Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/ojYZj997CNQAFhp8iq51PrMSntk.roa
File:                     ojYZj997CNQAFhp8iq51PrMSntk.roa (raw, json)
Hash identifier:          qB1LdN99FgVo3hK51/IZx+l5MpiEqMvWIEorQRFKDIM=
Subject key identifier:   A2:36:19:8F:DF:7B:08:D4:00:16:1A:7C:8A:AE:75:3E:B3:12:9E:D9
Certificate issuer:       /CN=ED186F6314D7B5713EFFECFB93EBC3E82197E2EF
Certificate serial:       10B2
Authority key identifier: ED:18:6F:63:14:D7:B5:71:3E:FF:EC:FB:93:EB:C3:E8:21:97:E2:EF
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/7RhvYxTXtXE-_-z7k-vD6CGX4u8.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/ojYZj997CNQAFhp8iq51PrMSntk.roa
Signing time:             Mon 19 Feb 2024 12:51:58 +0000
ROA not before:           Mon 19 Feb 2024 12:51:58 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     131633
IP address blocks:        103.127.238.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4274 (0x10b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED186F6314D7B5713EFFECFB93EBC3E82197E2EF
        Validity
            Not Before: Feb 19 12:51:58 2024 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=A236198FDF7B08D400161A7C8AAE753EB3129ED9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3a:a9:d5:d6:19:77:4a:b6:e4:6f:79:7d:a1:
                    5b:82:5f:9d:ba:72:4f:43:39:77:57:ca:13:4b:96:
                    a3:15:9b:e3:c2:64:9e:28:35:89:42:04:b3:9f:0d:
                    d9:a4:de:be:b0:2c:76:3c:65:a0:b6:76:59:40:e6:
                    3f:93:7a:61:bc:9b:a3:d9:23:f1:ee:7b:ef:ca:fb:
                    93:34:95:13:92:07:b2:7a:1a:d3:29:f4:dd:13:3a:
                    a5:d7:c2:2b:39:ec:03:d5:2f:b6:75:bc:88:83:28:
                    24:03:0f:73:dc:67:90:3d:a3:64:1e:48:a3:8f:f0:
                    21:ab:cd:18:bb:81:e8:56:2f:5d:5c:0a:17:cd:a0:
                    06:76:82:4c:21:6b:1d:7a:be:49:80:c5:1d:41:3a:
                    f7:73:5c:4b:b8:8d:af:d6:08:95:66:3d:a9:5a:b3:
                    48:bf:90:eb:15:77:3b:fe:e1:29:07:30:30:46:94:
                    59:bf:39:ec:e5:0c:b6:e3:21:15:46:62:5b:d0:04:
                    74:8c:69:6a:11:44:8a:7d:f9:1a:bf:98:a5:20:3e:
                    4c:2f:eb:e1:ae:b5:61:37:6a:7a:58:e6:fb:b1:56:
                    38:24:0e:63:69:8b:42:50:98:25:88:1c:43:bd:9b:
                    fd:3a:58:09:b7:00:36:d5:b6:2a:26:43:f8:ae:03:
                    11:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:36:19:8F:DF:7B:08:D4:00:16:1A:7C:8A:AE:75:3E:B3:12:9E:D9
            X509v3 Authority Key Identifier:
                keyid:ED:18:6F:63:14:D7:B5:71:3E:FF:EC:FB:93:EB:C3:E8:21:97:E2:EF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/7RhvYxTXtXE-_-z7k-vD6CGX4u8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/7RhvYxTXtXE-_-z7k-vD6CGX4u8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/ojYZj997CNQAFhp8iq51PrMSntk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.127.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         75:a4:a8:5e:6b:f1:3e:c6:61:1e:4e:8e:3e:73:f4:dd:dc:8e:
         fd:e5:86:0a:0d:5e:30:2b:4a:92:0d:ea:bf:17:18:03:e2:aa:
         98:de:cd:e6:40:d7:93:57:2c:e7:04:1f:15:63:32:1b:4b:ea:
         ba:40:fd:71:a8:f5:63:57:88:47:73:8b:30:1c:fe:b1:51:57:
         dd:a8:67:d4:bb:65:af:db:91:4a:06:9e:b1:86:5a:f8:58:e7:
         6b:26:91:b1:6e:28:c1:0a:cf:46:37:20:80:e5:53:2d:eb:1d:
         2b:73:f3:85:da:f9:e4:3b:c6:66:9e:6c:5d:67:d9:23:92:64:
         ce:ff:f8:d7:64:8b:9e:8f:ec:47:4a:7b:a6:b0:5f:e8:43:db:
         80:19:95:62:70:1e:6a:19:03:f1:0d:fb:13:9d:10:11:e7:f3:
         f2:a9:ca:a9:c9:2a:ff:fa:34:94:7a:17:f5:d1:c5:66:4a:06:
         5c:73:5c:44:33:a2:20:1b:28:88:c4:6c:d9:bf:e3:e9:e4:98:
         13:ed:e2:ae:e5:5d:2c:45:bd:b0:b5:c9:93:4b:da:ae:05:b3:
         46:b1:81:1d:26:c6:8b:58:62:f4:d9:db:82:65:d0:3f:b7:0b:
         0c:c6:45:6b:1c:d7:99:9c:17:97:90:0a:f2:71:6e:40:3b:3c:
         35:21:27:c3
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICELIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUQx
ODZGNjMxNEQ3QjU3MTNFRkZFQ0ZCOTNFQkMzRTgyMTk3RTJFRjAeFw0yNDAyMTkx
MjUxNThaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEEyMzYxOThGREY3QjA4
RDQwMDE2MUE3QzhBQUU3NTNFQjMxMjlFRDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDGOqnV1hl3Srbkb3l9oVuCX526ck9DOXdXyhNLlqMVm+PCZJ4o
NYlCBLOfDdmk3r6wLHY8ZaC2dllA5j+TemG8m6PZI/Hue+/K+5M0lROSB7J6GtMp
9N0TOqXXwis57APVL7Z1vIiDKCQDD3PcZ5A9o2QeSKOP8CGrzRi7gehWL11cChfN
oAZ2gkwhax16vkmAxR1BOvdzXEu4ja/WCJVmPalas0i/kOsVdzv+4SkHMDBGlFm/
OezlDLbjIRVGYlvQBHSMaWoRRIp9+Rq/mKUgPkwv6+GutWE3anpY5vuxVjgkDmNp
i0JQmCWIHEO9m/06WAm3ADbVtiomQ/iuAxEDAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUojYZj997CNQAFhp8iq51PrMSntkwHwYDVR0jBBgwFoAU7RhvYxTXtXE+/+z7
k+vD6CGX4u8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0hVTllJ
TkcvN1Jodll4VFh0WEUtXy16N2stdkQ2Q0dYNHU4LmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS83Umh2WXhUWHRYRS1fLXo3ay12RDZDR1g0dTguY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TSFVOWUlORy9vallaajk5N0NOUUFG
aHA4aXE1MVByTVNudGsucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQBZ3/uMA0GCSqGSIb3DQEBCwUAA4IBAQB1pKhea/E+xmEeTo4+c/Td3I795YYK
DV4wK0qSDeq/FxgD4qqY3s3mQNeTVyznBB8VYzIbS+q6QP1xqPVjV4hHc4swHP6x
UVfdqGfUu2Wv25FKBp6xhlr4WOdrJpGxbijBCs9GNyCA5VMt6x0rc/OF2vnkO8Zm
nmxdZ9kjkmTO//jXZIuej+xHSnumsF/oQ9uAGZVicB5qGQPxDfsTnRAR5/Pyqcqp
ySr/+jSUehf10cVmSgZcc1xEM6IgGyiIxGzZv+Pp5JgT7eKu5V0sRb2wtcmTS9qu
BbNGsYEdJsaLWGL02duCZdA/twsMxkVrHNeZnBeXkArycW5AOzw1ISfD
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:23 2024 by rpki-client on console-fra.rpki-client.org