Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/veMXsUfWP9X7pPro_3CAOx45yvc.roa
File:                     veMXsUfWP9X7pPro_3CAOx45yvc.roa (raw, json)
Hash identifier:          C3Dz9TH/WGCswEsuLBc7qlUVWNyOkczkLoSas15svCI=
Subject key identifier:   BD:E3:17:B1:47:D6:3F:D5:FB:A4:FA:E8:FF:70:80:3B:1E:39:CA:F7
Certificate issuer:       /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
Certificate serial:       0B9A
Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/veMXsUfWP9X7pPro_3CAOx45yvc.roa
Signing time:             Fri 01 Sep 2023 09:58:57 +0000
ROA not before:           Fri 01 Sep 2023 09:58:57 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     24158
IP address blocks:        43.240.108.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2970 (0xb9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
        Validity
            Not Before: Sep  1 09:58:57 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=BDE317B147D63FD5FBA4FAE8FF70803B1E39CAF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fa:c9:71:0a:b0:d5:aa:04:8a:b3:8b:be:d8:
                    a5:81:3c:de:8c:c0:a0:74:38:d5:42:4a:1c:87:fc:
                    cd:a5:28:12:1c:59:72:de:9c:91:85:f3:32:2a:51:
                    1a:b8:38:36:d0:1f:91:32:e3:ed:a3:e2:07:06:09:
                    b5:34:68:75:e7:2c:52:c1:b0:20:c7:89:ba:d3:ee:
                    92:b6:7b:17:1e:24:7f:e8:9f:3c:32:18:de:1c:87:
                    13:eb:d0:57:78:23:c6:c0:89:52:99:d7:92:fd:0f:
                    a5:f1:ad:db:5a:ae:2e:cc:1d:b2:90:ad:1d:8f:59:
                    e8:5b:47:73:e1:8a:81:27:95:5d:90:3c:05:d1:82:
                    cb:c3:9b:2b:46:fc:28:00:49:fb:25:22:7e:1c:2b:
                    85:9d:70:b8:b6:88:01:3f:9c:e0:ad:36:a6:17:7f:
                    35:4b:81:39:98:2f:34:10:ea:c5:22:82:3f:e8:97:
                    6c:0c:60:de:61:92:06:c9:be:09:7f:ea:23:fc:c7:
                    f1:85:b0:dd:3d:41:85:a8:16:ba:5c:0d:12:4c:15:
                    07:32:a6:44:e7:a5:71:ca:ae:74:28:ff:28:0d:81:
                    0a:83:19:c1:ef:4e:58:df:9e:6f:02:74:23:b6:49:
                    c6:a8:68:c8:bc:2d:f6:3e:05:d2:02:83:2e:a3:0f:
                    a1:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:E3:17:B1:47:D6:3F:D5:FB:A4:FA:E8:FF:70:80:3B:1E:39:CA:F7
            X509v3 Authority Key Identifier:
                keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/veMXsUfWP9X7pPro_3CAOx45yvc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.240.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:b5:43:b0:5f:c8:d6:9e:61:27:6e:65:f8:fa:94:be:47:54:
         34:ae:18:1c:d6:62:48:fb:7d:60:16:e0:1d:47:48:16:6c:e1:
         0d:21:55:46:d7:83:e6:43:9c:15:f1:1c:d0:84:62:a5:0d:7c:
         a7:9f:37:d6:dc:42:c9:96:66:89:aa:76:a4:35:b7:f2:0d:a2:
         26:63:91:3d:f8:84:b2:c4:00:b8:f7:97:91:fb:35:35:70:db:
         5f:90:4c:0f:a2:5a:17:c8:2f:8f:42:b6:5a:6d:c8:60:e6:b7:
         8b:96:02:63:77:48:e6:a3:d1:b1:3f:f5:05:6b:5a:48:8e:58:
         02:d6:af:2c:15:f9:90:de:ef:8d:68:17:16:ac:83:47:83:15:
         0f:f5:62:f8:7f:63:73:94:b6:51:61:96:e8:ae:a7:ff:de:cb:
         ba:75:d1:a7:5d:e1:75:8e:b1:95:52:5a:c9:a8:31:8d:66:d6:
         e4:21:8e:52:94:a5:1a:22:d6:fe:07:9a:26:82:c9:dd:94:66:
         b4:d5:24:62:49:65:ec:85:2d:e9:57:67:a4:34:99:e2:60:01:
         a4:d8:f7:4c:67:e1:b1:b5:fc:8e:7a:e3:eb:ab:d6:27:3e:11:
         38:d2:de:0d:f6:ac:0c:c2:c5:8b:0c:8f:85:94:66:46:60:20:
         62:3d:c8:c9
-----BEGIN CERTIFICATE-----
MIIE3jCCA8agAwIBAgICC5owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjJD
QTM5RDhEMTdCMTBEOTdENUE1MUUwRUEyRjlGQjFCQzQwQ0Q5MDAeFw0yMzA5MDEw
OTU4NTdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEJERTMxN0IxNDdENjNG
RDVGQkE0RkFFOEZGNzA4MDNCMUUzOUNBRjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCj+slxCrDVqgSKs4u+2KWBPN6MwKB0ONVCShyH/M2lKBIcWXLe
nJGF8zIqURq4ODbQH5Ey4+2j4gcGCbU0aHXnLFLBsCDHibrT7pK2exceJH/onzwy
GN4chxPr0Fd4I8bAiVKZ15L9D6Xxrdtari7MHbKQrR2PWehbR3PhioEnlV2QPAXR
gsvDmytG/CgASfslIn4cK4WdcLi2iAE/nOCtNqYXfzVLgTmYLzQQ6sUigj/ol2wM
YN5hkgbJvgl/6iP8x/GFsN09QYWoFrpcDRJMFQcypkTnpXHKrnQo/ygNgQqDGcHv
Tljfnm8CdCO2ScaoaMi8LfY+BdICgy6jD6FjAgMBAAGjggH6MIIB9jAdBgNVHQ4E
FgQUveMXsUfWP9X7pPro/3CAOx45yvcwHwYDVR0jBBgwFoAUsso52NF7ENl9WlHg
6i+fsbxAzZAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBiBgNVHR8EWzBZMFeg
VaBThlFyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FO
TU9CSUxFL3NzbzUyTkY3RU5sOVdsSGc2aS1mc2J4QXpaQS5jcmwwYAYIKwYBBQUH
AQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtp
L1RXTklDQ0Evc3NvNTJORjdFTmw5V2xIZzZpLWZzYnhBelpBLmNlcjAOBgNVHQ8B
Af8EBAMCB4AwgaIGCCsGAQUFBwELBIGVMIGSMF0GCCsGAQUFBzALhlFyc3luYzov
L3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FOTU9CSUxFL3ZlTVhz
VWZXUDlYN3BQcm9fM0NBT3g0NXl2Yy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8v
cnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAO
MAwEAgABMAYDBAIr8GwwDQYJKoZIhvcNAQELBQADggEBAEm1Q7BfyNaeYSduZfj6
lL5HVDSuGBzWYkj7fWAW4B1HSBZs4Q0hVUbXg+ZDnBXxHNCEYqUNfKefN9bcQsmW
ZomqdqQ1t/INoiZjkT34hLLEALj3l5H7NTVw21+QTA+iWhfIL49CtlptyGDmt4uW
AmN3SOaj0bE/9QVrWkiOWALWrywV+ZDe741oFxasg0eDFQ/1Yvh/Y3OUtlFhluiu
p//ey7p10add4XWOsZVSWsmoMY1m1uQhjlKUpRoi1v4HmiaCyd2UZrTVJGJJZeyF
LelXZ6Q0meJgAaTY90xn4bG1/I564+ur1ic+ETjS3g32rAzCxYsMj4WUZkZgIGI9
yMk=
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:16 2024 by rpki-client on console-ams.rpki-client.org