Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SMTRTCH/z6Uc3_HFG68oAXsCHq-f8Lks0WI.roa
File:                     z6Uc3_HFG68oAXsCHq-f8Lks0WI.roa (raw, json)
Hash identifier:          q4V0oMpO/yBAQGUFUQzoK6e2dToxdrBV9P6NvQWOhrM=
Subject key identifier:   CF:A5:1C:DF:F1:C5:1B:AF:28:01:7B:02:1E:AF:9F:F0:B9:2C:D1:62
Certificate issuer:       /CN=45F30B4C5ECE6E12E6D90889D7940D8E1871072B
Certificate serial:       EF
Authority key identifier: 45:F3:0B:4C:5E:CE:6E:12:E6:D9:08:89:D7:94:0D:8E:18:71:07:2B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/RfMLTF7ObhLm2QiJ15QNjhhxBys.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SMTRTCH/z6Uc3_HFG68oAXsCHq-f8Lks0WI.roa
Signing time:             Thu 26 Oct 2023 15:29:45 +0000
ROA not before:           Thu 26 Oct 2023 15:29:45 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     9678
IP address blocks:        103.37.5.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 239 (0xef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45F30B4C5ECE6E12E6D90889D7940D8E1871072B
        Validity
            Not Before: Oct 26 15:29:45 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=CFA51CDFF1C51BAF28017B021EAF9FF0B92CD162
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:93:4e:7e:2e:a6:0c:31:33:bf:6f:2d:92:14:
                    cb:0b:51:f2:48:f7:2e:e5:a8:e7:bd:47:b1:e6:8a:
                    ee:99:66:58:71:30:82:b3:66:aa:e1:6d:53:58:1c:
                    f7:a8:a1:74:0b:cc:5e:d0:74:17:fe:97:e6:db:ad:
                    cc:ce:0a:58:39:17:11:f1:d5:0e:39:a4:1e:0c:6a:
                    d6:80:cd:52:6d:92:c2:4a:81:9a:c8:79:ef:a5:d2:
                    91:68:64:5f:7c:41:e6:eb:5e:8a:ee:34:4e:6e:c9:
                    1f:4c:36:84:d5:f0:d2:40:05:71:d4:07:3d:87:a5:
                    30:d7:82:8e:b5:6c:32:6e:8b:bc:b3:18:41:db:4f:
                    f9:9b:cf:35:ef:57:47:c2:92:22:f5:fe:0d:2f:69:
                    0c:c5:17:ac:cc:e7:40:17:75:b6:5f:de:83:6f:09:
                    4c:6d:f3:f6:c4:08:8f:7e:3c:50:21:b9:87:47:1b:
                    60:78:71:37:3f:ec:81:6d:99:1c:70:e5:fc:7e:63:
                    49:1d:d9:3d:b3:53:89:c0:64:0f:e2:85:b5:fb:35:
                    bc:2f:d1:a4:b9:6b:59:8a:06:21:9e:61:ac:cc:46:
                    36:c2:b4:b6:d1:51:cc:80:c5:24:4f:a2:d2:a2:17:
                    73:f0:ef:7e:7d:a2:60:ba:89:f0:90:18:3d:8c:f1:
                    36:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:A5:1C:DF:F1:C5:1B:AF:28:01:7B:02:1E:AF:9F:F0:B9:2C:D1:62
            X509v3 Authority Key Identifier:
                keyid:45:F3:0B:4C:5E:CE:6E:12:E6:D9:08:89:D7:94:0D:8E:18:71:07:2B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SMTRTCH/RfMLTF7ObhLm2QiJ15QNjhhxBys.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RfMLTF7ObhLm2QiJ15QNjhhxBys.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SMTRTCH/z6Uc3_HFG68oAXsCHq-f8Lks0WI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.37.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:ec:7f:91:64:d8:82:a0:d3:ed:e0:0c:59:b5:6f:0b:a1:a6:
         a7:d8:0d:27:75:f0:c3:29:c5:89:8a:2c:77:1d:18:3a:e8:56:
         5e:e2:cb:92:5c:d5:30:10:2e:2d:59:4f:a1:69:08:5d:09:73:
         5d:ad:b3:e3:b0:22:c9:e4:c7:d2:7e:9a:bc:af:ae:ea:9a:8d:
         7b:c5:3f:de:43:31:0d:c2:be:c2:c2:73:b5:b0:e8:4c:e8:33:
         88:ae:59:4a:8b:5d:89:96:30:25:41:24:4f:dc:99:84:bd:ba:
         a0:9a:29:8f:7d:af:95:f1:b4:58:63:9b:90:f1:3d:ce:8e:10:
         99:04:fe:06:ac:70:72:50:41:f1:85:8b:52:ff:4a:17:61:ed:
         e6:85:d2:1e:ab:bb:23:9a:3b:02:b8:1b:9c:f7:ab:0a:9a:3b:
         74:26:1e:ea:0c:ec:c3:4e:1b:d9:b2:41:35:4a:75:49:a0:66:
         86:37:9b:ab:35:38:89:43:70:eb:d2:d5:67:3f:12:39:3d:7d:
         f1:0a:ba:3b:35:4b:83:c9:74:65:5f:d4:a2:c8:a0:89:c2:2a:
         01:1a:72:ff:e1:d7:a3:15:cc:cd:93:ff:bf:be:d6:40:28:11:
         1a:33:63:6c:55:52:c2:22:ee:56:98:97:31:1f:b3:26:b9:d5:
         0e:53:d8:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:16 2024 by rpki-client on console-ams.rpki-client.org