Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/apKwMBEcchID5abtlVUTtirsR5Q.roa
File:                     apKwMBEcchID5abtlVUTtirsR5Q.roa (raw, json)
Hash identifier:          yBN5Se9Mz6/oiKe5A0tOw9t1FCYviQFiB/kvCS5RBRA=
Subject key identifier:   6A:92:B0:30:11:1C:72:12:03:E5:A6:ED:95:55:13:B6:2A:EC:47:94
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1EC2
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/apKwMBEcchID5abtlVUTtirsR5Q.roa
Signing time:             Fri 01 Sep 2023 10:16:25 +0000
ROA not before:           Fri 01 Sep 2023 10:16:25 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     24165
IP address blocks:        122.254.32.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7874 (0x1ec2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep  1 10:16:25 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=6A92B030111C721203E5A6ED955513B62AEC4794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:33:03:96:5b:57:21:5e:e3:0f:22:6a:4a:e5:
                    f2:8a:23:8f:56:72:89:87:b2:50:49:c6:b0:cf:1e:
                    be:1d:40:b4:41:d3:6a:94:b4:ce:b5:25:f4:52:4f:
                    4b:37:ae:8e:cc:e6:c5:67:a2:ae:50:a5:95:75:29:
                    8e:23:68:47:2e:a4:53:17:30:89:f5:6f:5f:5f:39:
                    6b:96:47:ce:aa:aa:a9:8a:a6:dc:48:50:71:0e:d8:
                    2a:08:d2:98:7e:20:b0:98:77:9a:0d:ea:fe:9e:a8:
                    c5:cc:60:de:3f:c1:af:16:35:0d:0e:32:c2:67:ee:
                    66:11:4e:fc:32:40:57:cd:a4:fb:b9:74:79:00:67:
                    cf:96:a5:e2:fc:99:5a:f1:10:c1:a1:57:28:14:8f:
                    ea:69:0e:43:40:e2:25:db:aa:00:7e:8b:e4:67:a2:
                    ce:de:2b:79:fc:a4:df:a4:0e:e6:31:8f:e2:ae:01:
                    da:ae:02:5b:8c:52:8a:93:bf:ab:c0:6c:17:26:77:
                    ef:27:22:79:d8:c9:61:76:f1:b1:d2:b3:8b:53:a2:
                    af:80:73:c8:99:ed:e7:87:79:29:53:a3:41:58:43:
                    e3:60:a3:12:3d:ec:ad:f4:68:4c:b3:0f:7f:13:a7:
                    42:7a:dc:a3:93:ad:09:c4:a3:5b:13:79:f9:ef:3e:
                    4c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:92:B0:30:11:1C:72:12:03:E5:A6:ED:95:55:13:B6:2A:EC:47:94
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/apKwMBEcchID5abtlVUTtirsR5Q.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.254.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         65:30:d5:15:d9:0b:88:98:80:16:1e:99:dc:9e:ee:50:2d:b6:
         88:b7:0f:9b:63:e6:df:34:7f:eb:fb:01:de:35:fb:d5:11:5b:
         b6:56:52:01:a6:07:67:70:2d:ac:4e:9c:60:b2:64:b5:36:fe:
         8a:08:8e:5a:bb:ec:0c:c0:f6:e6:31:9e:30:a7:ce:95:72:18:
         6f:8b:fe:2f:e5:9a:a0:ba:78:64:1e:8e:3f:2e:38:5b:6b:1b:
         b0:f0:34:d5:f4:9b:3e:df:8d:6e:bd:2f:ee:5b:c6:39:c3:77:
         6b:19:cb:b8:1a:ba:3f:fe:ef:ab:b0:c0:4f:8f:b8:79:d9:06:
         0c:34:81:23:37:8e:48:3f:c8:63:23:c2:e2:15:9a:73:a8:05:
         d4:d4:4d:f0:ed:e3:52:b5:a8:1c:55:1a:15:f3:63:69:69:ed:
         90:6e:df:86:56:aa:80:d2:46:b8:0c:b1:ff:aa:8c:f3:df:0f:
         d8:ee:2e:1c:8d:3a:f3:bd:2b:7e:8b:81:20:e7:1d:b9:8c:73:
         68:6c:2b:ad:ff:3c:ab:1a:2b:84:93:69:1d:d1:ff:55:d8:cf:
         61:6c:5d:55:6c:28:92:2a:83:95:4d:d7:12:b8:ed:60:34:06:
         3f:d9:84:0d:34:32:83:c9:c5:ce:1a:af:9d:69:92:dc:7c:c1:
         67:1a:49:b4
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHsIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx
MDE2MjVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDZBOTJCMDMwMTExQzcy
MTIwM0U1QTZFRDk1NTUxM0I2MkFFQzQ3OTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDRMwOWW1chXuMPImpK5fKKI49WcomHslBJxrDPHr4dQLRB02qU
tM61JfRST0s3ro7M5sVnoq5QpZV1KY4jaEcupFMXMIn1b19fOWuWR86qqqmKptxI
UHEO2CoI0ph+ILCYd5oN6v6eqMXMYN4/wa8WNQ0OMsJn7mYRTvwyQFfNpPu5dHkA
Z8+WpeL8mVrxEMGhVygUj+ppDkNA4iXbqgB+i+Rnos7eK3n8pN+kDuYxj+KuAdqu
AluMUoqTv6vAbBcmd+8nInnYyWF28bHSs4tToq+Ac8iZ7eeHeSlTo0FYQ+NgoxI9
7K30aEyzD38Tp0J63KOTrQnEo1sTefnvPkzNAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUapKwMBEcchID5abtlVUTtirsR5QwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2FwS3dNQkVjY2hJRDVhYnRs
VlVUdGlyc1I1US5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN6
/iAwDQYJKoZIhvcNAQELBQADggEBAGUw1RXZC4iYgBYemdye7lAttoi3D5tj5t80
f+v7Ad41+9URW7ZWUgGmB2dwLaxOnGCyZLU2/ooIjlq77AzA9uYxnjCnzpVyGG+L
/i/lmqC6eGQejj8uOFtrG7DwNNX0mz7fjW69L+5bxjnDd2sZy7gauj/+76uwwE+P
uHnZBgw0gSM3jkg/yGMjwuIVmnOoBdTUTfDt41K1qBxVGhXzY2lp7ZBu34ZWqoDS
RrgMsf+qjPPfD9juLhyNOvO9K36LgSDnHbmMc2hsK63/PKsaK4STaR3R/1XYz2Fs
XVVsKJIqg5VN1xK47WA0Bj/ZhA00MoPJxc4ar51pktx8wWcaSbQ=
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:27 2024 by rpki-client on console-fra.rpki-client.org