Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWD-COM-TW/_t41W6QPP_oPZzJE5YTg8RZRJUQ.roa
File:                     _t41W6QPP_oPZzJE5YTg8RZRJUQ.roa (raw, json)
Hash identifier:          cwfdXq6DQvklV+7X9172BuXDuVHM02IM2i+kIcUKCWc=
Subject key identifier:   FE:DE:35:5B:A4:0F:3F:FA:0F:67:32:44:E5:84:E0:F1:16:51:25:44
Certificate issuer:       /CN=C28F57324E766BC5E9FA99C4D7AD4C40D3958FC6
Certificate serial:       0AE5
Authority key identifier: C2:8F:57:32:4E:76:6B:C5:E9:FA:99:C4:D7:AD:4C:40:D3:95:8F:C6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/wo9XMk52a8Xp-pnE161MQNOVj8Y.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TWD-COM-TW/_t41W6QPP_oPZzJE5YTg8RZRJUQ.roa
Signing time:             Fri 01 Sep 2023 10:11:10 +0000
ROA not before:           Fri 01 Sep 2023 10:11:10 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     133955
IP address blocks:        223.165.10.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2789 (0xae5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C28F57324E766BC5E9FA99C4D7AD4C40D3958FC6
        Validity
            Not Before: Sep  1 10:11:10 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=FEDE355BA40F3FFA0F673244E584E0F116512544
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:be:54:0f:2b:d1:a7:bf:25:a5:93:c5:eb:98:
                    0e:fe:49:9a:ee:bb:33:eb:76:7d:cc:56:9c:1f:c5:
                    9b:7a:8c:d2:21:f7:f7:b8:55:fd:ee:02:31:4c:1b:
                    7a:41:06:55:83:b4:d1:8b:2d:84:04:f4:80:65:c8:
                    4b:cd:51:08:81:cf:78:f4:7b:7b:92:78:28:5b:6a:
                    52:95:f6:59:ff:46:23:4c:fa:39:73:48:4c:dc:fa:
                    a8:1b:68:f8:7a:f4:1f:0e:a9:5e:45:63:f1:66:09:
                    63:8a:f6:20:95:0a:2a:9b:e9:ad:57:3a:9d:3d:b5:
                    6d:05:f9:b6:8f:88:65:4a:88:10:f7:2b:30:48:ac:
                    37:28:88:a2:78:df:7f:34:1e:0b:a4:c3:4f:db:38:
                    78:a6:1f:f3:02:64:e6:53:db:6c:54:66:57:9e:7a:
                    e2:a3:14:70:ca:88:5b:00:97:80:f6:26:7c:fa:81:
                    33:a4:41:ed:9e:79:24:43:0f:49:06:99:55:59:06:
                    1a:a7:e7:a1:87:6c:fc:65:c1:bb:4c:0f:49:d0:e6:
                    9d:a5:5a:c8:b0:60:46:6b:3b:7e:c4:9c:11:11:fd:
                    70:7d:38:dc:1b:37:2f:d3:81:43:5c:0d:a4:f0:7b:
                    96:ce:08:4c:48:c0:3e:dd:e7:8f:08:11:50:96:0a:
                    eb:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:DE:35:5B:A4:0F:3F:FA:0F:67:32:44:E5:84:E0:F1:16:51:25:44
            X509v3 Authority Key Identifier:
                keyid:C2:8F:57:32:4E:76:6B:C5:E9:FA:99:C4:D7:AD:4C:40:D3:95:8F:C6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWD-COM-TW/wo9XMk52a8Xp-pnE161MQNOVj8Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wo9XMk52a8Xp-pnE161MQNOVj8Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWD-COM-TW/_t41W6QPP_oPZzJE5YTg8RZRJUQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  223.165.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:5b:88:01:30:2a:a9:ea:79:f5:bf:52:01:4b:55:ff:6c:06:
         ce:4b:24:e5:39:38:10:e9:5c:7e:bd:6b:15:08:4c:31:64:f0:
         35:dc:ab:e2:f8:45:78:70:6e:d7:c0:e2:e9:95:ef:8c:16:41:
         46:6e:cd:74:2b:25:dd:f1:3b:f3:b7:0c:6d:b1:ff:e5:03:2c:
         22:f3:43:86:60:d5:43:ea:11:f6:9c:f4:6b:10:55:85:69:2f:
         69:0e:55:fd:91:f1:f6:ec:58:92:78:00:98:e2:a2:4f:f7:8b:
         1f:97:b0:bb:a3:48:e9:64:54:1f:5c:28:4d:7e:09:e2:ea:30:
         0d:a3:dc:55:08:ae:9c:ab:ee:ee:c2:d8:96:d7:28:64:5a:86:
         5b:c2:a7:64:65:53:d6:16:7b:b1:16:3e:73:d8:ce:b7:1d:9a:
         97:66:60:05:5a:23:cf:f2:1d:88:ab:c3:83:e5:f4:9c:3b:56:
         30:de:80:de:0e:00:8b:2c:d0:d6:4c:f1:76:12:11:8c:ad:a6:
         26:f3:43:52:f4:a6:0b:49:d8:3b:5c:55:81:27:d1:2d:28:ee:
         ff:1d:b5:6e:74:d5:4f:2e:30:58:4c:1a:c4:3f:17:6d:75:f4:
         28:a1:23:d5:d6:c3:31:3f:e6:0e:fa:2a:35:ee:42:2a:00:5a:
         b7:63:22:51
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:27 2024 by rpki-client on console-fra.rpki-client.org