Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/Q74sNKWenCm-CHRIeyUifH84xS4.roa
File:                     Q74sNKWenCm-CHRIeyUifH84xS4.roa (raw, json)
Hash identifier:          LTB8BU8oFWUfVRRzFx0JxFzyhIwvQoh0dDBAurBrMV0=
Subject key identifier:   43:BE:2C:34:A5:9E:9C:29:BE:08:74:48:7B:25:22:7C:7F:38:C5:2E
Certificate issuer:       /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
Certificate serial:       0B9E
Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/Q74sNKWenCm-CHRIeyUifH84xS4.roa
Signing time:             Fri 01 Sep 2023 09:58:59 +0000
ROA not before:           Fri 01 Sep 2023 09:58:59 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     24158
IP address blocks:        123.99.32.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2974 (0xb9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
        Validity
            Not Before: Sep  1 09:58:59 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=43BE2C34A59E9C29BE0874487B25227C7F38C52E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:77:7a:f1:4b:6a:4f:5c:70:f8:c0:6b:9d:3d:
                    0f:df:ce:7a:a5:ac:e5:0a:1d:41:0b:47:7c:f4:9b:
                    5b:01:23:a6:e6:7d:5d:8c:18:02:c6:ee:04:cb:9a:
                    9c:43:c4:f4:5a:03:94:1a:ab:33:3a:3f:ab:e8:31:
                    37:a2:5b:d2:a4:1e:7c:53:88:c4:52:11:96:a3:15:
                    91:1c:d2:d5:55:1a:7a:22:5d:ca:77:e0:b2:af:07:
                    39:05:8c:f4:1c:21:a5:b4:de:36:72:a5:a0:79:83:
                    2d:03:55:b5:b5:d6:f9:4d:d6:a0:7b:0e:05:91:8a:
                    cc:dd:a9:78:39:16:7f:54:eb:fc:cb:3e:d6:01:e2:
                    15:3a:03:e6:dc:b6:07:42:28:49:a5:e5:03:9d:c9:
                    99:9e:ac:74:dd:67:24:ff:46:6e:e0:89:38:b5:74:
                    14:b2:9f:76:b4:a4:fe:ca:82:55:f2:09:59:b0:ac:
                    44:e1:a1:c6:78:03:46:6a:ed:4c:6a:6f:8a:bc:74:
                    48:5d:a3:8a:d2:df:f5:59:48:c3:a0:24:be:ad:6c:
                    9f:cc:a7:97:39:60:2b:42:71:2e:2c:c6:19:47:51:
                    2b:ef:ed:fb:2c:15:51:1f:d1:cc:fa:c3:ce:6f:be:
                    1b:5a:cd:e0:31:cd:4d:da:a7:21:3a:3c:3d:f3:f5:
                    76:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:BE:2C:34:A5:9E:9C:29:BE:08:74:48:7B:25:22:7C:7F:38:C5:2E
            X509v3 Authority Key Identifier:
                keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/Q74sNKWenCm-CHRIeyUifH84xS4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.99.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         3d:3f:b0:c6:5c:7c:91:40:99:5f:2e:61:fe:b4:c4:46:8d:fd:
         04:d9:f1:f6:52:9b:ad:c4:62:ba:b5:1b:71:75:6e:ae:05:ed:
         72:73:81:76:55:58:0a:a9:b6:e8:ee:35:fb:b0:29:45:f6:d0:
         bc:a9:d2:0a:fa:17:6a:8f:d5:b3:c6:86:60:0c:48:73:6e:0a:
         6e:c3:d1:ed:5d:92:6a:20:17:e1:92:3a:f1:df:e8:3e:89:93:
         b1:7f:ac:9d:84:c1:7a:a5:f9:7c:1b:87:7e:c4:15:57:6f:63:
         94:e9:0c:0d:83:bd:25:2e:38:3f:fb:4e:4e:f2:3b:4e:aa:86:
         4f:b1:da:eb:27:f2:2f:27:2f:d3:32:9b:0e:f8:86:6a:7d:d0:
         a1:54:08:90:b4:ae:51:b2:7e:27:bb:9c:32:6f:13:81:69:d2:
         da:7d:96:b9:ce:6e:4a:e8:2a:83:2f:8c:b2:cf:f7:b6:3f:81:
         82:3b:5e:ff:72:b0:d3:33:15:09:4d:8a:c4:41:ed:34:fb:c4:
         bc:d1:8b:1f:07:3f:90:4b:fd:23:9e:f4:37:c6:b2:48:70:aa:
         5d:7d:58:8c:24:83:02:d0:55:fa:ce:be:56:fe:83:8b:52:9f:
         6b:9a:b0:5e:b3:46:34:f6:e8:b4:12:99:df:d9:2a:df:df:32:
         ef:d6:be:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:23 2024 by rpki-client on console-fra.rpki-client.org