Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/41A5OipweduuoNa6EZttHH7Z7Rs.roa
File:                     41A5OipweduuoNa6EZttHH7Z7Rs.roa (raw, json)
Hash identifier:          Ioy1Uf/t9cb76niDyQubWKr8pZpFaHIw4c8kh0ORSOg=
Subject key identifier:   E3:50:39:3A:2A:70:79:DB:AE:A0:D6:BA:11:9B:6D:1C:7E:D9:ED:1B
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1E43
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/41A5OipweduuoNa6EZttHH7Z7Rs.roa
Signing time:             Fri 01 Sep 2023 10:15:50 +0000
ROA not before:           Fri 01 Sep 2023 10:15:50 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     24164
IP address blocks:        61.60.216.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7747 (0x1e43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep  1 10:15:50 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=E350393A2A7079DBAEA0D6BA119B6D1C7ED9ED1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d2:36:85:61:3b:2f:24:52:80:e2:95:3f:20:
                    89:84:00:c4:1c:08:41:f5:16:c2:de:ec:23:64:cb:
                    32:74:de:b0:4a:87:63:dd:73:68:36:01:84:2c:5f:
                    b6:60:3e:2d:c8:17:e2:01:dd:79:01:79:a2:62:39:
                    85:fd:aa:65:84:a5:d7:68:c8:88:f5:89:50:1c:a1:
                    24:a2:cc:59:db:88:da:16:c7:d4:b9:01:a7:a5:43:
                    d7:f9:95:91:b1:f3:ae:9c:a3:58:da:e3:cd:fa:a0:
                    bb:7b:f8:c8:52:86:79:92:cb:b8:0b:60:09:f5:2d:
                    48:87:01:02:d6:8c:96:60:4c:28:29:5f:fe:16:81:
                    47:a5:6b:3d:5d:f7:c4:c0:00:bc:bf:ad:f2:b0:66:
                    d1:81:af:d6:9e:07:45:f6:ac:d4:6d:8d:d4:bd:26:
                    a8:65:13:c2:13:13:1a:ff:b0:95:f8:7f:a5:fd:d3:
                    da:01:2a:f5:f2:2b:15:9c:e4:aa:d9:e2:5a:24:29:
                    dc:70:9e:20:e1:ca:d8:5a:50:e4:2b:58:2a:4f:14:
                    e7:e2:3b:64:cf:71:c2:38:08:b7:f5:f5:7c:0e:3e:
                    60:05:89:b2:49:9e:93:8e:54:67:18:5b:2b:30:2d:
                    5e:dc:3f:05:b8:22:0c:37:18:85:80:8b:4d:91:c7:
                    89:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:50:39:3A:2A:70:79:DB:AE:A0:D6:BA:11:9B:6D:1C:7E:D9:ED:1B
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/41A5OipweduuoNa6EZttHH7Z7Rs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.60.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2d:4c:ee:c0:b3:3b:a9:c0:dc:ae:f5:18:53:9b:0d:95:a9:d9:
         70:a8:a0:1f:94:2b:77:75:9b:75:d7:67:58:be:cf:8e:f8:ab:
         bb:78:1d:ee:85:8f:fc:8c:99:c5:39:94:b0:2a:fd:45:16:99:
         d7:8e:8a:ed:d1:d5:2d:6e:ed:ca:60:ec:ec:ed:62:3e:71:f1:
         ab:37:80:ae:c6:72:fb:04:df:b6:ff:1f:33:80:ba:5f:f6:71:
         7d:f0:3a:47:53:6c:47:a4:21:2b:ba:1f:de:82:2b:ce:c3:fc:
         38:1e:bc:f7:f2:6a:88:6e:9c:2e:d2:5e:7f:c4:05:34:47:35:
         9f:4f:3f:72:39:5d:ea:6a:16:cb:09:49:e2:45:e1:a4:16:00:
         0a:0a:f5:6e:c8:c8:44:96:20:6a:2b:4a:d9:e2:4a:da:ac:53:
         d1:a5:01:25:13:5d:94:97:84:db:dc:c2:c1:c1:7e:dc:b3:22:
         22:d8:82:5f:3c:36:e5:12:1d:ee:ec:18:a2:cf:2d:e6:62:5d:
         8c:42:ed:1a:a4:5f:71:9c:c8:8b:a7:ab:1f:e3:42:f1:7a:49:
         52:90:d3:dd:64:70:8c:1e:f8:4e:7d:11:3a:de:07:13:6a:62:
         4b:b0:62:40:71:df:f8:35:b8:f7:cf:d3:13:b0:e4:c4:1b:f3:
         9b:ef:89:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:27 2024 by rpki-client on console-fra.rpki-client.org