Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/AcVDzGDV5Www103ys6wAoPY5BUg.roa
File:                     AcVDzGDV5Www103ys6wAoPY5BUg.roa (raw, json)
Hash identifier:          cq3pEfuPByi/BpBvu5ctsX1NBMxAcvUh28odht4CRe4=
Subject key identifier:   01:C5:43:CC:60:D5:E5:6C:30:D7:4D:F2:B3:AC:00:A0:F6:39:05:48
Certificate issuer:       /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
Certificate serial:       0B9F
Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/AcVDzGDV5Www103ys6wAoPY5BUg.roa
Signing time:             Fri 01 Sep 2023 09:58:59 +0000
ROA not before:           Fri 01 Sep 2023 09:58:59 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     24158
IP address blocks:        103.2.216.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2975 (0xb9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
        Validity
            Not Before: Sep  1 09:58:59 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=01C543CC60D5E56C30D74DF2B3AC00A0F6390548
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:50:3f:2b:cc:d9:17:35:34:e2:ef:1b:89:f1:
                    15:3f:6d:3c:b6:b2:93:5a:5e:f6:0e:99:c8:5f:3a:
                    5a:eb:e5:aa:4b:63:70:29:37:4e:38:15:64:e1:08:
                    e7:c8:fc:20:fe:fe:de:62:b4:34:57:49:48:bc:d9:
                    6e:42:08:c9:b8:29:bc:7f:7c:9d:00:b7:ce:04:a5:
                    a9:ca:a1:d2:03:05:51:8e:83:90:9d:73:7f:d7:d1:
                    9e:a5:7e:0c:ec:e0:dc:e5:b5:4f:20:9d:3e:b6:a2:
                    4e:39:d3:2d:41:ac:f1:8a:0e:b4:3e:0f:2b:60:22:
                    a4:c7:32:61:ab:80:af:24:98:73:ee:98:f1:a9:0d:
                    33:4e:96:c0:a3:9d:57:53:10:69:de:48:8a:72:98:
                    9e:99:fe:cd:1c:91:37:23:c2:bb:bb:2c:64:85:88:
                    b1:92:7f:0f:54:88:9d:db:b6:3e:8e:1b:42:13:29:
                    af:6b:d7:42:20:b3:49:5f:dd:e4:bb:9c:83:e4:25:
                    2f:37:d3:d7:72:72:43:c8:a2:d0:5e:c2:5e:9b:e1:
                    f0:03:70:a3:18:67:c6:ae:0a:23:e7:4c:73:ee:60:
                    9a:b6:e8:c1:0c:4e:f0:96:ff:6b:65:d4:b1:c1:0c:
                    fc:95:16:5e:68:3b:4f:dc:9e:77:9f:da:e4:56:81:
                    60:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:C5:43:CC:60:D5:E5:6C:30:D7:4D:F2:B3:AC:00:A0:F6:39:05:48
            X509v3 Authority Key Identifier:
                keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/AcVDzGDV5Www103ys6wAoPY5BUg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.2.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:a6:c9:a3:c2:71:68:c0:7d:4b:02:eb:4b:b1:f1:74:33:4f:
         8c:d4:f0:7f:55:39:19:7c:e0:29:cc:ae:50:da:a4:36:af:32:
         a9:77:df:28:d7:ed:34:c2:2c:66:60:a3:4f:21:56:36:0d:99:
         b4:24:02:39:b9:aa:08:62:71:f1:6b:6b:60:97:bb:8e:f1:3b:
         c2:4e:8a:f2:3d:c5:c0:2f:fa:03:ae:3f:98:c5:93:86:59:82:
         4d:a0:74:56:48:c4:18:fa:9e:85:d3:b8:10:ed:fa:39:f2:d0:
         b6:1c:b7:fb:94:bb:06:5a:f7:8e:3e:c1:6b:59:ca:9b:a7:b9:
         52:79:25:18:e7:3b:83:22:7b:e8:15:07:b5:4d:fb:4c:23:de:
         ce:f6:2c:82:22:15:0d:03:83:72:ca:d9:08:22:59:42:05:70:
         65:39:a4:34:5c:33:94:e0:7d:db:36:b8:b3:bc:93:7f:ed:fe:
         85:61:95:5b:88:b9:9a:f7:f3:48:0c:8c:17:57:03:6b:2f:5b:
         c9:b1:e1:a2:18:c6:85:92:81:d4:d7:42:97:86:79:e3:e2:5e:
         c7:b0:b3:c4:43:57:a4:51:6a:0d:18:f7:d4:04:a2:97:32:37:
         d2:d6:23:fc:cd:c7:99:e2:17:0f:0d:65:ba:34:24:64:b2:2b:
         d6:4c:f6:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:16 2024 by rpki-client on console-ams.rpki-client.org