Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/aJh2vWxOuViDmAytwFawGwvZta4.roa
File:                     aJh2vWxOuViDmAytwFawGwvZta4.roa (raw, json)
Hash identifier:          GAviczI61m3k/K7gdsF8C/cDF2Z7Bgj04hTbBn2zxMI=
Subject key identifier:   68:98:76:BD:6C:4E:B9:58:83:98:0C:AD:C0:56:B0:1B:0B:D9:B5:AE
Certificate issuer:       /CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
Certificate serial:       0BA7
Authority key identifier: 00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/aJh2vWxOuViDmAytwFawGwvZta4.roa
Signing time:             Fri 01 Sep 2023 09:44:05 +0000
ROA not before:           Fri 01 Sep 2023 09:44:05 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     38047
IP address blocks:        103.106.52.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2983 (0xba7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
        Validity
            Not Before: Sep  1 09:44:05 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=689876BD6C4EB95883980CADC056B01B0BD9B5AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:57:13:7f:ca:ac:9f:9f:8f:d6:85:79:2a:33:
                    1a:ec:76:1a:76:95:45:61:c3:37:c3:46:e7:00:82:
                    41:b5:62:8a:86:0f:c8:af:46:13:1a:1a:bb:d0:56:
                    24:ff:7e:2d:13:b2:cb:90:e3:73:d9:84:20:9c:a3:
                    8d:fa:33:3e:1e:ae:68:03:d0:16:b3:4a:cf:f5:94:
                    b3:81:fa:39:c6:81:ab:00:25:c8:94:1e:55:2b:14:
                    69:64:fc:83:8e:2c:90:87:32:43:2d:de:16:d4:a4:
                    ea:be:48:eb:7e:02:63:c7:6b:13:34:57:0d:d1:dd:
                    11:86:17:07:bc:41:08:3a:45:99:49:1f:8c:db:35:
                    85:65:ff:c1:b5:a2:24:a4:b7:98:12:53:af:9b:51:
                    cf:35:5e:99:70:21:38:7d:9d:d8:8e:c8:53:2a:0f:
                    17:1d:dc:0e:c2:d1:4d:57:cc:87:67:f8:57:6f:fa:
                    e1:c2:3b:8b:e6:94:36:43:b3:60:67:53:1a:e4:bb:
                    d1:2c:c5:57:6f:fd:1c:b6:f8:2e:e3:38:40:38:ba:
                    ed:97:5f:1f:3d:80:5e:6b:99:0e:9f:bc:50:28:cf:
                    6a:bc:b8:5f:47:75:10:d0:6b:44:6c:b3:db:26:fe:
                    60:88:6a:4a:5f:35:de:1f:27:9e:a4:4a:c4:69:3d:
                    f2:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:98:76:BD:6C:4E:B9:58:83:98:0C:AD:C0:56:B0:1B:0B:D9:B5:AE
            X509v3 Authority Key Identifier:
                keyid:00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/aJh2vWxOuViDmAytwFawGwvZta4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.106.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:6b:8e:2b:a9:7a:bc:c7:99:7f:0b:fd:3b:39:37:c6:9f:bb:
         8b:45:7c:f0:65:47:98:76:a1:7c:53:f1:5b:95:1f:79:73:1d:
         e0:1f:42:e4:24:11:45:c8:bb:2e:a1:62:fa:bd:78:e8:74:49:
         f2:43:28:49:70:f9:f4:b0:2e:ba:71:62:7e:9c:7a:82:c2:2f:
         e0:82:d9:36:c4:96:89:12:55:3f:48:fb:cf:03:5e:3e:35:11:
         80:d3:a8:89:fb:89:cf:a6:a1:7c:63:68:f4:2b:a5:4d:d0:78:
         ed:e4:9b:71:47:73:66:a6:c2:05:66:03:b5:b6:31:79:8d:58:
         cc:fc:5b:c7:b0:08:92:a5:32:12:75:b6:5a:f4:32:56:0f:8e:
         2b:22:b5:40:df:83:1b:fe:46:41:80:f4:4b:d1:dd:7e:fd:06:
         91:1e:9b:8a:51:15:6d:1e:94:bf:c3:80:f6:c5:39:03:a7:ca:
         ec:84:b0:cd:cf:a1:2a:e6:a3:b2:e5:b9:8f:32:95:27:71:f5:
         11:d0:04:2d:7d:90:17:5b:86:f3:dd:70:9a:8b:df:d8:53:ac:
         9d:a3:ed:58:12:c3:36:62:d1:00:28:ea:2b:4f:e8:aa:70:2c:
         7c:fc:46:4f:9a:f0:23:67:49:07:a4:f6:b9:94:fe:fe:ec:d6:
         9a:58:51:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:23 2024 by rpki-client on console-fra.rpki-client.org