Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNOC/e2IFEcO4D2K5IDPmml97mqxfJp8.roa
File:                     e2IFEcO4D2K5IDPmml97mqxfJp8.roa (raw, json)
Hash identifier:          yYfkhINEpLyenQEnv7XxUrlStvKV2u+4XHgzxkNdzq0=
Subject key identifier:   7B:62:05:11:C3:B8:0F:62:B9:20:33:E6:9A:5F:7B:9A:AC:5F:26:9F
Certificate issuer:       /CN=23D5E0B3520DAC4269AB4A425B23D225CB264A88
Certificate serial:       0DB1
Authority key identifier: 23:D5:E0:B3:52:0D:AC:42:69:AB:4A:42:5B:23:D2:25:CB:26:4A:88
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/I9Xgs1INrEJpq0pCWyPSJcsmSog.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNOC/e2IFEcO4D2K5IDPmml97mqxfJp8.roa
Signing time:             Tue 29 Sep 2020 09:59:04 +0000
ROA not before:           Tue 29 Sep 2020 09:59:04 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     131149
IP address blocks:        2403:ac40::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3505 (0xdb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23D5E0B3520DAC4269AB4A425B23D225CB264A88
        Validity
            Not Before: Sep 29 09:59:04 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=7B620511C3B80F62B92033E69A5F7B9AAC5F269F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c2:d9:9a:fa:20:c8:aa:70:1d:88:72:2f:84:
                    31:32:e9:82:06:0d:57:c9:5d:2c:48:12:48:07:d1:
                    5b:ad:22:b5:d3:9b:83:91:c3:e3:67:3a:72:cf:aa:
                    b0:87:34:97:5c:39:21:ff:eb:2c:44:07:63:08:31:
                    ec:5d:b1:89:22:b2:05:70:88:6d:e4:fe:17:94:30:
                    7e:9a:ef:45:33:4c:13:3e:49:4a:fe:31:99:9f:65:
                    46:d0:10:a0:1e:06:52:0a:8e:dc:2d:32:ec:22:63:
                    ab:d3:99:59:f9:26:45:27:01:50:3d:47:b6:25:51:
                    9b:7c:13:ed:0b:78:45:46:fa:7e:b9:88:4f:0c:b8:
                    8a:81:75:a0:11:37:80:b7:70:f8:45:f7:99:d1:c2:
                    42:47:09:5b:ac:5d:fa:51:5b:5b:a7:3d:d4:9d:4f:
                    0d:ab:8b:5b:22:0b:6e:83:e0:97:7f:3f:ae:6a:03:
                    24:6f:ad:12:be:5a:49:6a:bf:84:65:f7:a7:06:f6:
                    82:5a:c8:ef:48:35:e1:3a:11:f9:c9:a9:a5:3a:bb:
                    e8:9d:ee:92:cd:72:77:fd:34:20:bb:62:a0:28:ae:
                    1a:b9:2f:e4:e5:04:5e:00:c9:59:4f:35:b4:9e:f1:
                    4d:f8:26:c4:b0:92:8e:b3:48:a7:8e:eb:34:f7:3a:
                    9f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:62:05:11:C3:B8:0F:62:B9:20:33:E6:9A:5F:7B:9A:AC:5F:26:9F
            X509v3 Authority Key Identifier:
                keyid:23:D5:E0:B3:52:0D:AC:42:69:AB:4A:42:5B:23:D2:25:CB:26:4A:88

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNOC/I9Xgs1INrEJpq0pCWyPSJcsmSog.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/I9Xgs1INrEJpq0pCWyPSJcsmSog.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNOC/e2IFEcO4D2K5IDPmml97mqxfJp8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:ac40::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:48:69:59:66:cb:d1:e8:4e:fc:a6:0c:39:24:e1:02:78:09:
         96:16:f8:59:74:b3:ae:b2:42:e8:3a:5e:d3:11:20:dd:a8:02:
         64:69:fe:8c:48:b7:7f:9b:0d:95:1e:a7:6a:24:4b:88:f7:c8:
         c9:d1:47:3f:44:c2:dd:f2:dd:31:8e:25:09:6a:b2:13:5f:e4:
         5a:66:73:40:d4:36:63:d7:89:3b:17:c0:40:35:dd:74:d0:4d:
         f5:e4:af:b7:5f:b8:ca:22:49:ff:ce:fe:23:e3:c1:88:77:23:
         af:37:f4:62:e9:c0:9c:64:b6:9f:bb:f2:dd:ab:90:c3:59:6d:
         2b:e4:f5:36:c7:af:8f:74:43:a0:f4:97:e9:27:33:c9:3a:c3:
         65:f8:06:f1:fc:58:06:1f:51:e6:c5:dd:dc:a4:b3:61:5c:86:
         6e:9c:61:9f:a3:1d:54:3c:83:1d:ed:fb:b6:68:5e:a9:f2:60:
         38:51:1a:d7:8d:2c:09:f9:eb:64:df:c1:62:70:64:c6:76:94:
         2c:f6:e9:1e:f8:38:67:c5:1d:e4:36:e6:42:36:86:9c:5b:ed:
         48:f2:ca:db:62:18:73:24:0e:9e:7d:2f:0c:14:5c:76:df:a0:
         d0:b1:ae:87:c9:4c:99:dd:1f:5d:f6:c2:5e:a6:7e:53:63:6d:
         cd:e2:90:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:01 2024 by rpki-client on console-fra.rpki-client.org