Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/axrc_DcMNCb5dgyY-lix4tMIJlA.roa
File:                     axrc_DcMNCb5dgyY-lix4tMIJlA.roa (raw, json)
Hash identifier:          VuGloNJWpMCb1y96Gcxe/flcd8uVElDMRBI4aTWJV0o=
Subject key identifier:   6B:1A:DC:FC:37:0C:34:26:F9:76:0C:98:FA:58:B1:E2:D3:08:26:50
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1EAD
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/axrc_DcMNCb5dgyY-lix4tMIJlA.roa
Signing time:             Fri 01 Sep 2023 10:16:20 +0000
ROA not before:           Fri 01 Sep 2023 10:16:20 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     24164
IP address blocks:        61.58.96.0/20 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7853 (0x1ead)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep  1 10:16:20 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=6B1ADCFC370C3426F9760C98FA58B1E2D3082650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:00:b7:d2:40:8a:00:9d:7a:76:84:30:ae:3f:
                    3e:32:54:df:b9:51:a0:a8:9d:4c:c4:5c:25:5c:f0:
                    52:aa:cb:81:80:7d:09:79:a2:d5:b2:19:2f:70:33:
                    c0:ee:49:af:1c:e0:98:39:ac:81:b8:00:fd:e1:9f:
                    d4:25:ba:17:4a:af:9f:4d:28:7d:94:09:06:10:1c:
                    02:88:be:53:9f:3e:b6:0b:13:a3:16:9d:28:3d:da:
                    36:4f:78:b0:ea:90:a5:54:33:54:7a:a3:2e:73:d9:
                    ff:5b:55:01:10:5b:99:2c:09:40:39:5c:fc:74:14:
                    71:ad:70:e7:4a:0f:de:55:a5:d2:85:1b:bb:47:4a:
                    ff:c5:91:bf:c7:13:d3:4c:4a:93:16:e0:6c:bf:fd:
                    01:d8:bd:c8:02:ee:68:a6:bf:67:2d:5a:5b:e7:52:
                    26:09:fc:3f:00:8c:45:eb:61:98:37:ca:96:01:e6:
                    ae:9f:85:98:8f:eb:f9:bc:71:b7:2f:2c:b2:e9:be:
                    20:12:79:71:26:d5:1d:35:b3:d4:67:3e:a7:ea:83:
                    d0:b5:65:52:e8:c2:b9:ec:c6:0c:21:5d:31:8e:29:
                    50:c4:37:a6:fb:58:cc:cc:9f:05:15:56:81:b7:ad:
                    ed:f7:09:7d:96:6f:b3:68:22:a9:aa:b2:be:9f:a2:
                    d7:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:1A:DC:FC:37:0C:34:26:F9:76:0C:98:FA:58:B1:E2:D3:08:26:50
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/axrc_DcMNCb5dgyY-lix4tMIJlA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.58.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1f:a6:a0:7a:43:22:ed:98:37:91:94:8d:a8:fb:27:f7:cb:8a:
         f6:77:13:d0:34:22:26:80:b8:40:5d:65:2f:e5:87:56:7c:18:
         a4:9b:24:47:f0:ec:d3:7c:d1:0c:90:99:72:22:0a:fd:d6:f6:
         bf:e0:b5:8b:43:e9:f9:e1:af:a2:76:d8:1c:07:ba:28:6d:03:
         91:8c:2a:3b:8b:1e:bf:e3:13:a9:fb:42:fd:aa:e6:a3:02:ec:
         05:2d:3a:ed:81:6a:cc:b3:ee:21:ad:cb:eb:7f:b8:b1:53:21:
         46:be:e2:85:4a:77:82:d1:ae:a3:fd:5b:cc:93:f0:94:9e:fa:
         ca:98:ad:b8:be:11:be:44:89:36:16:9e:1d:14:40:0e:85:94:
         77:3a:b7:1b:b8:93:00:69:bb:69:04:34:c6:c7:2f:0a:89:eb:
         f5:46:bc:d0:fb:c3:bb:a7:29:24:53:ce:20:04:9d:98:ca:a6:
         e5:4d:87:d3:ee:03:6f:e2:f1:fb:e8:54:45:e7:8d:f7:09:ad:
         b9:74:5c:8d:fd:42:53:49:76:02:16:cd:d1:e7:ef:d5:60:bd:
         81:76:61:67:39:ee:f3:7c:f6:a2:27:f0:1b:41:4b:cd:af:ba:
         64:6b:bb:97:a7:93:59:c1:e6:94:c6:1c:8a:80:3a:c8:f2:2a:
         78:45:7b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:21 2024 by rpki-client on console-ams.rpki-client.org