Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/SQ75CQP63CpF3dIZBH0D1AmcW-M.roa
File:                     SQ75CQP63CpF3dIZBH0D1AmcW-M.roa (raw, json)
Hash identifier:          2Lbv1dnUk8vApAKiK4K5n+xgZ7B80iGoi5ZP7FZkp6c=
Subject key identifier:   49:0E:F9:09:03:FA:DC:2A:45:DD:D2:19:04:7D:03:D4:09:9C:5B:E3
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1DEF
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/SQ75CQP63CpF3dIZBH0D1AmcW-M.roa
Signing time:             Fri 01 Sep 2023 10:15:28 +0000
ROA not before:           Fri 01 Sep 2023 10:15:28 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     24164
IP address blocks:        49.159.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7663 (0x1def)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep  1 10:15:28 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=490EF90903FADC2A45DDD219047D03D4099C5BE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:27:b7:99:3c:84:e6:28:65:38:9a:2a:f8:ce:
                    34:99:0f:8e:d3:e8:10:e0:b4:67:db:ff:dc:18:37:
                    c4:cd:8b:79:5c:7a:21:bf:fd:c3:30:d1:57:e5:72:
                    23:fb:39:38:16:76:53:62:76:01:e6:f3:f0:42:3d:
                    70:79:25:20:4d:cf:8c:e1:47:42:fe:1b:2d:dd:b3:
                    38:73:0f:95:85:3a:55:0a:d6:7c:ed:ef:8b:2c:e1:
                    6d:4e:f4:91:31:84:58:af:37:94:a4:68:23:31:4f:
                    b9:5d:12:b5:0e:8b:b3:6a:2f:d3:fc:58:8c:39:e0:
                    a5:38:c1:a7:aa:16:86:c9:10:05:f5:3f:4f:3b:0b:
                    f5:ce:46:30:af:05:f2:e8:7b:82:0f:d2:db:8a:04:
                    14:50:04:6f:e2:80:ec:5f:ee:4e:51:33:93:45:77:
                    89:72:21:e8:46:42:9c:4f:6a:f9:95:03:64:ab:af:
                    43:42:8f:84:ca:d4:de:d2:f7:0d:f7:97:68:12:02:
                    58:c8:da:1b:4e:f5:bb:bb:0a:b4:13:b8:72:aa:2f:
                    19:40:3e:91:a1:06:f8:8e:a1:3f:20:49:2f:fb:85:
                    d1:5d:42:08:ec:b5:87:55:61:07:2f:68:4a:1e:49:
                    25:34:47:df:bb:8d:c3:f6:93:8a:4f:00:44:27:b1:
                    e5:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:0E:F9:09:03:FA:DC:2A:45:DD:D2:19:04:7D:03:D4:09:9C:5B:E3
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/SQ75CQP63CpF3dIZBH0D1AmcW-M.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.159.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         25:b3:88:0f:5d:09:42:ac:e7:a2:a3:f9:58:75:d7:fd:17:f2:
         7b:da:83:f2:de:ee:2c:d7:bf:1a:7c:b6:d6:1c:f5:af:d2:e7:
         fc:71:3f:0d:d8:41:4f:1e:fc:fd:4b:c8:36:48:f4:ab:a1:d9:
         99:1b:f7:41:63:bd:bc:bb:b0:61:62:20:40:5c:fb:74:4e:20:
         90:44:c2:f4:da:26:c3:0f:95:72:8a:24:90:eb:74:ae:89:ac:
         fd:b1:5e:e5:c2:fd:70:70:c3:87:9e:df:e9:3d:c5:23:07:9b:
         13:c3:a4:ba:e1:22:81:15:6e:ad:6d:32:7d:bb:2d:0b:d2:b9:
         0f:05:f5:f8:06:9f:ca:04:1b:3e:ea:d1:92:b3:e7:84:3d:c2:
         cb:44:8f:d6:21:c4:03:11:40:b1:8b:fc:ef:10:43:a7:a2:67:
         cf:3f:36:0f:84:8a:a4:91:74:19:3c:be:0f:e9:b3:61:cd:74:
         ba:9b:d3:1a:dd:9e:d8:37:b3:b2:67:1d:81:58:23:ae:19:df:
         45:37:2a:fa:53:61:9d:79:83:0a:a8:ef:83:8c:c1:d5:f2:97:
         e4:1c:c3:47:9d:4b:22:97:f9:18:be:b2:07:18:f9:e5:66:48:
         16:b8:54:91:f6:6a:45:48:1b:e1:83:53:44:a7:82:ac:a2:f0:
         d3:b4:1a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:21 2024 by rpki-client on console-ams.rpki-client.org