Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/YpDvcHKsby-3ZtaJ75hZdwqLsiE.roa
File:                     YpDvcHKsby-3ZtaJ75hZdwqLsiE.roa (raw, json)
Hash identifier:          +FeA958egDthc2qJA2zsZSK28Dl/+HIyWJfiScHP8vo=
Subject key identifier:   62:90:EF:70:72:AC:6F:2F:B7:66:D6:89:EF:98:59:77:0A:8B:B2:21
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1E17
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/YpDvcHKsby-3ZtaJ75hZdwqLsiE.roa
Signing time:             Fri 01 Sep 2023 10:15:39 +0000
ROA not before:           Fri 01 Sep 2023 10:15:39 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     24163
IP address blocks:        45.64.35.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7703 (0x1e17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep  1 10:15:39 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=6290EF7072AC6F2FB766D689EF9859770A8BB221
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f3:80:78:21:88:48:06:03:30:28:e8:95:5c:
                    14:68:59:e1:70:84:0d:53:d4:c9:49:e8:19:19:03:
                    8f:c5:9a:7e:93:6f:3f:62:fd:0c:0c:47:29:29:50:
                    3f:9b:29:b3:dd:44:4f:ea:76:0c:f2:65:9d:0c:f5:
                    73:3f:3f:dc:ae:c2:22:22:8a:11:64:46:69:79:f3:
                    8e:b1:32:de:d4:3d:02:e9:69:91:9e:80:c1:c3:68:
                    89:7c:c4:e1:5d:d9:bc:6a:7a:87:bf:75:2c:e8:ce:
                    0e:0d:60:20:2c:8e:d2:ba:93:aa:0b:df:d9:0d:41:
                    88:e4:a8:a2:53:c3:71:90:f0:ac:9a:e2:96:f7:13:
                    af:29:76:06:32:2b:8a:47:0c:75:b2:d8:a0:e4:31:
                    e1:8c:dd:8b:81:c1:0a:8a:2b:9e:fa:22:cc:fb:97:
                    b3:35:86:0b:5c:05:10:43:fc:da:76:44:d5:cd:5d:
                    88:84:f8:11:f4:52:40:d4:87:e8:f4:ea:ff:9a:9e:
                    c0:6a:a3:9f:64:14:c7:f0:c4:09:bb:3f:49:a4:8d:
                    04:ed:13:c0:e9:d5:07:cf:ad:af:21:a0:cc:99:5a:
                    5d:89:80:dd:85:78:6d:6a:cd:e3:a9:69:37:d5:c6:
                    80:02:bb:26:a8:97:eb:cd:95:19:01:11:a7:c9:f0:
                    1d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:90:EF:70:72:AC:6F:2F:B7:66:D6:89:EF:98:59:77:0A:8B:B2:21
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/YpDvcHKsby-3ZtaJ75hZdwqLsiE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.64.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:97:94:ed:7c:ee:c4:aa:8e:66:32:b7:9a:69:6c:81:d9:8a:
         cf:16:d9:eb:f0:c8:37:a3:a6:30:e1:12:6b:cc:89:e7:e1:6b:
         7f:2c:ed:ac:3a:e7:e6:3a:d7:7e:7b:68:b0:0d:2e:08:5d:6f:
         6e:b4:be:50:f3:82:c8:2f:0e:2b:93:86:56:61:75:6c:35:89:
         06:d5:c9:03:23:43:1e:66:8e:fd:79:12:ee:1d:24:55:18:ca:
         47:80:17:74:1c:a4:80:37:53:11:fb:e5:af:eb:23:4d:6b:74:
         cd:e0:ac:11:a9:52:1b:af:90:a6:e8:26:4e:f0:5b:7f:ab:17:
         e0:3c:48:f8:3c:ca:a8:9d:aa:ab:81:6f:55:31:c5:0b:21:43:
         6d:0a:81:66:76:6f:ca:a4:28:9e:8d:a8:ef:79:17:13:42:2a:
         36:67:02:f0:4b:17:0f:19:d7:47:5f:ca:25:83:20:2a:4c:45:
         f0:3e:23:63:46:72:5e:30:56:56:96:f1:66:08:dc:f3:48:73:
         36:33:4b:05:8b:54:2d:ec:6b:88:36:6d:cb:11:3c:67:71:43:
         87:3a:d4:ef:0f:1d:27:32:98:b2:42:e1:2c:92:3c:df:0a:fb:
         97:85:76:79:63:7b:3e:50:5f:9f:13:d0:29:52:37:7c:49:47:
         c3:6e:e2:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:21 2024 by rpki-client on console-ams.rpki-client.org