Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/GTMhjN7TAIEb6Qdx7DQH1nk6EB0.roa
File:                     GTMhjN7TAIEb6Qdx7DQH1nk6EB0.roa (raw, json)
Hash identifier:          cK3Q4QWeZWKGWD8xU6nbnLpHXQb2wfX9OICCKoKGinw=
Subject key identifier:   19:33:21:8C:DE:D3:00:81:1B:E9:07:71:EC:34:07:D6:79:3A:10:1D
Certificate issuer:       /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
Certificate serial:       0B9C
Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/GTMhjN7TAIEb6Qdx7DQH1nk6EB0.roa
Signing time:             Fri 01 Sep 2023 09:58:58 +0000
ROA not before:           Fri 01 Sep 2023 09:58:58 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     24158
IP address blocks:        2402:7500:800::/40 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2972 (0xb9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
        Validity
            Not Before: Sep  1 09:58:58 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=1933218CDED300811BE90771EC3407D6793A101D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:cf:5a:38:8f:cb:52:65:56:39:7b:43:38:89:
                    07:ae:99:ad:bb:b5:be:18:d3:ee:77:60:93:46:39:
                    9d:53:10:f1:51:84:7e:37:86:a3:5d:e3:4f:1e:cf:
                    e7:bb:19:9b:dd:04:9b:70:50:b0:cb:93:26:19:8b:
                    04:b7:22:e9:3e:d8:c8:47:09:5a:be:17:06:d7:28:
                    f5:86:6d:1b:b7:15:00:c7:6a:c8:1b:64:20:57:b8:
                    be:95:e5:3c:78:73:4d:97:a9:33:9c:b4:4d:93:85:
                    a6:09:39:69:42:41:e3:29:3b:ac:69:99:1d:8d:ef:
                    98:37:b9:0a:a9:09:8d:00:e7:c6:62:1d:8c:7c:20:
                    44:55:45:3d:ca:1b:43:6a:72:37:87:85:21:42:e5:
                    6b:fa:f8:40:93:75:bd:81:30:0b:c9:b8:56:9d:35:
                    f4:30:d2:38:3f:84:5a:77:bb:4f:4c:38:4c:de:d9:
                    9f:a3:b2:d9:bc:5a:4e:76:87:b2:60:90:bf:8c:91:
                    06:c7:93:8e:c5:c7:8d:47:f5:39:39:e5:52:e7:42:
                    89:ca:50:3d:52:32:b9:bb:52:2b:b5:51:1d:d6:3d:
                    8d:a8:eb:4d:12:33:1b:9d:64:aa:89:1b:95:05:e7:
                    b8:27:8f:bc:e6:90:c4:10:71:1d:a4:ef:6a:15:f5:
                    c3:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:33:21:8C:DE:D3:00:81:1B:E9:07:71:EC:34:07:D6:79:3A:10:1D
            X509v3 Authority Key Identifier:
                keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/GTMhjN7TAIEb6Qdx7DQH1nk6EB0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:7500:800::/40

    Signature Algorithm: sha256WithRSAEncryption
         08:c2:4a:ae:78:9a:a2:c6:f5:6a:68:43:9b:2a:72:b8:da:e9:
         d0:85:77:35:f5:90:97:6c:61:d5:98:8d:bd:88:db:68:23:9f:
         a0:ff:bf:78:fc:51:cb:e1:d7:c2:e9:96:91:d7:13:41:0e:8a:
         89:a7:78:de:4e:eb:20:d3:78:a7:ed:08:88:d7:cb:fb:18:16:
         fb:c0:ac:70:ad:f2:70:ac:62:af:e2:33:38:34:a3:38:a2:47:
         8e:13:fd:18:5f:2a:9b:37:c4:49:1c:b8:21:0e:1d:d2:51:cc:
         03:c1:04:4b:2f:58:0e:ed:a4:ac:9b:1b:fb:3e:a4:cf:54:7d:
         da:3b:74:32:65:be:74:62:0d:e2:c9:83:62:be:51:35:16:03:
         0f:d6:c4:fd:11:eb:a8:c7:40:0e:5a:f3:96:69:73:ce:5c:17:
         9b:e6:b4:4f:8f:cd:ad:6c:da:84:4e:3e:8a:98:06:9a:1e:b1:
         95:0b:0d:e9:44:be:c7:ce:32:b5:e4:db:e8:1d:cb:8b:3a:dd:
         d4:8c:71:92:26:88:95:06:43:1f:e1:6b:30:11:98:ea:db:4a:
         85:ea:44:d6:82:43:6e:35:a9:08:9e:3d:9e:91:02:83:70:b5:
         cf:83:9c:88:55:4c:9e:d2:94:4b:2b:72:81:58:20:21:7b:6b:
         da:bf:fa:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:16 2024 by rpki-client on console-ams.rpki-client.org