Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/GioVl2_S2V5w6qhAxegRNXH0pn8.roa
File:                     GioVl2_S2V5w6qhAxegRNXH0pn8.roa (raw, json)
Hash identifier:          A6ICUJGRIZ7mYuSWqALzxGhZyScJxoMFf+C92dkC4wg=
Subject key identifier:   1A:2A:15:97:6F:D2:D9:5E:70:EA:A8:40:C5:E8:11:35:71:F4:A6:7F
Certificate issuer:       /CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
Certificate serial:       0BA3
Authority key identifier: 00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/GioVl2_S2V5w6qhAxegRNXH0pn8.roa
Signing time:             Fri 01 Sep 2023 09:44:04 +0000
ROA not before:           Fri 01 Sep 2023 09:44:04 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     38047
IP address blocks:        2402:c340:54::/48 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2979 (0xba3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
        Validity
            Not Before: Sep  1 09:44:04 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=1A2A15976FD2D95E70EAA840C5E8113571F4A67F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:10:70:ab:fd:93:33:91:91:e6:b1:03:d5:ad:
                    43:da:f4:8c:7e:d3:5f:33:60:56:8e:4b:00:f0:70:
                    26:c8:b0:1e:f0:bd:d8:75:74:1a:9a:02:1e:58:fd:
                    de:e7:e7:a7:fa:cd:2a:46:66:17:2a:96:24:f6:4b:
                    3d:7f:56:14:fd:4b:cc:44:ff:2d:c8:ad:19:2c:d8:
                    d4:a7:01:3e:28:fc:ae:a1:2d:5d:6f:93:99:0a:ee:
                    06:44:bc:1b:1e:ad:03:f1:3b:03:12:a6:a1:48:de:
                    6f:5e:64:bc:3b:21:31:83:87:bd:8f:6f:41:9a:95:
                    49:65:c6:cb:b1:06:9f:89:eb:81:91:87:26:61:6e:
                    28:79:0f:84:15:a1:0b:2f:f6:98:2f:2f:c7:1b:17:
                    e5:83:32:1f:5c:83:05:7d:83:5a:8f:6f:fb:13:cb:
                    73:85:21:b2:17:68:5e:3c:84:9d:a7:b9:17:dc:e2:
                    53:69:e0:69:66:a0:54:f4:cd:7f:73:66:ac:c9:d5:
                    e4:85:ef:9b:8b:3d:78:c9:a0:20:9d:dd:1f:4b:88:
                    99:80:62:8b:09:59:81:0f:c9:5e:d2:9f:5e:9b:1a:
                    88:46:cf:e3:f9:80:ef:ad:4c:1e:4f:7e:7d:32:f9:
                    68:73:d4:bb:7c:d4:a9:6c:93:36:b0:bc:a1:6f:ae:
                    4e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:2A:15:97:6F:D2:D9:5E:70:EA:A8:40:C5:E8:11:35:71:F4:A6:7F
            X509v3 Authority Key Identifier:
                keyid:00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/GioVl2_S2V5w6qhAxegRNXH0pn8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:c340:54::/48

    Signature Algorithm: sha256WithRSAEncryption
         66:c6:76:64:19:e1:57:89:ae:da:12:63:09:a1:55:6b:84:d2:
         4a:a1:e3:b7:51:97:8f:f0:2f:47:7e:3f:48:f3:13:f2:3f:09:
         80:af:6f:c1:68:51:cd:88:02:f1:05:75:b2:99:b7:d3:66:32:
         a4:57:15:41:f4:60:c7:fc:a3:d6:75:db:12:7a:dc:a9:99:5d:
         81:2c:17:54:d9:8d:03:db:cc:7c:42:cf:72:44:a5:36:66:30:
         40:0e:52:d7:b9:c1:d4:c7:a5:f0:6b:47:05:78:48:ad:75:a4:
         95:d0:ec:a3:b1:64:a2:e0:0b:a9:f3:c9:ff:b6:15:05:37:78:
         34:88:62:5b:b8:70:a7:d8:8e:46:50:f7:d2:f8:3a:50:83:e3:
         1e:5a:28:1c:31:62:4a:4f:32:41:4a:ed:89:27:6c:6b:1a:49:
         67:63:58:0d:77:43:3e:4e:cc:c1:b5:b1:d6:a8:7e:60:66:15:
         73:aa:1c:cc:c1:d6:88:01:aa:9f:8e:26:84:1a:2a:9a:e7:c6:
         ac:77:72:a3:35:81:bc:9a:96:a5:20:56:b8:3a:68:e5:80:dc:
         cd:23:6b:ea:f1:8d:a2:6c:63:6b:2a:39:be:c6:bd:d2:51:9b:
         58:96:42:53:6d:01:4c:92:6a:5b:95:5f:3f:82:77:47:92:4b:
         b8:ae:cf:e4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:23 2024 by rpki-client on console-fra.rpki-client.org