Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/9pf2bdgFgwGGRx8daoWrSbp5cVw.roa
File:                     9pf2bdgFgwGGRx8daoWrSbp5cVw.roa (raw, json)
Hash identifier:          3F+63DRe+3zS/OJrRY6Es1q4GR9Y49gXQjBcwcfpcHg=
Subject key identifier:   F6:97:F6:6D:D8:05:83:01:86:47:1F:1D:6A:85:AB:49:BA:79:71:5C
Certificate issuer:       /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
Certificate serial:       0C00
Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/9pf2bdgFgwGGRx8daoWrSbp5cVw.roa
Signing time:             Fri 22 Dec 2023 07:55:32 +0000
ROA not before:           Fri 22 Dec 2023 07:55:32 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     24157
IP address blocks:        116.89.128.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3072 (0xc00)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
        Validity
            Not Before: Dec 22 07:55:32 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=F697F66DD805830186471F1D6A85AB49BA79715C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:c7:75:c3:21:93:b3:2a:82:85:f5:e2:fc:3c:
                    dd:de:63:a5:1a:39:02:81:89:db:1e:66:da:e2:96:
                    aa:c5:4d:7a:d4:24:12:aa:da:3b:69:90:53:cc:6b:
                    8b:6d:eb:5b:3c:5a:58:c5:69:9a:29:0f:4c:ed:9d:
                    a9:b9:d6:13:f4:f2:ce:94:9d:86:d5:1a:27:57:d6:
                    30:b2:94:23:40:89:3e:21:67:a5:44:51:e7:81:19:
                    d1:01:d7:58:87:1d:fd:19:d7:36:ab:3e:62:0e:85:
                    c8:6b:fd:9a:d4:b4:66:ca:b5:04:8a:3c:3f:46:95:
                    0a:95:ca:3e:42:04:a3:5b:73:50:1c:b3:61:c8:52:
                    b3:c7:3b:d5:55:cd:52:a2:14:d0:af:74:a2:46:68:
                    6b:8c:83:58:e2:9a:e8:25:05:9b:3c:ca:35:37:c1:
                    92:2e:db:76:44:a0:82:12:27:0f:1e:36:31:a5:ee:
                    4c:45:c0:64:18:db:ff:63:1d:71:ca:1d:66:f4:28:
                    20:fc:ac:c8:72:2c:b4:55:66:ae:38:cd:e3:67:6f:
                    5d:4b:f4:25:c2:c7:88:be:81:b2:cb:e0:33:f6:b5:
                    b6:e7:dd:05:70:e5:3b:d9:f2:7c:8c:dc:76:45:66:
                    71:d9:9b:2f:2a:93:f2:cb:f1:8c:92:de:72:b5:67:
                    b2:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:97:F6:6D:D8:05:83:01:86:47:1F:1D:6A:85:AB:49:BA:79:71:5C
            X509v3 Authority Key Identifier:
                keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/9pf2bdgFgwGGRx8daoWrSbp5cVw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.89.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         72:9c:81:ee:64:38:bf:65:43:e4:1a:c5:fc:42:2c:8e:f9:43:
         a8:22:db:e8:8c:dc:7d:cc:c6:cb:13:36:82:09:25:35:bf:97:
         11:3b:a1:78:12:bb:c9:a4:6c:72:4d:48:f9:95:c7:83:1b:61:
         63:f0:1e:5f:26:5e:cb:77:bc:a2:7c:73:58:11:22:da:1e:66:
         65:70:7d:b0:33:28:f2:52:cc:3a:43:3e:16:ef:66:45:b4:b2:
         1e:70:12:c4:22:ff:7c:00:dc:ca:77:c2:f8:33:77:87:7f:ae:
         cf:15:c9:2f:6a:b4:3c:07:2c:d1:ef:b4:70:0e:e8:b8:81:c7:
         b3:11:f8:fe:3b:a4:99:74:0b:58:3b:4e:49:d9:4c:83:16:c8:
         a5:bb:f4:4b:bf:42:ea:c4:66:66:5c:3e:dc:c7:18:df:ea:aa:
         9b:b1:84:d2:f2:c9:0d:68:bf:0d:27:59:1a:6f:16:ba:a4:80:
         0d:8a:bf:dd:a5:29:9d:5c:81:97:d0:9d:06:5c:16:66:d5:5a:
         9f:8a:03:ec:a6:b9:cf:ac:2a:8b:80:c4:fd:cb:12:f1:f8:17:
         ac:32:cc:b0:81:6a:8c:48:2c:82:a5:0d:04:fc:21:8a:07:48:
         61:dc:88:6d:c0:6b:4f:97:eb:83:db:87:bf:8e:f3:03:b1:82:
         ce:c2:56:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:23 2024 by rpki-client on console-fra.rpki-client.org