Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7Nvmr_r1l--FK4lj6zaoyC66ZDI.roa
File:                     7Nvmr_r1l--FK4lj6zaoyC66ZDI.roa (raw, json)
Hash identifier:          /jgjgdWlNU6/09dsGVCaRZuPCOULX1WkodQQ+OuCJK8=
Subject key identifier:   EC:DB:E6:AF:FA:F5:97:EF:85:2B:89:63:EB:36:A8:C8:2E:BA:64:32
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1DA8
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7Nvmr_r1l--FK4lj6zaoyC66ZDI.roa
Signing time:             Fri 01 Sep 2023 10:15:07 +0000
ROA not before:           Fri 01 Sep 2023 10:15:07 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     24164
IP address blocks:        122.254.0.0/18 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7592 (0x1da8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep  1 10:15:07 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=ECDBE6AFFAF597EF852B8963EB36A8C82EBA6432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:52:d1:f0:d0:d4:07:56:9e:ee:f4:9f:d2:0b:
                    e8:88:60:3b:fb:c2:9a:a4:23:9a:89:0b:bf:0a:d7:
                    c6:5c:97:b2:4a:48:cb:3f:b4:03:43:45:20:1e:55:
                    6d:f7:00:73:ad:38:2a:e0:8d:8d:42:58:f3:dd:2f:
                    b3:b8:e0:92:f0:4a:8e:db:60:fb:32:42:25:d8:af:
                    95:96:1a:20:ee:95:9c:3f:8f:cd:16:76:e4:7d:4c:
                    d6:5c:74:07:fe:0e:3d:8b:e4:46:24:46:83:27:46:
                    db:0d:ca:5d:14:5c:c2:b5:f5:7b:b8:6b:b7:87:ca:
                    04:63:00:93:6a:ea:7c:ee:a7:48:a5:08:4f:44:01:
                    75:63:90:b4:56:b3:43:5d:a8:9d:18:11:f5:26:84:
                    9b:c8:30:ca:8a:14:ef:e3:6c:47:54:7c:c5:e1:84:
                    cd:88:b3:28:76:bd:72:06:eb:41:72:4c:aa:10:09:
                    1b:e0:5f:9c:00:8f:4d:b2:96:c0:a4:82:03:ac:87:
                    1e:fa:71:49:84:1d:7d:fd:0a:2c:6b:33:3c:82:59:
                    2c:8e:f8:9d:a7:d7:e3:76:0b:53:7e:23:6b:3b:5a:
                    c8:27:60:12:a4:cf:da:19:a9:d6:99:d0:d5:45:f1:
                    64:9e:e6:3a:f3:f8:14:d0:14:4d:17:b1:57:f1:a2:
                    68:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:DB:E6:AF:FA:F5:97:EF:85:2B:89:63:EB:36:A8:C8:2E:BA:64:32
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7Nvmr_r1l--FK4lj6zaoyC66ZDI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.254.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         1b:42:8f:67:e5:32:a8:11:dd:f9:63:3e:3c:a2:73:53:ce:b6:
         97:98:9a:07:da:f5:a7:23:a3:63:c3:c6:ab:34:10:a8:ee:42:
         06:05:50:d2:e5:81:1f:34:de:18:2d:cc:b8:85:06:fc:5b:9e:
         81:1c:c8:dc:e4:f3:1e:e2:e4:33:36:99:93:69:2b:de:69:c3:
         13:f2:27:30:0f:82:39:2d:dd:c8:ec:a6:05:5e:ee:7d:62:b3:
         42:f5:4c:e1:7c:04:3e:dc:92:38:02:c3:e0:ec:20:45:f3:aa:
         42:ad:57:af:40:cc:49:04:e2:ea:7a:27:ad:6f:1f:8b:dc:c5:
         68:57:1b:cf:6d:d1:27:69:7e:af:fe:17:b3:db:56:21:e7:05:
         01:54:8d:ce:78:69:a7:91:98:2e:3b:f1:ca:c7:fb:a9:72:bf:
         37:91:eb:ff:29:df:7d:dc:f3:b7:5d:b0:d7:88:b6:64:34:2f:
         58:07:72:5a:34:2f:8d:fd:d6:07:b1:3a:d0:21:98:40:d5:d7:
         47:39:5b:ea:c9:02:b4:42:e6:07:8b:d7:3b:ed:9e:28:29:09:
         c2:b0:b0:a4:20:5b:4d:2d:93:fd:ec:7d:bb:46:d6:9d:44:28:
         63:5f:a9:5b:2f:03:7d:35:5b:fd:07:c6:f8:24:00:6b:b1:c7:
         93:9b:e1:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:27 2024 by rpki-client on console-fra.rpki-client.org