Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/aZW3lpMmJvo4SnKLyAVAA18za7g.roa
File:                     aZW3lpMmJvo4SnKLyAVAA18za7g.roa (raw, json)
Hash identifier:          xZDhT6oIhcFqJKFsZHMyRXUn6FPb17f/NswITvRRgVc=
Subject key identifier:   69:95:B7:96:93:26:26:FA:38:4A:72:8B:C8:05:40:03:5F:33:6B:B8
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1D9B
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/aZW3lpMmJvo4SnKLyAVAA18za7g.roa
Signing time:             Fri 01 Sep 2023 10:15:04 +0000
ROA not before:           Fri 01 Sep 2023 10:15:04 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     24165
IP address blocks:        122.254.48.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7579 (0x1d9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep  1 10:15:04 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=6995B796932626FA384A728BC80540035F336BB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3d:a4:c6:15:39:55:63:3c:d1:82:d7:10:e3:
                    a4:bd:20:4f:64:dd:29:b9:55:8e:7f:e8:b7:82:1f:
                    bc:ed:f8:93:02:ed:82:05:24:76:66:fa:51:25:d9:
                    ca:b0:1e:32:b9:a0:7b:51:1b:9e:f5:31:e0:a8:1b:
                    59:aa:ef:fa:d8:84:ca:39:07:b7:4e:e2:8c:b3:e8:
                    38:6e:52:3f:55:be:94:c7:4c:a0:b3:9b:8c:72:15:
                    03:d5:63:a0:d1:6f:3c:d4:dd:ff:5c:20:54:4e:bb:
                    75:54:6d:73:76:04:a7:0d:0e:8f:bd:c9:c6:2e:4c:
                    12:5b:bf:0e:fd:94:72:d1:a9:e2:1a:5a:12:ff:93:
                    8a:15:86:59:75:c9:24:a9:af:52:fd:ca:c0:c4:1f:
                    c6:51:4c:a8:fd:42:15:85:16:b9:fc:2b:e7:7e:78:
                    1c:30:5e:36:aa:1d:03:c6:57:f2:97:c6:0a:9e:4a:
                    5d:4e:d6:88:90:60:ae:f5:70:8a:11:27:12:46:eb:
                    67:8b:19:7c:fa:85:53:79:b6:05:3d:ed:3f:a6:ab:
                    6a:20:9e:ab:86:12:de:06:a4:26:e1:e6:b4:1b:0e:
                    d4:dd:0e:9f:f8:63:33:4c:dc:75:5f:3d:d9:30:d8:
                    cd:8b:90:79:79:83:4c:63:b4:f4:49:4a:5f:0d:a5:
                    f7:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:95:B7:96:93:26:26:FA:38:4A:72:8B:C8:05:40:03:5F:33:6B:B8
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/aZW3lpMmJvo4SnKLyAVAA18za7g.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.254.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         10:b8:24:c9:e2:34:f1:78:08:f4:ba:29:5e:10:cd:4c:db:31:
         7b:2f:af:8d:6f:e8:02:d9:74:eb:1c:07:a1:cf:0a:2e:4a:ff:
         bd:5f:93:1c:d1:58:d4:4e:bd:5d:6d:30:76:15:ed:65:f3:53:
         fb:cd:76:97:77:0e:b4:31:7c:ab:8d:d8:37:ce:73:0d:12:01:
         43:23:25:25:df:26:ce:4c:b2:a6:45:49:3a:81:46:e4:e6:e0:
         22:b5:f7:6b:96:f1:d6:5e:ee:6f:a8:a8:fe:ef:ed:cd:97:17:
         53:a8:e8:99:33:a8:3f:b1:f8:a7:5f:f0:44:ff:a8:1c:2b:e3:
         e3:e3:38:76:ff:ab:aa:64:d7:00:49:af:76:6d:ee:85:c0:48:
         39:f5:0e:03:d7:cc:12:fe:c3:d0:88:de:7b:5d:68:0d:b1:9c:
         77:ba:c9:5d:8b:86:24:9b:dc:13:fd:12:1b:fe:4f:54:f7:b5:
         05:db:c5:c5:b2:9e:87:b5:9d:91:a1:3e:08:dc:5b:0a:8c:4b:
         71:67:ab:85:32:b5:d6:36:c5:e5:84:0f:19:0c:7c:91:67:10:
         8c:86:54:05:94:09:a3:11:18:27:aa:fa:06:a6:3f:7d:15:c0:
         6f:81:d1:99:bf:c6:e9:46:0f:a4:5c:90:03:9d:27:ef:45:95:
         32:0a:b6:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:27 2024 by rpki-client on console-fra.rpki-client.org