Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/bxVDCtLywsPGgUCRrfVOj69hy0M.roa
File:                     bxVDCtLywsPGgUCRrfVOj69hy0M.roa (raw, json)
Hash identifier:          y6h5Yr7m6xZYHokEoBbghaOE1ZsIDcRK8VMLH9/7Svw=
Subject key identifier:   6F:15:43:0A:D2:F2:C2:C3:C6:81:40:91:AD:F5:4E:8F:AF:61:CB:43
Certificate issuer:       /CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
Certificate serial:       0C34
Authority key identifier: 00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/bxVDCtLywsPGgUCRrfVOj69hy0M.roa
Signing time:             Wed 20 Mar 2024 02:17:36 +0000
ROA not before:           Wed 20 Mar 2024 02:17:36 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     38047
IP address blocks:        103.133.155.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3124 (0xc34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
        Validity
            Not Before: Mar 20 02:17:36 2024 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=6F15430AD2F2C2C3C6814091ADF54E8FAF61CB43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c2:52:bf:bb:26:24:f6:e3:5d:60:21:f2:18:
                    22:95:2d:a2:e0:23:75:90:94:80:d6:8d:80:28:cf:
                    af:50:16:7a:42:9f:49:57:3d:61:00:6d:1d:a0:ef:
                    95:dd:85:4e:c0:5c:23:6b:5d:b4:ea:68:53:8f:dd:
                    a4:9f:d3:07:3c:5b:48:e3:0e:7c:ee:28:2d:d0:7d:
                    87:5d:dc:6d:74:1e:e0:ef:4d:8b:f1:6b:b5:bc:8a:
                    bd:1f:6a:f5:76:49:01:db:12:30:80:65:a4:60:35:
                    a1:28:d7:26:17:ef:0f:28:df:40:9b:3f:d1:69:95:
                    dd:5e:55:22:db:55:f0:cc:47:14:0b:6d:5b:37:ae:
                    b9:ae:65:4a:17:9d:98:23:25:90:56:50:93:3b:4e:
                    9b:8f:06:45:59:f7:ba:3d:75:af:5c:c5:26:19:f5:
                    83:47:24:7b:73:b1:ad:c5:e2:9d:c6:67:8f:5e:96:
                    e4:8f:f5:04:05:20:d9:09:c4:7d:f7:d0:83:34:92:
                    6e:26:5c:d1:c1:5c:3d:2a:9a:19:7c:aa:b0:fb:b8:
                    1f:e9:29:93:5b:d4:31:df:47:61:c0:2a:43:90:bd:
                    5b:c8:76:07:21:cd:18:f9:9e:01:b9:44:85:7d:97:
                    06:6e:c2:1f:4a:be:e4:f8:ea:b5:4f:45:de:80:2a:
                    8b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:15:43:0A:D2:F2:C2:C3:C6:81:40:91:AD:F5:4E:8F:AF:61:CB:43
            X509v3 Authority Key Identifier:
                keyid:00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/bxVDCtLywsPGgUCRrfVOj69hy0M.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.133.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:ab:66:a1:77:db:99:36:76:42:36:d3:0a:0c:76:5e:6c:8d:
         f2:e9:71:53:20:f0:62:fb:b7:c7:0f:cf:7b:48:cf:68:33:9b:
         56:d8:9a:a2:f2:fe:f0:30:fa:be:04:8c:96:92:4b:b6:88:d2:
         b4:1e:42:74:27:bc:80:7c:f1:f2:8d:c4:08:5d:2a:89:06:80:
         cb:42:4b:ea:90:45:e1:4e:41:5f:d4:ae:35:f6:68:40:6f:cf:
         00:fb:48:b3:ed:2e:7c:4d:3f:e1:8e:1e:dc:8e:da:c1:10:eb:
         6a:86:3b:0a:09:74:81:be:69:28:f0:cf:f6:2d:d4:da:2d:de:
         cf:e8:bf:1d:69:f1:72:e0:d4:d4:da:e3:b5:c9:1b:83:2c:b0:
         db:f9:a4:10:cc:d8:69:8b:cb:43:b6:fc:a1:57:7e:38:a3:b3:
         22:46:1d:7b:0d:79:e4:b4:32:63:26:c7:87:b7:ee:d7:73:c1:
         33:d3:85:96:b3:95:4e:5e:9c:aa:da:66:e0:62:6a:b9:f5:bc:
         09:41:42:7e:de:17:30:0f:e2:56:f7:a8:69:ad:49:a2:2c:82:
         79:5e:9a:13:ab:14:e1:4e:16:a4:de:5d:92:60:bd:84:54:82:
         d8:0c:46:bc:89:ce:65:b1:aa:f6:57:c5:03:9c:42:be:56:9c:
         43:75:9a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:23 2024 by rpki-client on console-fra.rpki-client.org