Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/8ToXUxTBAUu4HXMwxKc0CIlRbQI.roa
File:                     8ToXUxTBAUu4HXMwxKc0CIlRbQI.roa (raw, json)
Hash identifier:          LnY0rYMx0qBZM0AjMDs6wqFENO6kBhBtgUp09TrsHHg=
Subject key identifier:   F1:3A:17:53:14:C1:01:4B:B8:1D:73:30:C4:A7:34:08:89:51:6D:02
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1D5B
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/8ToXUxTBAUu4HXMwxKc0CIlRbQI.roa
Signing time:             Fri 01 Sep 2023 10:14:42 +0000
ROA not before:           Fri 01 Sep 2023 10:14:42 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     24164
IP address blocks:        49.158.96.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7515 (0x1d5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep  1 10:14:42 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=F13A175314C1014BB81D7330C4A7340889516D02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7a:3b:80:e5:7a:52:a4:8c:d1:6f:9f:7f:5a:
                    d5:03:2e:4f:75:e2:7c:ad:42:ec:c4:80:19:40:51:
                    d0:ea:5b:c8:9e:c1:4a:d7:47:a1:61:e2:51:49:4a:
                    c0:e1:e4:c8:df:42:03:3d:49:a3:ed:65:c3:81:c8:
                    9e:cf:c0:64:61:ed:97:77:03:e7:00:b3:70:e1:86:
                    0c:6d:10:24:f2:3e:f3:44:a6:d3:77:21:6d:74:fd:
                    cd:f2:3b:78:08:2e:1b:10:b6:20:5c:58:d0:43:81:
                    a2:40:42:62:c7:58:15:95:d4:7f:fc:02:b4:68:4b:
                    7c:af:0a:74:ea:dd:a5:28:6f:f4:23:48:17:64:40:
                    68:18:b2:0d:60:6d:5f:13:62:31:3c:18:c7:94:b2:
                    f2:1d:d3:cd:66:78:20:f5:bc:c1:1e:ee:b2:42:b6:
                    12:48:e0:0c:42:1b:d0:50:40:00:83:c3:68:36:4a:
                    07:0e:99:fe:10:21:7a:99:f6:26:6b:17:c4:87:85:
                    57:2e:27:a4:e8:71:f1:a4:42:b5:2f:d9:f1:6e:8e:
                    aa:8e:c1:40:aa:bf:6b:eb:4e:d0:e9:bf:39:2a:9c:
                    4d:b3:98:3d:e5:19:94:6e:b5:08:79:b1:0d:41:78:
                    28:0a:99:6c:c5:e4:34:29:83:4a:fa:e7:2f:ec:28:
                    a5:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:3A:17:53:14:C1:01:4B:B8:1D:73:30:C4:A7:34:08:89:51:6D:02
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/8ToXUxTBAUu4HXMwxKc0CIlRbQI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.158.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         18:ff:7d:f2:20:e3:ea:d9:e8:a7:73:56:df:c2:c4:6a:af:25:
         a4:1d:e4:6f:ba:94:40:12:c7:31:6f:0e:0e:18:d4:35:60:7c:
         fd:ef:31:0a:ba:54:43:a9:4d:d5:d8:ad:c8:b1:e0:12:52:0c:
         41:e9:de:00:e9:75:ab:7a:3d:8f:a5:c6:c6:39:af:60:04:c9:
         13:50:47:5f:b7:58:2b:8e:16:37:d0:f9:4b:19:42:92:2f:d7:
         96:c6:30:db:eb:10:6f:5b:cd:a0:92:52:9c:c6:1d:30:cb:ec:
         ed:1e:48:77:f9:f8:c3:89:53:aa:93:93:c2:a1:b6:ff:3d:3a:
         28:23:f1:af:98:af:3c:27:20:50:b9:56:a1:cc:a3:8d:21:be:
         40:4a:24:c3:dd:ad:fd:3f:f1:c8:ba:57:83:19:d0:76:0a:81:
         4e:e5:1b:42:ba:e9:9a:c0:0e:ce:e6:cc:09:2e:eb:18:bc:c4:
         af:1d:d8:e9:24:50:ac:d3:f4:bf:54:e3:1d:51:5d:37:61:5d:
         8f:ba:b1:87:a7:7a:e9:f5:4d:de:bf:15:bd:7f:1a:4b:50:bd:
         69:23:c8:9a:b4:eb:6c:b9:c5:ee:53:01:9a:af:46:11:94:0d:
         fa:94:d7:46:5e:16:e8:9c:ee:9d:6b:24:4d:4e:3f:98:f7:7e:
         47:70:59:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:27 2024 by rpki-client on console-fra.rpki-client.org