Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CorJNIy3Z6ojA1A5RsFOUqba11A.roa
File:                     CorJNIy3Z6ojA1A5RsFOUqba11A.roa (raw, json)
Hash identifier:          cH0BCaOVUDwn+qULA/SMUG8na+lozFKQDQ5X/d1woJU=
Subject key identifier:   0A:8A:C9:34:8C:B7:67:AA:23:03:50:39:46:C1:4E:52:A6:DA:D7:50
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1E1E
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CorJNIy3Z6ojA1A5RsFOUqba11A.roa
Signing time:             Fri 01 Sep 2023 10:15:41 +0000
ROA not before:           Fri 01 Sep 2023 10:15:41 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     24164
IP address blocks:        49.159.64.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7710 (0x1e1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep  1 10:15:41 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=0A8AC9348CB767AA2303503946C14E52A6DAD750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:31:6b:ba:96:b9:25:a2:f6:74:d8:2c:1a:9e:
                    34:c9:a0:c5:25:f1:6a:3d:8a:17:71:9c:8c:f5:23:
                    de:3b:ca:1b:54:04:ee:e5:a8:e5:1c:00:73:a3:68:
                    1d:80:cf:d2:55:cd:19:69:d4:5c:a8:7a:a2:c6:7d:
                    8e:a3:bb:c1:1e:6f:44:f7:ac:0b:f6:ab:05:2b:07:
                    5c:1d:da:de:49:d9:75:cf:6b:ac:4e:25:79:7a:e1:
                    83:55:e8:ca:6d:fe:c5:a4:0e:5f:23:6a:20:a6:be:
                    b5:df:32:f3:29:6f:b3:7e:4a:c1:53:0d:aa:2d:2c:
                    a0:28:8d:2a:d5:1d:65:78:dc:7a:65:8b:16:d6:d6:
                    50:e3:68:04:bc:26:3c:dd:df:26:7b:d7:61:7a:19:
                    d9:e2:3b:55:2a:ba:17:db:69:92:dc:2b:a5:38:23:
                    30:ef:5c:f4:37:05:8f:6f:13:6b:a4:59:e9:f0:7d:
                    bb:b2:3b:6d:1a:38:d0:3d:45:3d:3e:58:9e:1b:38:
                    e9:6a:88:02:3b:dc:fb:f8:6e:6b:78:39:00:f4:24:
                    46:e6:9b:2b:ee:51:7f:2b:d0:0f:8e:31:e6:16:68:
                    d5:38:0a:3c:cc:c7:d8:10:ea:d8:a9:fc:15:d3:d1:
                    04:b8:dc:72:04:ba:64:e3:2c:a1:20:28:35:a8:3b:
                    bf:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:8A:C9:34:8C:B7:67:AA:23:03:50:39:46:C1:4E:52:A6:DA:D7:50
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CorJNIy3Z6ojA1A5RsFOUqba11A.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.159.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:d9:45:30:61:e1:08:0b:b5:9d:66:82:d1:8d:55:67:8f:97:
         69:19:95:61:64:3b:98:9a:af:73:f1:28:c4:d8:0e:e2:cf:05:
         9c:ef:14:b1:aa:b6:88:cb:33:0f:d4:ee:ca:61:c0:1c:a3:fa:
         f7:31:a3:11:e5:1b:a1:2a:f2:26:4c:d6:e6:f6:65:6d:51:2b:
         dc:de:b3:85:85:fc:6d:50:f2:95:35:f2:3c:2d:e1:3e:14:f5:
         56:f3:b4:18:35:7b:81:bb:8e:0e:88:24:0a:2e:be:a9:f9:15:
         74:67:07:c4:2c:e3:1a:ce:4a:48:5e:8a:b3:a4:b5:3c:18:df:
         b8:db:6d:12:91:ea:b7:d0:3e:a8:90:5f:90:94:5c:ae:0d:46:
         9a:18:46:e4:67:2d:47:4d:4f:33:17:4e:86:db:3a:c1:a8:63:
         f3:6d:84:ed:02:80:06:eb:2d:09:72:70:69:0a:52:50:f0:65:
         08:7f:86:64:f6:31:c3:22:0d:1d:fd:33:80:c0:30:be:d1:5d:
         cc:e1:bd:fc:64:95:e2:37:86:fc:17:06:50:b6:96:52:83:45:
         e3:4e:f4:49:f1:26:d2:99:02:70:68:c5:55:b2:92:9c:f4:8b:
         93:5e:05:11:77:0c:82:53:5f:b8:c5:d3:e3:24:c2:73:3a:2c:
         e1:b0:b1:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:27 2024 by rpki-client on console-fra.rpki-client.org