Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SUNHO/1UoAY-jmiE44_rlE2CJ-mvP7XuI.roa
File:                     1UoAY-jmiE44_rlE2CJ-mvP7XuI.roa (raw, json)
Hash identifier:          W9BllteorcT7otGhG2Gg+BX+UTB8C/0QEgQPyS9fino=
Subject key identifier:   D5:4A:00:63:E8:E6:88:4E:38:FE:B9:44:D8:22:7E:9A:F3:FB:5E:E2
Certificate issuer:       /CN=5E85681AB6CDB83036323458032D1205A5B1AA0C
Certificate serial:       0FD0
Authority key identifier: 5E:85:68:1A:B6:CD:B8:30:36:32:34:58:03:2D:12:05:A5:B1:AA:0C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/XoVoGrbNuDA2MjRYAy0SBaWxqgw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SUNHO/1UoAY-jmiE44_rlE2CJ-mvP7XuI.roa
Signing time:             Wed 29 Sep 2021 02:38:42 +0000
ROA not before:           Wed 29 Sep 2021 02:38:42 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     18419
IP address blocks:        103.130.92.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4048 (0xfd0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E85681AB6CDB83036323458032D1205A5B1AA0C
        Validity
            Not Before: Sep 29 02:38:42 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=D54A0063E8E6884E38FEB944D8227E9AF3FB5EE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a5:87:d6:15:be:c1:ec:99:29:7d:e7:33:31:
                    89:ab:a3:0c:41:dc:53:5c:4b:9c:f1:8c:5f:ea:c2:
                    0e:71:fa:db:49:10:05:97:7e:ca:3d:f6:65:b7:bb:
                    b0:51:72:5c:3c:22:a6:2c:ee:b1:cf:dc:33:a3:bb:
                    88:84:ae:b6:d9:c7:9c:9e:90:1a:4a:40:d6:61:3c:
                    16:52:95:64:41:23:65:af:a2:ac:ad:b7:c0:d9:20:
                    24:8f:35:64:24:60:48:5a:a9:ea:ea:e0:00:c2:0f:
                    4f:86:56:bb:a9:20:7e:19:73:e0:ef:ce:db:a8:db:
                    a7:b5:6a:6f:a4:04:e0:90:6f:65:cd:2f:9f:70:f8:
                    ac:ed:c4:45:76:72:30:ad:38:2d:2d:08:0d:d9:7a:
                    cd:10:ee:72:25:c1:ad:0d:15:38:4c:74:3c:f6:d1:
                    d8:58:aa:40:46:93:bb:86:13:76:f0:02:67:09:62:
                    db:9f:b4:68:de:ef:8c:b5:4b:b4:17:f9:2a:ea:8c:
                    51:55:83:42:0c:8f:5b:a6:50:a9:2e:1d:67:13:3b:
                    e8:b0:ea:ff:1c:5c:83:fc:cd:d3:22:89:8c:7c:c0:
                    00:75:a0:ea:ee:3b:85:5a:3e:24:73:6a:a8:5f:aa:
                    84:86:a2:2a:67:3e:64:7b:0e:12:77:8c:d5:7b:e3:
                    aa:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:4A:00:63:E8:E6:88:4E:38:FE:B9:44:D8:22:7E:9A:F3:FB:5E:E2
            X509v3 Authority Key Identifier:
                keyid:5E:85:68:1A:B6:CD:B8:30:36:32:34:58:03:2D:12:05:A5:B1:AA:0C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SUNHO/XoVoGrbNuDA2MjRYAy0SBaWxqgw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XoVoGrbNuDA2MjRYAy0SBaWxqgw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SUNHO/1UoAY-jmiE44_rlE2CJ-mvP7XuI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:de:5f:4b:67:56:d1:ee:14:e7:ba:db:41:c1:be:99:43:c0:
         c5:63:63:6b:fc:8e:4e:56:dc:4a:c9:bc:29:54:24:a5:00:93:
         c1:ae:35:60:c8:30:d9:48:b4:17:88:9a:80:c8:16:3e:9c:16:
         3e:3c:09:8c:95:33:77:e7:fd:cb:24:63:73:91:b9:d1:ef:c9:
         c1:1a:2b:c8:de:3d:48:f4:d4:3c:83:03:e8:bf:54:f9:43:bc:
         4a:c4:a2:cf:2f:a7:e9:82:65:c2:a6:60:c4:e7:15:ec:9f:93:
         c5:6e:4f:ab:60:97:be:5d:aa:c5:df:26:f0:3f:a9:8a:29:d0:
         1a:c9:9e:c2:52:f6:8c:0b:56:2a:20:22:e9:7a:5e:ae:92:87:
         b5:c1:16:ff:01:ee:b1:b8:d1:96:10:02:8a:f5:8b:1c:c1:bf:
         b5:e7:45:5c:a8:bb:f1:37:db:35:0e:55:ab:d9:a6:a4:0d:39:
         de:2a:85:90:52:b1:98:59:7b:99:cb:a9:15:7f:96:7d:df:2c:
         04:06:86:4a:b6:6b:fc:fa:9a:d6:8c:cb:41:f0:80:59:e6:96:
         5f:35:10:a1:cc:c7:41:3c:cf:28:41:a6:93:69:cb:cd:7a:1c:
         ce:51:7a:d0:b3:9f:65:f0:5a:c9:85:81:0a:89:8a:a2:f9:1c:
         cf:bc:4a:1e
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICD9AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUU4
NTY4MUFCNkNEQjgzMDM2MzIzNDU4MDMyRDEyMDVBNUIxQUEwQzAeFw0yMTA5Mjkw
MjM4NDJaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEQ1NEEwMDYzRThFNjg4
NEUzOEZFQjk0NEQ4MjI3RTlBRjNGQjVFRTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDJpYfWFb7B7JkpfeczMYmrowxB3FNcS5zxjF/qwg5x+ttJEAWX
fso99mW3u7BRclw8IqYs7rHP3DOju4iErrbZx5yekBpKQNZhPBZSlWRBI2Wvoqyt
t8DZICSPNWQkYEhaqerq4ADCD0+GVrupIH4Zc+Dvztuo26e1am+kBOCQb2XNL59w
+KztxEV2cjCtOC0tCA3Zes0Q7nIlwa0NFThMdDz20dhYqkBGk7uGE3bwAmcJYtuf
tGje74y1S7QX+SrqjFFVg0IMj1umUKkuHWcTO+iw6v8cXIP8zdMiiYx8wAB1oOru
O4VaPiRzaqhfqoSGoipnPmR7DhJ3jNV746rTAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQU1UoAY+jmiE44/rlE2CJ+mvP7XuIwHwYDVR0jBBgwFoAUXoVoGrbNuDA2MjRY
Ay0SBaWxqgwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU1VOSE8v
WG9Wb0dyYk51REEyTWpSWUF5MFNCYVd4cWd3LmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9Yb1ZvR3JiTnVEQTJNalJZQXkwU0JhV3hxZ3cuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TVU5ITy8xVW9BWS1qbWlFNDRfcmxFMkNK
LW12UDdYdUkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ4Jc
MA0GCSqGSIb3DQEBCwUAA4IBAQBG3l9LZ1bR7hTnuttBwb6ZQ8DFY2Nr/I5OVtxK
ybwpVCSlAJPBrjVgyDDZSLQXiJqAyBY+nBY+PAmMlTN35/3LJGNzkbnR78nBGivI
3j1I9NQ8gwPov1T5Q7xKxKLPL6fpgmXCpmDE5xXsn5PFbk+rYJe+XarF3ybwP6mK
KdAayZ7CUvaMC1YqICLpel6ukoe1wRb/Ae6xuNGWEAKK9Yscwb+150VcqLvxN9s1
DlWr2aakDTneKoWQUrGYWXuZy6kVf5Z93ywEBoZKtmv8+prWjMtB8IBZ5pZfNRCh
zMdBPM8oQaaTacvNehzOUXrQs59l8FrJhYEKiYqi+RzPvEoe
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:44 2024 by rpki-client on console-fra.rpki-client.org