Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TNET/RN5TEpeZhs2S0AKC_H7rtjVVoqU.roa
File:                     RN5TEpeZhs2S0AKC_H7rtjVVoqU.roa (raw, json)
Hash identifier:          NHu7Yuji9sBJEYg38qBsl0/UA0WQNiBkJZ8ZmZTDeJo=
Subject key identifier:   44:DE:53:12:97:99:86:CD:92:D0:02:82:FC:7E:EB:B6:35:55:A2:A5
Certificate issuer:       /CN=9FE26AE5E0DA56EC49EC9986B9C894D5B898A153
Certificate serial:       088A
Authority key identifier: 9F:E2:6A:E5:E0:DA:56:EC:49:EC:99:86:B9:C8:94:D5:B8:98:A1:53
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/n-Jq5eDaVuxJ7JmGuciU1biYoVM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TNET/RN5TEpeZhs2S0AKC_H7rtjVVoqU.roa
Signing time:             Wed 18 Nov 2020 07:13:54 +0000
ROA not before:           Wed 18 Nov 2020 07:13:54 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38851
IP address blocks:        103.46.190.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2186 (0x88a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FE26AE5E0DA56EC49EC9986B9C894D5B898A153
        Validity
            Not Before: Nov 18 07:13:54 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=44DE5312979986CD92D00282FC7EEBB63555A2A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0c:c9:c0:0e:64:47:ab:b1:92:1f:07:10:d2:
                    2d:b0:32:9e:ca:81:a6:77:ee:72:2f:96:dd:3c:1b:
                    d9:b8:35:5d:04:43:d1:dc:3d:b1:91:d9:99:d7:b3:
                    a1:51:8f:a4:66:99:35:0f:8b:ba:61:fa:7b:ba:98:
                    30:cc:24:0e:a3:79:de:77:af:be:e7:75:25:14:f7:
                    6e:af:16:bd:8b:ef:94:a1:0c:0b:7f:41:5d:01:65:
                    b8:5e:01:2a:ca:87:1a:05:cf:c5:c1:58:79:7c:5b:
                    69:2f:32:81:07:b5:1e:5d:db:37:07:80:75:6c:10:
                    92:0c:b8:5c:e2:c2:26:86:49:ce:12:93:b4:7e:d1:
                    3b:b1:f7:8e:22:f0:90:55:43:5c:38:83:4a:41:70:
                    f4:32:cc:1a:11:df:fd:c4:43:5d:a0:b1:1c:f8:14:
                    0a:e5:2f:e1:7d:b0:34:36:c7:d7:29:b1:6e:ea:12:
                    d1:14:ba:1c:b5:5e:6e:27:c4:f8:53:20:e1:1c:e3:
                    48:b9:38:73:9f:50:10:a1:ad:7e:9e:f2:8b:82:47:
                    6f:fb:60:c1:d9:e4:c4:1a:09:02:f5:d1:5f:85:de:
                    10:91:0d:27:3d:f9:ed:45:96:ba:27:64:8c:fb:31:
                    d1:7f:10:2e:b3:7f:01:43:88:04:16:23:46:ff:59:
                    67:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:DE:53:12:97:99:86:CD:92:D0:02:82:FC:7E:EB:B6:35:55:A2:A5
            X509v3 Authority Key Identifier:
                keyid:9F:E2:6A:E5:E0:DA:56:EC:49:EC:99:86:B9:C8:94:D5:B8:98:A1:53

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TNET/n-Jq5eDaVuxJ7JmGuciU1biYoVM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/n-Jq5eDaVuxJ7JmGuciU1biYoVM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TNET/RN5TEpeZhs2S0AKC_H7rtjVVoqU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.46.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8e:41:45:4e:e9:41:d3:38:dd:c8:81:3b:3c:a6:70:2d:ac:6a:
         8a:12:50:84:43:d3:50:00:b8:99:ee:8c:0f:c4:da:09:4d:bb:
         0f:02:6a:40:b1:51:89:e5:26:34:b6:22:fc:ad:06:97:25:ad:
         a6:57:68:19:f5:de:74:28:bf:c7:d8:9e:14:aa:95:97:f2:c9:
         ec:35:59:27:c1:83:14:f6:6b:ff:45:ed:c3:1c:e7:bd:eb:39:
         84:94:5f:13:c2:a0:28:58:92:16:2e:b5:d8:4c:32:07:91:15:
         d2:0d:00:e2:bf:44:32:ba:58:db:e5:39:a3:7c:fb:ed:60:d8:
         2f:1e:c0:51:61:00:9c:2c:48:b1:ec:fb:23:58:fe:da:d4:f0:
         fe:88:65:09:36:f7:f1:ea:d6:11:8a:5f:b0:c9:2a:6c:12:a5:
         68:83:8a:99:c1:07:36:93:2c:1a:31:4e:5b:f0:ae:c0:fe:56:
         a3:03:58:62:60:d0:d5:4f:a0:7a:74:29:12:bf:d5:2d:6a:c3:
         ae:0f:a5:6c:e9:46:42:37:20:f8:23:fe:54:74:12:a3:97:6b:
         d6:15:cb:22:97:35:9a:54:bb:6a:f6:73:48:1a:96:55:2a:2b:
         19:67:ac:58:b2:f1:d4:8e:8a:b0:f3:be:f5:e9:69:62:e4:fe:
         b9:13:4b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:45 2024 by rpki-client on console-fra.rpki-client.org