Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Vy8fzxgwvK7E1DJP_B8E08SbENA.roa
File:                     Vy8fzxgwvK7E1DJP_B8E08SbENA.roa (raw, json)
Hash identifier:          WB4ivVTmsLCDT6cXDEV+v5zdZDlzTScNxULBKKda12k=
Subject key identifier:   57:2F:1F:CF:18:30:BC:AE:C4:D4:32:4F:FC:1F:04:D3:C4:9B:10:D0
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1E72
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Vy8fzxgwvK7E1DJP_B8E08SbENA.roa
Signing time:             Fri 01 Sep 2023 10:16:03 +0000
ROA not before:           Fri 01 Sep 2023 10:16:03 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     24164
IP address blocks:        124.6.0.0/19 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7794 (0x1e72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep  1 10:16:03 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=572F1FCF1830BCAEC4D4324FFC1F04D3C49B10D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1f:c7:ac:ae:6c:54:ff:4d:44:35:1f:13:fe:
                    38:50:00:dd:5d:cd:5c:6d:4a:08:86:3a:1d:c1:e5:
                    46:16:dc:f8:30:64:1b:ff:04:23:8b:f4:fd:71:f1:
                    ec:5d:62:71:17:02:81:78:28:9e:1d:fd:08:a8:f5:
                    60:58:49:1a:f6:73:27:73:bb:7e:f5:0d:c7:0b:cd:
                    9e:56:29:dc:ad:9c:0c:5b:da:4c:73:45:c9:0b:2b:
                    37:5e:9b:5d:b4:30:bd:ca:04:2d:fc:ef:90:5f:4c:
                    37:ca:c6:3a:b6:12:4d:17:75:ae:ed:b1:db:81:de:
                    3b:4e:62:3d:6e:f1:91:ee:c0:b7:a2:96:da:54:8f:
                    67:6f:c5:aa:14:4f:3b:01:71:1b:72:04:f3:06:a9:
                    32:ba:7a:c9:e8:72:44:f8:94:91:6e:f7:8e:ee:83:
                    82:f4:67:f9:df:d1:80:0a:87:71:fa:06:c3:78:0c:
                    9c:03:70:03:c7:f5:e2:c9:4a:4b:e1:3b:ba:0a:18:
                    ba:3f:4e:0e:5a:f6:96:b3:92:3c:cc:1d:38:f2:e5:
                    ad:8c:ed:bc:b1:f3:31:bc:7d:5f:65:f7:0a:d6:cf:
                    9e:3c:be:b7:f1:62:6b:b7:7e:30:cf:0c:4c:91:93:
                    1c:d5:d9:39:1e:f6:7d:ed:16:8b:e2:02:7b:71:d2:
                    a6:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:2F:1F:CF:18:30:BC:AE:C4:D4:32:4F:FC:1F:04:D3:C4:9B:10:D0
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Vy8fzxgwvK7E1DJP_B8E08SbENA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.6.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         00:ed:e9:d4:e0:8a:e1:f1:fc:7b:6b:9d:c7:56:b0:d0:1e:b5:
         e3:28:a7:de:26:2e:d9:4a:cb:30:09:02:df:3c:4b:d5:1a:a1:
         58:c1:a5:9f:db:df:6e:0a:d5:2e:ec:98:16:6b:c2:56:f2:0c:
         77:7e:a0:69:99:93:d3:11:16:7b:42:4b:bf:17:a0:e0:6d:a5:
         ce:ae:81:0b:da:52:9a:71:a6:c2:73:14:56:7f:63:a9:40:0e:
         25:b5:6c:45:4d:ee:92:1c:53:14:07:f6:10:93:8f:ed:5e:2f:
         2e:87:e3:3c:35:dd:84:14:57:54:12:fc:0c:ef:fb:47:2a:76:
         09:9c:ba:1d:b7:c1:c3:01:3a:4c:c5:66:87:28:0b:e6:54:8f:
         05:fc:6e:21:2a:74:39:3d:30:e6:fc:5a:93:ae:02:62:b4:70:
         db:43:ca:93:2a:64:9d:ef:79:7b:9f:52:1d:a2:cf:a8:be:4a:
         12:26:95:91:49:d2:32:59:fe:01:c2:dd:54:2e:c7:75:81:6b:
         a6:c6:4d:da:3d:c0:f7:91:52:8e:70:eb:84:c1:b5:39:cd:6e:
         d6:9e:ff:2b:b1:49:1c:27:04:be:d0:33:12:3a:87:21:a1:f1:
         e3:29:25:0b:b2:1b:b6:3d:9c:77:99:48:8f:79:53:cc:30:f6:
         fc:02:c2:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:27 2024 by rpki-client on console-fra.rpki-client.org