Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/SNVn4kIMZNToMFAskiqD2b_FJdw.roa
File:                     SNVn4kIMZNToMFAskiqD2b_FJdw.roa (raw, json)
Hash identifier:          Fney0qjvNWmo/NO2kvgYK/B9nOM7J3Iiwv5YvJ6TsWY=
Subject key identifier:   48:D5:67:E2:42:0C:64:D4:E8:30:50:2C:92:2A:83:D9:BF:C5:25:DC
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1E47
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/SNVn4kIMZNToMFAskiqD2b_FJdw.roa
Signing time:             Fri 01 Sep 2023 10:15:51 +0000
ROA not before:           Fri 01 Sep 2023 10:15:51 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     24164
IP address blocks:        211.76.32.0/19 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7751 (0x1e47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep  1 10:15:51 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=48D567E2420C64D4E830502C922A83D9BFC525DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d4:72:2b:25:90:45:6e:a2:25:5e:bc:2e:6c:
                    e5:f8:ec:4d:90:5e:d5:d8:4b:b0:94:fe:65:5f:29:
                    8d:78:b6:d8:05:ca:90:64:83:cd:b4:7f:58:7a:25:
                    c4:7e:af:ea:5e:82:1b:97:14:5b:79:ba:de:f0:26:
                    16:52:34:dd:8b:76:da:4d:d8:5b:d3:76:76:de:a7:
                    84:0f:fb:5b:48:cf:6b:fa:52:f0:5c:8e:e9:aa:2a:
                    a6:d8:f9:6b:fa:85:2c:42:f4:38:f2:a6:8d:ab:a0:
                    f4:9a:c6:cc:b9:e5:94:3a:48:4c:e7:26:25:9e:db:
                    3a:e3:87:47:7d:17:8c:5a:85:48:c5:48:88:d9:21:
                    8b:81:e0:a7:f4:4f:fc:4a:a3:28:56:0e:25:ee:15:
                    1f:6c:dd:d7:ad:8a:64:15:61:f5:bf:6f:ff:2f:93:
                    96:55:b9:8b:d7:f0:08:ed:c1:b1:48:11:1a:7a:17:
                    54:35:5e:89:94:1e:e7:4b:d3:a0:19:3f:2a:63:f3:
                    1b:c5:2f:a3:15:ff:71:40:9f:65:e4:0f:09:ed:cf:
                    92:4f:ff:1c:6d:04:64:14:2a:af:7c:42:49:2e:eb:
                    17:82:cb:1c:62:26:98:b4:f4:da:41:97:f1:d0:89:
                    09:53:05:ce:60:5e:e0:1c:4d:7f:1f:67:06:b1:08:
                    04:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:D5:67:E2:42:0C:64:D4:E8:30:50:2C:92:2A:83:D9:BF:C5:25:DC
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/SNVn4kIMZNToMFAskiqD2b_FJdw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.76.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         56:6a:88:b5:36:bd:3f:4b:e8:23:87:67:6c:1d:51:a6:8f:6f:
         c2:ba:56:57:4d:b3:0c:b8:78:7a:09:bb:8d:c5:0f:3c:e0:a4:
         de:46:b4:ab:4d:05:da:d2:7f:65:57:7a:7a:ca:fd:71:c3:d1:
         d2:64:78:8e:b2:dd:4f:e7:d5:f6:c3:c7:00:ca:86:cc:27:6d:
         5c:48:4a:29:2c:eb:c1:b0:49:35:4c:05:f0:c4:86:6b:55:44:
         4e:7a:a2:18:17:6b:d0:d3:f0:b1:ab:2c:07:47:fb:df:d9:d3:
         d0:11:a9:86:b5:fe:a4:77:02:5d:c3:28:7c:3b:25:59:56:ed:
         a1:dd:96:ac:1a:3e:c3:16:0b:44:8c:b5:f0:3a:ec:f6:14:80:
         a6:b8:dd:83:5d:66:4c:79:ef:f4:ab:5b:d8:3b:2c:18:86:21:
         1c:4d:92:bf:fe:92:a7:7b:af:e9:f4:2e:9c:65:d1:23:eb:00:
         13:a6:c0:cb:68:90:73:73:36:3a:69:88:4d:2d:4e:db:b6:b5:
         a8:d9:f9:f8:e7:5a:f8:80:59:16:08:4a:20:90:a3:cb:ad:5f:
         9e:f7:c7:b5:f1:5c:7b:44:96:ea:ba:d2:e4:5d:fb:04:91:81:
         c6:c0:ed:50:db:55:63:f1:52:58:ac:c8:97:6c:9a:b4:9e:93:
         97:5d:4a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:27 2024 by rpki-client on console-fra.rpki-client.org