Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/6Kdoy1c483byH43-7bAHTS2M8LM.roa
File:                     6Kdoy1c483byH43-7bAHTS2M8LM.roa (raw, json)
Hash identifier:          f+jwvwBWnP4VZ7PUqFBAUD7nAQQ7HMk2OVFp7Wlqtbc=
Subject key identifier:   E8:A7:68:CB:57:38:F3:76:F2:1F:8D:FE:ED:B0:07:4D:2D:8C:F0:B3
Certificate issuer:       /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
Certificate serial:       0BA5
Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/6Kdoy1c483byH43-7bAHTS2M8LM.roa
Signing time:             Fri 01 Sep 2023 09:59:01 +0000
ROA not before:           Fri 01 Sep 2023 09:59:01 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     24158
IP address blocks:        180.204.0.0/14 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2981 (0xba5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
        Validity
            Not Before: Sep  1 09:59:01 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=E8A768CB5738F376F21F8DFEEDB0074D2D8CF0B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d2:82:79:65:eb:20:12:ce:f4:ac:35:54:a4:
                    e7:b4:26:3d:be:01:cb:1c:72:99:cf:69:30:0d:cb:
                    7b:4c:9c:fb:86:6b:d1:6d:f5:08:4d:0f:46:54:0b:
                    b1:2a:35:96:5d:cc:f9:e8:98:ad:db:ea:c8:60:23:
                    12:10:f6:cc:b9:e4:8a:53:17:b9:37:16:5d:5c:f0:
                    63:dc:6e:aa:01:c5:5e:88:f1:93:47:ed:0b:81:bf:
                    28:8b:8e:c2:92:6b:03:d8:7b:6c:20:dc:07:a0:dd:
                    0a:ce:fc:5b:74:be:17:18:35:5f:46:59:4e:87:c6:
                    b8:54:d6:87:5a:3a:07:10:c6:2e:5f:b3:11:88:6d:
                    9f:89:d0:d7:70:f3:c4:37:14:5a:a0:d7:ad:b5:93:
                    0c:f7:06:61:60:6c:40:2e:6c:ad:79:d8:47:cf:c7:
                    46:67:15:1c:9e:70:20:d8:04:f8:a4:14:ee:c2:e7:
                    42:35:55:be:b2:75:90:37:85:43:dc:1a:e3:59:93:
                    f8:b0:37:bf:e0:1f:c2:3f:d8:09:bd:33:a1:cd:70:
                    a4:b2:78:be:9d:c2:d2:ba:a4:e6:e3:dd:17:93:8e:
                    57:66:3c:3f:b3:74:21:94:65:87:87:d9:49:0b:6e:
                    12:ab:a1:6e:84:60:66:67:d2:70:7f:c0:23:f7:05:
                    3a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:A7:68:CB:57:38:F3:76:F2:1F:8D:FE:ED:B0:07:4D:2D:8C:F0:B3
            X509v3 Authority Key Identifier:
                keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/6Kdoy1c483byH43-7bAHTS2M8LM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.204.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         53:08:59:b3:47:3a:f2:75:a3:db:23:15:31:60:f4:48:30:f3:
         e9:18:7e:f5:be:23:ec:15:83:6e:2c:8c:95:86:7f:e3:c8:50:
         98:f7:8d:e2:60:ad:a4:13:ed:8e:31:60:3c:bf:14:65:bc:91:
         43:3a:f8:b1:d6:4a:5e:6b:dc:26:5e:c7:1c:70:eb:14:6b:97:
         f0:fc:ad:72:cf:0a:a2:f1:d9:91:d0:98:4d:2b:61:04:ab:82:
         22:a7:25:51:a2:de:2c:0a:a4:70:be:13:5c:80:fc:6e:14:30:
         10:cf:7f:b6:02:d7:6c:de:64:eb:d2:14:29:ec:00:2c:8a:91:
         1a:a8:59:b5:02:70:b7:77:67:5f:cf:c6:e7:84:2e:1b:ca:c4:
         ad:8c:67:c1:1a:e3:13:00:5e:dc:a7:ce:a0:72:a8:6b:99:1c:
         3e:46:81:74:b7:fd:0f:ca:fc:07:64:c1:1f:9f:70:ae:35:82:
         f9:37:fa:86:c5:47:71:18:5f:40:76:fd:ba:d3:c9:af:2c:3a:
         61:dd:50:cc:f8:0f:e3:57:e3:93:c8:ba:93:2e:a4:b6:d3:43:
         e4:01:8f:58:b5:32:ea:01:c9:93:9a:40:e1:d5:ba:e7:34:23:
         e8:e3:4b:70:c7:60:cc:32:8f:1f:78:f4:73:9b:04:74:2b:35:
         26:13:21:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:16 2024 by rpki-client on console-ams.rpki-client.org