Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/5_-fqeZhXvUkfpUz81FJIDmqasE.roa
File:                     5_-fqeZhXvUkfpUz81FJIDmqasE.roa (raw, json)
Hash identifier:          D3TdCTTGTmm7HwRERoLQfkaYJKEgODX2ii+O6TbnA94=
Subject key identifier:   E7:FF:9F:A9:E6:61:5E:F5:24:7E:95:33:F3:51:49:20:39:AA:6A:C1
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       0D0F
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/5_-fqeZhXvUkfpUz81FJIDmqasE.roa
Signing time:             Fri 01 Sep 2023 09:59:31 +0000
ROA not before:           Fri 01 Sep 2023 09:59:31 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     1659
IP address blocks:        163.30.0.0/15 maxlen: 15

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3343 (0xd0f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Sep  1 09:59:31 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=E7FF9FA9E6615EF5247E9533F351492039AA6AC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a7:40:5f:6d:d9:02:b7:f5:04:a1:a9:cd:fc:
                    4b:0a:51:be:de:18:83:0a:4f:36:4e:a8:57:0d:b2:
                    c1:78:f4:da:a2:6b:7c:b6:d4:db:50:e4:99:9e:f8:
                    30:16:ce:b9:a2:d7:a9:99:e3:60:34:0f:77:be:f3:
                    5e:3d:e6:64:26:aa:53:a9:d9:7f:a4:07:05:cd:59:
                    b7:64:77:86:81:75:4a:9c:68:89:3e:e7:51:24:a3:
                    3d:6f:3d:b0:a8:6f:e0:5f:4f:89:05:68:4e:31:90:
                    2a:19:9d:b5:0d:e3:2d:ba:05:a0:68:ad:21:8b:ad:
                    be:37:25:26:3b:ab:0f:48:35:f2:b8:60:72:68:87:
                    49:4f:02:90:86:90:7d:d5:c5:39:0f:e7:2b:64:f5:
                    cd:e5:20:57:41:6d:ae:f7:86:bb:21:03:b1:01:16:
                    97:92:80:34:69:bd:82:bc:ef:37:7d:32:01:5f:ed:
                    a9:a5:52:57:1e:62:d5:bd:51:b6:b4:d1:bb:af:4e:
                    2f:5f:15:b7:22:96:92:49:9a:f5:d4:92:cf:0e:03:
                    68:9c:31:5d:4b:4b:00:0a:c9:58:1b:23:59:cf:64:
                    0d:7b:fb:cc:0e:d4:bf:f6:d2:ec:c1:d9:08:c3:88:
                    f2:56:cd:b6:12:d4:ff:71:1a:2d:5e:22:32:74:3d:
                    90:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:FF:9F:A9:E6:61:5E:F5:24:7E:95:33:F3:51:49:20:39:AA:6A:C1
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/5_-fqeZhXvUkfpUz81FJIDmqasE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.30.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         7c:1c:b9:6e:91:d1:0b:69:ad:42:7b:b4:5b:17:af:32:7e:68:
         20:0f:36:03:ee:8f:05:04:e8:f8:0a:73:b1:5b:53:49:31:2a:
         d6:63:6c:cc:03:93:36:98:6f:8f:ab:01:ad:9d:97:de:d2:de:
         8a:1c:87:e5:a0:d9:34:41:72:a8:03:7d:53:ff:87:d3:5c:42:
         46:84:8d:f2:fb:4e:90:2c:a6:f6:36:4f:ec:f2:32:55:0d:f0:
         7a:1a:89:b0:de:06:af:a4:b9:a4:fa:23:34:a1:06:5e:05:63:
         12:40:87:0e:ef:33:57:d7:f4:c0:4a:71:cb:67:91:4d:ae:7b:
         b4:29:bc:47:ca:9b:df:df:3a:f3:0c:78:ef:9c:96:5e:69:25:
         bd:d0:d1:16:bc:17:03:1e:c8:2e:cd:bb:52:02:01:77:81:6d:
         40:bf:e6:9d:f4:23:9e:4a:bc:f4:fc:f6:4b:d8:2e:de:eb:71:
         c3:d3:12:2e:4a:48:2f:6c:d8:d3:a2:93:6c:a6:72:8e:1e:16:
         a2:c4:db:7a:22:c0:c2:d2:1d:5a:20:d5:51:7a:b0:b0:ad:d3:
         f4:17:1c:15:2c:63:05:c7:5d:0e:26:fa:a9:a2:df:51:33:88:
         2b:9f:7b:ec:64:17:7d:ec:71:69:28:70:3e:d5:eb:e8:1f:d5:
         36:e1:b9:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:16 2024 by rpki-client on console-ams.rpki-client.org