Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/tibVAF1afbOQIl4ECaKC4TqIrCo.roa
File:                     tibVAF1afbOQIl4ECaKC4TqIrCo.roa (raw, json)
Hash identifier:          ejmaWD36kyzj7+hgFx5NucgVCB8p/i7E+hcDWdrMcbU=
Subject key identifier:   B6:26:D5:00:5D:5A:7D:B3:90:22:5E:04:09:A2:82:E1:3A:88:AC:2A
Certificate issuer:       /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
Certificate serial:       0BFA
Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/tibVAF1afbOQIl4ECaKC4TqIrCo.roa
Signing time:             Fri 22 Dec 2023 07:51:58 +0000
ROA not before:           Fri 22 Dec 2023 07:51:58 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     24157
IP address blocks:        103.5.32.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3066 (0xbfa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
        Validity
            Not Before: Dec 22 07:51:58 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=B626D5005D5A7DB390225E0409A282E13A88AC2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7d:29:6b:83:c8:22:b1:ff:00:63:2c:08:ec:
                    eb:01:ec:13:ef:e4:c2:41:cf:d5:0d:c8:a3:bb:a5:
                    0a:da:37:00:2a:ef:6a:26:32:f1:71:87:e3:b6:d6:
                    d6:58:36:67:6e:c8:4e:51:df:9f:60:44:8f:87:83:
                    1f:53:e9:d0:46:c3:15:8e:f1:6d:a8:0d:f2:8d:00:
                    a6:d0:5d:62:53:bc:eb:20:02:5a:53:68:ac:5d:21:
                    ff:76:e2:98:32:93:53:87:29:51:76:2e:99:6f:0c:
                    e0:2d:ca:0e:5c:92:9e:65:e3:77:16:96:49:b7:62:
                    e0:c9:a7:c1:ee:c9:83:6e:04:25:86:0e:ad:e2:09:
                    32:5d:62:aa:3f:73:24:fa:bc:77:04:58:d0:32:c9:
                    be:5f:c2:cd:cc:f6:1f:f2:39:cf:8f:26:69:c8:a1:
                    41:1d:e8:ea:53:ab:54:7f:b8:6d:e0:5d:c8:84:18:
                    ec:bd:67:97:1c:66:1f:96:68:a4:89:31:7f:0b:fd:
                    38:32:37:e0:2a:57:e2:a7:34:9b:03:14:19:9c:6c:
                    15:30:dc:02:08:45:94:36:d6:2f:63:90:46:0e:70:
                    2c:c2:c6:15:93:84:e3:79:5e:6b:74:14:95:91:a0:
                    d6:3b:a0:bb:68:e7:fa:b7:49:59:04:11:05:c3:3f:
                    72:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:26:D5:00:5D:5A:7D:B3:90:22:5E:04:09:A2:82:E1:3A:88:AC:2A
            X509v3 Authority Key Identifier:
                keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/tibVAF1afbOQIl4ECaKC4TqIrCo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.5.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:be:58:91:1d:07:2e:97:9e:06:c8:1b:3e:10:9b:4d:17:29:
         85:ee:ae:4f:67:98:82:a5:2d:d2:34:cc:ad:2b:d6:f1:e6:1c:
         99:1d:43:b5:ab:44:61:76:2a:1b:ba:8d:86:c5:9c:58:13:16:
         48:a5:bb:3b:bd:b8:f5:09:c6:f0:c1:49:ef:d2:8f:f8:e9:7d:
         02:7c:e0:fa:9f:fd:c0:fe:f3:98:43:a0:1e:15:9d:8d:c3:99:
         d8:84:d2:ee:0a:71:58:c8:9d:c4:91:ce:26:78:20:eb:1b:94:
         b6:32:b5:02:46:c9:df:1b:40:ba:28:1d:87:62:89:a7:ed:6c:
         95:45:7d:0d:fe:ee:85:30:d8:8f:69:8c:39:76:10:bd:37:a1:
         91:66:bc:6f:60:61:3d:de:fd:ad:23:52:6c:5b:87:f9:9b:fd:
         85:9b:25:a8:43:95:ec:71:b4:f2:a6:16:5b:0e:d2:b2:93:48:
         4b:98:a4:64:0c:56:35:83:ea:a3:e1:1a:4f:1e:e2:e8:d6:28:
         78:2e:f5:9d:77:92:bf:41:48:db:d3:90:27:60:36:1f:c5:2e:
         53:11:54:b6:0e:79:d3:ec:a6:f6:df:41:ba:d5:e0:66:82:1b:
         b5:76:07:09:19:b1:d6:55:8b:60:58:e9:30:b6:d0:a1:6f:70:
         eb:48:f6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:16 2024 by rpki-client on console-ams.rpki-client.org