Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/MwYnlM7M0VodFAuNGWa-6kb4vXU.roa
File:                     MwYnlM7M0VodFAuNGWa-6kb4vXU.roa (raw, json)
Hash identifier:          xEQUQtxfwKEwXpkmxr3G7PLu0RP8Ox4PueYOH1C0/os=
Subject key identifier:   33:06:27:94:CE:CC:D1:5A:1D:14:0B:8D:19:66:BE:EA:46:F8:BD:75
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1D8E
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/MwYnlM7M0VodFAuNGWa-6kb4vXU.roa
Signing time:             Fri 01 Sep 2023 10:15:00 +0000
ROA not before:           Fri 01 Sep 2023 10:15:00 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     24165
IP address blocks:        180.218.112.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7566 (0x1d8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep  1 10:15:00 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=33062794CECCD15A1D140B8D1966BEEA46F8BD75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3a:f1:da:b5:d7:c8:10:84:0f:d0:76:14:3d:
                    d8:d4:21:0f:84:b7:03:4f:57:f7:73:26:9b:59:bb:
                    0e:59:de:43:3b:b1:b0:bf:76:1d:b2:2a:68:52:1e:
                    e9:93:86:ec:f1:e3:34:8f:6b:f1:44:9a:7d:ee:72:
                    b2:d4:3b:d7:52:50:24:18:83:ab:38:0a:64:29:2f:
                    11:50:1b:a4:1b:08:e5:02:ff:36:a7:f2:5d:60:dd:
                    29:ba:8e:17:05:2f:1c:68:d1:75:4b:4c:a1:7b:3c:
                    7a:33:e4:dd:12:81:e7:63:92:a1:25:32:c5:2c:d5:
                    dc:8d:1e:94:dc:70:3d:83:09:5d:55:6a:a2:7b:f9:
                    43:8c:d8:9a:19:30:57:30:f0:d7:78:12:18:f8:38:
                    cf:96:b6:25:54:e9:32:d4:0a:e4:6f:68:f1:cc:be:
                    e2:55:1f:bf:9f:37:6b:e4:d3:d4:d2:03:48:cc:07:
                    d4:b5:bf:e0:17:a0:cd:1a:73:e1:b0:a0:d5:4d:46:
                    53:93:6b:64:08:58:b0:53:96:9a:98:4f:0b:72:05:
                    5f:68:f3:23:7c:26:80:fb:60:fc:49:38:dd:0f:7a:
                    f8:12:69:c6:7e:92:a5:7a:04:dc:95:55:f8:5b:3c:
                    bb:df:8e:43:6d:a0:d5:71:3b:87:21:ac:c0:a0:9c:
                    20:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:06:27:94:CE:CC:D1:5A:1D:14:0B:8D:19:66:BE:EA:46:F8:BD:75
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/MwYnlM7M0VodFAuNGWa-6kb4vXU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         83:fa:c0:8c:6d:28:28:c4:e6:fd:9a:59:c5:62:1f:07:54:45:
         0f:85:dd:37:71:a6:37:6d:24:bd:65:67:18:47:9c:de:55:ef:
         de:fd:82:c7:a4:da:c3:60:1b:4c:32:b9:e8:84:2c:83:1c:ea:
         cc:7a:68:a0:75:fe:0d:a4:19:8c:48:5f:75:d4:d9:bf:29:39:
         bf:ef:f0:29:10:6b:0c:b5:30:a6:3e:c3:df:bd:61:3a:4f:1a:
         9d:75:7b:b8:8e:9d:0c:d6:46:bf:c3:a2:1d:8c:3f:0e:98:e6:
         cb:d1:1d:53:b3:81:34:e7:4a:f1:da:21:32:c5:54:ca:f9:d6:
         25:b0:1a:84:68:04:6e:9f:4b:43:b0:b4:cd:26:5f:30:72:e7:
         b6:38:b9:10:f5:f3:e5:22:5e:68:cb:a5:f3:c9:92:f9:df:75:
         41:16:37:d5:6c:2c:a0:bb:b8:70:8e:9d:f0:a1:85:95:7f:e3:
         a4:09:0f:df:ce:95:03:26:2d:de:5b:7b:dc:d2:46:3b:d9:bd:
         3d:00:c3:3a:ad:50:91:2e:95:8b:b8:d4:55:8f:10:41:00:56:
         d1:8b:a7:c9:0b:38:14:36:ee:e1:3e:e6:cd:aa:f0:0b:00:4f:
         6c:1d:68:96:81:77:3d:f1:37:30:86:38:28:ed:ed:9c:25:c5:
         8e:4b:70:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:27 2024 by rpki-client on console-fra.rpki-client.org