Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/hK8yutyH38wmiWgKgyxn6UWOdus.roa
File:                     hK8yutyH38wmiWgKgyxn6UWOdus.roa (raw, json)
Hash identifier:          BPUfw7ilDZZ4G73B+LSplKpx+rVPzl6Ea+/ET8oZncU=
Subject key identifier:   84:AF:32:BA:DC:87:DF:CC:26:89:68:0A:83:2C:67:E9:45:8E:76:EB
Certificate issuer:       /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
Certificate serial:       0BA1
Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/hK8yutyH38wmiWgKgyxn6UWOdus.roa
Signing time:             Fri 01 Sep 2023 09:59:00 +0000
ROA not before:           Fri 01 Sep 2023 09:59:00 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     24158
IP address blocks:        123.99.0.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2977 (0xba1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
        Validity
            Not Before: Sep  1 09:59:00 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=84AF32BADC87DFCC2689680A832C67E9458E76EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:a0:5b:54:eb:19:5a:2c:41:49:dd:7a:54:fb:
                    9a:41:30:7d:01:44:45:16:c5:02:7a:38:ce:63:7a:
                    32:80:d7:ab:ed:2f:dd:d6:ea:a1:22:03:fd:66:70:
                    3c:88:59:e6:1d:f2:78:b0:8f:b7:9f:04:59:8e:28:
                    7d:94:cc:a1:99:26:5e:76:f0:0a:f8:c9:a1:a9:8e:
                    78:d5:cb:0b:e6:9c:ce:c8:91:92:a1:8c:90:7b:c8:
                    af:93:4c:68:ea:9c:0e:04:9b:51:33:6e:b5:cd:6c:
                    f3:74:0b:7c:8e:f4:76:62:3e:70:63:41:2a:9f:d5:
                    77:b4:9d:98:9d:5d:cc:61:7b:5e:1d:cf:08:fd:c1:
                    fc:c2:b0:bd:e3:d2:e3:e8:79:d2:e5:bb:32:4d:0b:
                    8d:a0:0f:b9:5a:54:ee:ed:32:d3:27:ea:3a:3e:2d:
                    c9:40:cc:92:00:e6:b9:8c:af:96:0f:17:8f:20:50:
                    83:f3:88:75:7d:c9:bf:55:65:dd:f9:91:98:56:e1:
                    df:8d:2a:7d:67:0f:cd:ea:c1:f8:4f:16:60:84:66:
                    48:2c:b5:d5:fb:1a:99:b2:6e:13:db:5a:2b:ef:75:
                    86:1f:75:4b:24:06:94:ff:a4:87:5a:05:60:94:f5:
                    11:d6:80:59:fb:27:96:a5:d6:b8:47:78:77:b9:0d:
                    8a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:AF:32:BA:DC:87:DF:CC:26:89:68:0A:83:2C:67:E9:45:8E:76:EB
            X509v3 Authority Key Identifier:
                keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/hK8yutyH38wmiWgKgyxn6UWOdus.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.99.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         5f:dc:b2:58:be:75:2b:aa:fa:e8:14:a7:e5:b7:be:73:6d:e9:
         e9:39:78:48:46:7e:eb:ef:f5:fb:4a:cd:0e:fa:e6:2b:c1:34:
         b5:31:dc:a0:1b:ca:2e:11:b8:18:96:5c:e7:97:2b:04:24:1c:
         47:bb:77:6e:c0:38:ff:7f:58:8a:fd:5a:04:14:54:c2:02:ae:
         9c:d7:9b:89:30:72:43:ae:f8:ae:fc:99:0e:67:82:00:d5:75:
         72:33:0c:04:fd:aa:f3:24:24:8b:9f:3a:f3:85:20:f7:8d:ef:
         9b:78:46:d2:a8:71:a7:dc:1f:0c:68:b8:ab:37:56:0c:1f:92:
         c6:55:69:4f:87:69:0e:ed:f8:68:4d:a8:0e:c5:60:6f:52:09:
         bf:f2:d5:42:9f:e2:d1:55:60:42:ba:e3:ce:f8:c2:30:bd:3a:
         6e:c5:b4:70:b4:c4:5c:3d:fb:76:66:a5:d0:ea:79:36:50:f2:
         92:19:ab:47:90:b5:f2:d4:26:e1:12:80:59:8a:da:8d:e4:8f:
         b6:c2:64:2b:32:f9:62:13:d3:e7:5e:37:9d:1e:7c:78:07:78:
         ee:b0:46:45:6e:53:80:76:e9:a2:34:88:be:a4:54:73:35:a8:
         c7:cd:05:5e:e5:3c:5f:54:86:0e:6b:1c:89:84:11:9a:b9:d2:
         14:d6:52:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:23 2024 by rpki-client on console-fra.rpki-client.org