Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHINENET/15ikr4dDCk61O7TGXa4MmrVxsjw.roa
File:                     15ikr4dDCk61O7TGXa4MmrVxsjw.roa (raw, json)
Hash identifier:          hT/wQjPfykSeHfDuvlsYbENUayHmLJC26TtqkSA6/mo=
Subject key identifier:   D7:98:A4:AF:87:43:0A:4E:B5:3B:B4:C6:5D:AE:0C:9A:B5:71:B2:3C
Certificate issuer:       /CN=45542320685E62421C114DBA65B8F5705A774845
Certificate serial:       BC
Authority key identifier: 45:54:23:20:68:5E:62:42:1C:11:4D:BA:65:B8:F5:70:5A:77:48:45
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/RVQjIGheYkIcEU26Zbj1cFp3SEU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINENET/15ikr4dDCk61O7TGXa4MmrVxsjw.roa
Signing time:             Wed 06 Mar 2024 12:20:44 +0000
ROA not before:           Wed 06 Mar 2024 12:20:44 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     150770
IP address blocks:        103.197.158.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 188 (0xbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45542320685E62421C114DBA65B8F5705A774845
        Validity
            Not Before: Mar  6 12:20:44 2024 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=D798A4AF87430A4EB53BB4C65DAE0C9AB571B23C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:11:7e:3c:eb:24:22:a4:eb:27:35:42:cb:62:
                    20:58:0d:57:ee:93:27:1e:33:a8:05:30:b7:12:8a:
                    ef:ab:c5:9a:de:8b:1e:6d:58:65:44:87:77:de:48:
                    c4:6b:66:71:6b:e3:16:3a:17:5f:0c:6f:3f:df:83:
                    62:a4:e4:64:4f:77:eb:ab:db:56:63:d0:f2:2a:58:
                    1a:10:6a:93:75:63:88:65:8d:91:c9:5a:31:30:ea:
                    a1:1f:59:ee:54:54:3e:2c:c3:63:45:75:5c:48:f7:
                    7b:4a:d7:fe:df:20:7e:ad:60:c5:44:d6:14:0b:b5:
                    85:94:16:cc:63:70:17:3a:14:4a:b9:a8:64:18:47:
                    20:61:7f:fe:b2:ec:54:1b:40:c1:e3:23:af:74:87:
                    aa:fc:30:64:76:bb:a0:6d:70:3e:e5:33:f6:7c:cf:
                    a5:4b:78:60:db:bc:50:ac:8d:99:0f:0c:73:50:b9:
                    9f:22:9d:8c:82:37:87:d1:c4:9c:03:ae:53:24:39:
                    60:56:26:71:a9:7a:03:5e:e7:14:bb:b7:be:e9:bd:
                    58:6d:73:36:b8:8e:d4:18:09:44:58:45:7a:c0:bc:
                    8a:0d:5e:a0:39:fd:4a:29:be:30:73:d4:28:9f:b6:
                    cb:b0:6d:20:ff:30:c5:53:7d:a7:63:60:2d:f9:39:
                    85:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:98:A4:AF:87:43:0A:4E:B5:3B:B4:C6:5D:AE:0C:9A:B5:71:B2:3C
            X509v3 Authority Key Identifier:
                keyid:45:54:23:20:68:5E:62:42:1C:11:4D:BA:65:B8:F5:70:5A:77:48:45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINENET/RVQjIGheYkIcEU26Zbj1cFp3SEU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RVQjIGheYkIcEU26Zbj1cFp3SEU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINENET/15ikr4dDCk61O7TGXa4MmrVxsjw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.197.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6d:4d:4e:7f:8b:77:d4:4e:be:fe:fa:bf:37:a9:f2:92:c1:05:
         5f:9d:09:a3:5e:36:d9:33:87:92:4c:35:5e:e7:19:24:25:d5:
         db:58:79:d9:27:d0:64:fd:f4:1c:44:90:99:d8:55:bc:3a:ee:
         5b:47:01:66:7c:eb:fe:3b:2f:d3:9f:39:21:2c:3d:df:03:cb:
         d7:12:bf:13:82:2b:a9:47:35:7f:4a:66:b7:75:38:37:a2:d3:
         85:73:49:75:67:9d:95:ec:2d:e4:dc:a7:51:44:aa:c2:6f:0c:
         7f:e2:c5:15:43:3f:5e:f9:ef:a3:cb:3b:b5:67:25:c6:d1:77:
         63:b8:c2:3d:2f:5e:90:f5:98:a5:20:50:cc:2c:8c:f7:f9:0b:
         d1:65:18:dc:ca:d5:e1:01:c9:4a:f0:d3:46:89:bf:bd:70:f8:
         3b:23:d1:87:e9:cf:16:11:7a:14:3e:0d:42:df:38:ac:79:9e:
         6b:ba:65:7b:cc:d5:79:54:5d:a3:d7:d8:f8:6b:2d:c5:b1:35:
         04:ef:1f:70:9c:b2:e1:c9:9d:1e:dd:b2:00:90:64:85:f4:99:
         1f:ec:41:5e:64:cf:b0:63:cb:3d:f1:8a:fe:14:d6:d6:31:71:
         64:73:90:1c:e1:70:8c:de:65:57:f3:82:5a:8a:7b:01:1b:4f:
         27:bd:92:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:23 2024 by rpki-client on console-fra.rpki-client.org