Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/WciDnJRTNIl-BeB1X95E2VwAKTw.roa
File:                     WciDnJRTNIl-BeB1X95E2VwAKTw.roa (raw, json)
Hash identifier:          MJJNfTQNibkqk8JxvMLAmGBXXQEm1r8FW3oiWutHqRk=
Subject key identifier:   59:C8:83:9C:94:53:34:89:7E:05:E0:75:5F:DE:44:D9:5C:00:29:3C
Certificate issuer:       /CN=8C183D7CBA6B9A9CAFE6F50BFB038D645D26DC7F
Certificate serial:       0BA1
Authority key identifier: 8C:18:3D:7C:BA:6B:9A:9C:AF:E6:F5:0B:FB:03:8D:64:5D:26:DC:7F
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/jBg9fLprmpyv5vUL-wONZF0m3H8.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/WciDnJRTNIl-BeB1X95E2VwAKTw.roa
Signing time:             Sat 11 May 2024 04:53:43 +0000
ROA not before:           Sat 11 May 2024 04:53:43 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     40065
IP address blocks:        103.229.50.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2977 (0xba1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C183D7CBA6B9A9CAFE6F50BFB038D645D26DC7F
        Validity
            Not Before: May 11 04:53:43 2024 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=59C8839C945334897E05E0755FDE44D95C00293C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:23:16:14:8b:f7:6c:e9:3d:f3:d8:ef:b3:ab:
                    d3:77:cc:24:f1:01:b3:09:97:28:3a:5f:4d:f2:d3:
                    a0:76:e0:fe:64:4e:cd:99:c2:4b:8a:73:0b:34:72:
                    db:22:a0:4b:1c:3f:cf:be:f8:3c:a3:0b:56:41:32:
                    c4:41:cb:ba:81:7a:45:09:b3:a1:05:5c:2e:bf:69:
                    30:4e:ef:69:b7:08:9c:22:58:07:ba:76:61:8c:99:
                    9c:e7:91:7c:c7:38:ac:73:30:11:6c:d7:fa:6a:6c:
                    b7:d2:f9:ee:22:05:19:da:9b:bd:83:3a:26:b2:db:
                    97:fc:b5:af:97:fc:c2:6d:4e:17:c9:45:7e:39:08:
                    bb:82:21:0f:92:9d:58:63:52:81:91:2a:f7:d4:e7:
                    12:20:60:ee:32:b9:e2:50:25:8f:9e:bf:59:04:89:
                    68:ce:81:26:68:2b:c8:66:2a:d6:b7:d1:21:3f:bb:
                    8b:66:7b:a7:d8:e7:32:3b:ae:df:ed:b6:83:3a:78:
                    7f:24:91:b0:f0:86:81:03:44:63:ac:b4:a5:40:7c:
                    76:8c:d9:9c:0c:19:b9:df:a6:7a:2c:72:43:bf:4f:
                    56:58:c6:3a:a7:e8:db:6b:1a:a7:8a:30:c8:64:6d:
                    be:be:42:bb:8f:51:7b:2d:15:21:65:0e:90:03:a1:
                    25:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:C8:83:9C:94:53:34:89:7E:05:E0:75:5F:DE:44:D9:5C:00:29:3C
            X509v3 Authority Key Identifier:
                keyid:8C:18:3D:7C:BA:6B:9A:9C:AF:E6:F5:0B:FB:03:8D:64:5D:26:DC:7F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/jBg9fLprmpyv5vUL-wONZF0m3H8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/jBg9fLprmpyv5vUL-wONZF0m3H8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/WciDnJRTNIl-BeB1X95E2VwAKTw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.229.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:5f:e6:90:b4:39:72:5d:b7:92:3e:7d:60:ac:7d:a5:46:1f:
         df:7b:60:7c:e6:f4:d8:30:27:21:07:ef:82:10:77:61:3b:3a:
         18:ae:d6:51:39:9a:92:dc:c3:aa:fa:d4:11:a2:bb:c1:35:2d:
         54:7e:77:68:3d:05:36:3a:a6:6b:f5:2d:fc:1c:a0:b7:e2:95:
         d3:f8:3f:8a:70:e8:c1:c7:81:06:2c:83:b8:9b:20:f7:9b:98:
         45:5e:94:43:c3:1b:3d:26:8f:84:64:42:aa:c1:88:aa:e9:cf:
         8d:37:b3:2b:52:51:b2:23:11:a7:0d:18:a6:f2:61:3b:0f:c3:
         65:fc:14:89:cf:20:94:bd:2d:d4:66:3d:88:a2:80:4f:40:61:
         4f:e3:a5:d7:d0:cf:82:f7:7b:7a:a8:8b:85:37:5a:5a:5c:2a:
         88:1a:60:34:62:28:46:9d:2a:60:47:d3:03:aa:35:5b:10:f5:
         db:1d:ca:97:fc:0c:63:72:cd:8a:5c:65:3b:49:6d:a9:35:ed:
         53:e0:33:16:30:c8:30:80:96:df:c1:a6:84:f0:e2:8b:d4:50:
         38:3d:36:ea:30:27:8e:cd:c6:70:db:97:9c:2e:38:ea:04:df:
         2b:4e:68:53:39:c4:3c:db:81:c8:55:58:46:01:48:2f:3b:47:
         94:f8:9b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:23 2024 by rpki-client on console-fra.rpki-client.org