae:47:2f:b5:ea:
         b3:b5:30:b4:f0:d9:fd:00:7a:b9:ec:e8:9e:d8:b7:5b:d9:07:
         a4:f5:6a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:16 2024 by rpki-client on console-ams.rpki-client.org