Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/5HMLnjYes7zMiq6wRoFnoDODz4I.roa
File:                     5HMLnjYes7zMiq6wRoFnoDODz4I.roa (raw, json)
Hash identifier:          JpsFPFESTuZVZIxLvUZ4h2n4bU5ou+c0tT3aoU4A4j0=
Subject key identifier:   E4:73:0B:9E:36:1E:B3:BC:CC:8A:AE:B0:46:81:67:A0:33:83:CF:82
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1EB9
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/5HMLnjYes7zMiq6wRoFnoDODz4I.roa
Signing time:             Fri 01 Sep 2023 10:16:23 +0000
ROA not before:           Fri 01 Sep 2023 10:16:23 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     24164
IP address blocks:        180.218.144.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7865 (0x1eb9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep  1 10:16:23 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=E4730B9E361EB3BCCC8AAEB0468167A03383CF82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:1b:75:31:a6:c1:69:8c:10:a6:b5:d4:fc:e4:
                    6f:96:8a:dd:2d:12:27:ea:0b:ee:ba:ce:86:f8:68:
                    08:48:ff:f6:55:03:8b:83:0a:80:8a:af:88:ff:59:
                    b3:13:af:53:b1:16:5f:24:92:53:c1:83:9f:77:cd:
                    56:73:9d:29:78:83:e5:c0:0b:89:a1:e2:11:f6:57:
                    23:4b:45:a4:34:1c:4f:b2:92:66:7f:99:e7:90:a9:
                    98:15:48:c3:c3:d7:73:79:b7:68:a3:c3:ed:c0:4c:
                    3c:cc:40:d3:1b:fa:92:9c:73:63:0a:a2:21:6e:fd:
                    40:b1:03:b5:1b:b2:c1:96:bb:55:05:7e:fb:a7:33:
                    8f:6d:87:bb:62:f2:76:a7:63:77:49:bd:07:7a:3a:
                    de:9e:29:17:6d:9d:5b:ce:4d:c2:fc:52:49:8b:fa:
                    97:b4:12:03:49:89:77:c0:54:4b:88:be:6f:42:af:
                    1f:e7:02:84:1d:9c:51:34:b2:ed:6e:fe:00:25:5e:
                    44:70:46:70:ba:51:59:98:39:85:ff:7e:dc:77:2d:
                    f2:b5:c9:09:af:a9:b2:ff:05:b5:87:59:40:36:ac:
                    a4:19:85:99:c6:ce:29:b5:c7:3f:f8:f6:c3:90:0f:
                    3b:11:07:6a:3a:da:9e:8d:13:92:0d:d8:ee:54:e7:
                    92:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:73:0B:9E:36:1E:B3:BC:CC:8A:AE:B0:46:81:67:A0:33:83:CF:82
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/5HMLnjYes7zMiq6wRoFnoDODz4I.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         88:70:55:b5:99:4a:7a:90:80:82:96:8d:1a:15:89:db:c7:d4:
         b7:a0:5a:1e:62:4f:bd:a4:5d:e0:5e:bc:1f:71:ad:d7:90:69:
         5f:4d:be:66:7f:83:8f:30:c9:c0:ee:0b:6b:d8:af:8b:7d:31:
         16:d3:51:be:05:57:b5:bd:43:01:c9:66:4b:49:78:4e:17:d1:
         53:2c:b6:8f:9e:4e:fd:aa:ea:ce:54:8c:e9:b8:d4:c0:c2:75:
         2c:32:0f:85:2b:19:90:6e:8d:11:15:80:37:50:b0:2b:90:52:
         89:77:f3:6b:65:20:4b:8e:57:05:d9:37:5c:dd:ec:48:ba:8c:
         94:64:49:89:1d:3a:dd:43:6d:d6:46:5c:94:44:41:ee:14:6c:
         bb:05:de:c7:f6:d3:90:37:0c:15:e6:2d:2a:5e:ab:15:68:a8:
         07:32:da:d1:5d:4a:60:28:6f:34:dc:89:b2:81:77:96:c8:ce:
         bf:94:c4:22:79:37:73:aa:df:3c:e1:6d:c6:7b:db:ba:a9:ae:
         18:7e:5e:5f:9f:2b:51:4c:09:ac:3c:0a:6c:09:9d:27:07:fa:
         56:39:99:a0:2b:58:10:71:45:7e:03:d5:a8:ff:1f:a5:1c:a3:
         31:1a:dc:74:21:8e:cc:95:89:ad:e1:5b:80:73:8d:56:52:ac:
         1c:70:ff:b5
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHrkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx
MDE2MjNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEU0NzMwQjlFMzYxRUIz
QkNDQzhBQUVCMDQ2ODE2N0EwMzM4M0NGODIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCoG3UxpsFpjBCmtdT85G+Wit0tEifqC+66zob4aAhI//ZVA4uD
CoCKr4j/WbMTr1OxFl8kklPBg593zVZznSl4g+XAC4mh4hH2VyNLRaQ0HE+ykmZ/
meeQqZgVSMPD13N5t2ijw+3ATDzMQNMb+pKcc2MKoiFu/UCxA7UbssGWu1UFfvun
M49th7ti8nanY3dJvQd6Ot6eKRdtnVvOTcL8UkmL+pe0EgNJiXfAVEuIvm9Crx/n
AoQdnFE0su1u/gAlXkRwRnC6UVmYOYX/ftx3LfK1yQmvqbL/BbWHWUA2rKQZhZnG
zim1xz/49sOQDzsRB2o62p6NE5IN2O5U55LhAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU5HMLnjYes7zMiq6wRoFnoDODz4IwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzVITUxualllczd6TWlxNndS
b0Zub0RPRHo0SS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAS0
2pAwDQYJKoZIhvcNAQELBQADggEBAIhwVbWZSnqQgIKWjRoVidvH1LegWh5iT72k
XeBevB9xrdeQaV9NvmZ/g48wycDuC2vYr4t9MRbTUb4FV7W9QwHJZktJeE4X0VMs
to+eTv2q6s5UjOm41MDCdSwyD4UrGZBujREVgDdQsCuQUol382tlIEuOVwXZN1zd
7Ei6jJRkSYkdOt1DbdZGXJREQe4UbLsF3sf205A3DBXmLSpeqxVoqAcy2tFdSmAo
bzTcibKBd5bIzr+UxCJ5N3Oq3zzhbcZ727qprhh+Xl+fK1FMCaw8CmwJnScH+lY5
maArWBBxRX4D1aj/H6UcozEa3HQhjsyVia3hW4BzjVZSrBxw/7U=
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:27 2024 by rpki-client on console-fra.rpki-client.org