Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/De1D3bMbXQU5BnxZ9n4iIJporTY.roa
File:                     De1D3bMbXQU5BnxZ9n4iIJporTY.roa (raw, json)
Hash identifier:          q92JAlMFzbBJEi5oxsqnYcLfDZ5SX5m5cFNWU8kSVMU=
Subject key identifier:   0D:ED:43:DD:B3:1B:5D:05:39:06:7C:59:F6:7E:22:20:9A:68:AD:36
Certificate issuer:       /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
Certificate serial:       0C04
Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/De1D3bMbXQU5BnxZ9n4iIJporTY.roa
Signing time:             Fri 22 Dec 2023 07:56:06 +0000
ROA not before:           Fri 22 Dec 2023 07:56:06 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     24157
IP address blocks:        202.144.208.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3076 (0xc04)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
        Validity
            Not Before: Dec 22 07:56:06 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=0DED43DDB31B5D0539067C59F67E22209A68AD36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a4:bc:6d:37:00:08:05:74:e2:8f:53:ef:54:
                    8e:55:e0:fe:aa:d8:9b:2a:9d:48:70:ef:a9:fa:7e:
                    01:5f:f3:a5:ea:88:2d:62:60:08:39:e3:79:fa:34:
                    8d:a7:32:d4:04:98:08:98:25:dc:27:95:3d:fd:bb:
                    32:af:e9:77:df:1a:c9:56:2f:fd:8c:89:8c:01:49:
                    43:97:c2:05:51:a9:14:86:57:b8:8f:bf:87:33:67:
                    24:81:14:09:7e:69:f8:7b:2d:47:3d:b8:9d:fb:eb:
                    91:de:b1:b8:c9:bb:9a:49:c0:69:fb:d1:40:86:d4:
                    d1:02:d0:11:d3:73:5d:1c:9b:9e:2a:b4:22:c9:c6:
                    b9:b3:f1:fc:20:ef:17:78:08:81:2d:d8:2f:7c:9c:
                    96:f4:e8:b4:fb:61:eb:d4:a4:5a:e3:c1:46:08:d7:
                    7f:ee:87:1e:99:c1:b7:81:a3:ed:ec:a2:11:81:ce:
                    17:5c:de:e5:d0:a1:43:4c:c2:e5:a7:28:2d:78:e1:
                    b8:e7:01:32:e4:8a:51:00:0c:5f:0b:1c:b2:85:7e:
                    93:16:97:ef:70:36:2d:19:27:d7:bc:c6:ef:d2:20:
                    52:f7:51:e6:eb:29:3d:24:38:5a:99:e4:ff:6b:cc:
                    82:21:9c:e9:ff:c1:e0:78:94:1d:82:ef:5c:3a:01:
                    e6:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:ED:43:DD:B3:1B:5D:05:39:06:7C:59:F6:7E:22:20:9A:68:AD:36
            X509v3 Authority Key Identifier:
                keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/De1D3bMbXQU5BnxZ9n4iIJporTY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.144.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ad:45:c0:c1:b6:28:51:13:b8:c5:b3:87:8e:a1:52:c0:23:f5:
         cc:02:ce:0d:11:d6:84:49:19:65:64:f2:2e:0c:db:28:d5:e8:
         35:80:f6:39:5d:c5:d5:68:03:2a:04:c0:5e:1a:db:56:c3:e0:
         c5:51:a8:f4:35:1f:3a:21:47:80:bb:89:46:90:5e:0d:88:bf:
         50:67:04:69:1b:97:d9:fd:ac:3d:dd:a4:65:60:d4:15:82:b7:
         04:fd:05:1b:11:ba:7c:0f:8a:97:4a:3f:98:8d:8a:47:c0:b9:
         e2:72:6a:56:8e:3d:ad:6f:e5:28:df:c0:df:29:80:aa:3f:7e:
         c2:e5:2b:7c:4d:69:c4:24:b7:99:c4:73:4f:aa:2a:d4:40:64:
         b5:24:b6:52:f9:2a:f4:0d:60:a9:14:be:36:6c:0c:2f:95:62:
         13:f0:1c:19:67:72:97:ee:3a:9e:76:fe:d1:18:77:e2:95:a2:
         41:ac:34:52:2e:b0:03:52:c8:4d:d9:47:b2:f4:f4:62:14:0f:
         02:7a:bf:82:31:e6:aa:68:3b:42:d2:d7:c0:ac:a8:b2:f4:9c:
         af:f5:57:e5:d2:92:9d:f4:6d:a9:6f:7c:c1:ec:58:2e:c7:8a:
         47:92:d5:84:dd:7f:cc:99:2d:d4:9d:3e:e0:6a:f4:b4:5b:54:
         1c:e1:03:e5
-----BEGIN CERTIFICATE-----
MIIE3jCCA8agAwIBAgICDAQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjJD
QTM5RDhEMTdCMTBEOTdENUE1MUUwRUEyRjlGQjFCQzQwQ0Q5MDAeFw0yMzEyMjIw
NzU2MDZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDBERUQ0M0REQjMxQjVE
MDUzOTA2N0M1OUY2N0UyMjIwOUE2OEFEMzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDLpLxtNwAIBXTij1PvVI5V4P6q2JsqnUhw76n6fgFf86XqiC1i
YAg543n6NI2nMtQEmAiYJdwnlT39uzKv6XffGslWL/2MiYwBSUOXwgVRqRSGV7iP
v4czZySBFAl+afh7LUc9uJ3765HesbjJu5pJwGn70UCG1NEC0BHTc10cm54qtCLJ
xrmz8fwg7xd4CIEt2C98nJb06LT7YevUpFrjwUYI13/uhx6ZwbeBo+3sohGBzhdc
3uXQoUNMwuWnKC144bjnATLkilEADF8LHLKFfpMWl+9wNi0ZJ9e8xu/SIFL3Uebr
KT0kOFqZ5P9rzIIhnOn/weB4lB2C71w6Aeb7AgMBAAGjggH6MIIB9jAdBgNVHQ4E
FgQUDe1D3bMbXQU5BnxZ9n4iIJporTYwHwYDVR0jBBgwFoAUsso52NF7ENl9WlHg
6i+fsbxAzZAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBiBgNVHR8EWzBZMFeg
VaBThlFyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FO
TU9CSUxFL3NzbzUyTkY3RU5sOVdsSGc2aS1mc2J4QXpaQS5jcmwwYAYIKwYBBQUH
AQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtp
L1RXTklDQ0Evc3NvNTJORjdFTmw5V2xIZzZpLWZzYnhBelpBLmNlcjAOBgNVHQ8B
Af8EBAMCB4AwgaIGCCsGAQUFBwELBIGVMIGSMF0GCCsGAQUFBzALhlFyc3luYzov
L3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FOTU9CSUxFL0RlMUQz
Yk1iWFFVNUJueFo5bjRpSUpwb3JUWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8v
cnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAO
MAwEAgABMAYDBATKkNAwDQYJKoZIhvcNAQELBQADggEBAK1FwMG2KFETuMWzh46h
UsAj9cwCzg0R1oRJGWVk8i4M2yjV6DWA9jldxdVoAyoEwF4a21bD4MVRqPQ1Hzoh
R4C7iUaQXg2Iv1BnBGkbl9n9rD3dpGVg1BWCtwT9BRsRunwPipdKP5iNikfAueJy
alaOPa1v5SjfwN8pgKo/fsLlK3xNacQkt5nEc0+qKtRAZLUktlL5KvQNYKkUvjZs
DC+VYhPwHBlncpfuOp52/tEYd+KVokGsNFIusANSyE3ZR7L09GIUDwJ6v4Ix5qpo
O0LS18CsqLL0nK/1V+XSkp30balvfMHsWC7HikeS1YTdf8yZLdSdPuBq9LRbVBzh
A+U=
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:16 2024 by rpki-client on console-ams.rpki-client.org