Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/d6IDRAnVyMv3peke6UBuYf0z0sU.roa
File:                     d6IDRAnVyMv3peke6UBuYf0z0sU.roa (raw, json)
Hash identifier:          0B995CjgDdqyP5gtwQ4Dhv0Lyy+Dsj5gYBYD/ZrzV84=
Subject key identifier:   77:A2:03:44:09:D5:C8:CB:F7:A5:E9:1E:E9:40:6E:61:FD:33:D2:C5
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1DD1
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/d6IDRAnVyMv3peke6UBuYf0z0sU.roa
Signing time:             Fri 01 Sep 2023 10:15:19 +0000
ROA not before:           Fri 01 Sep 2023 10:15:19 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     24164
IP address blocks:        180.218.172.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7633 (0x1dd1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep  1 10:15:19 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=77A2034409D5C8CBF7A5E91EE9406E61FD33D2C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:1f:5c:97:91:c7:0a:f2:2c:2e:19:cb:35:f9:
                    5c:5a:85:19:db:c9:f4:2c:4c:b2:22:4c:70:f6:37:
                    ab:3f:67:b4:50:06:f7:56:28:5e:13:51:a4:4d:94:
                    9a:08:2a:61:d5:46:57:c3:fd:c4:b7:46:83:7c:ae:
                    6c:0d:95:99:dc:89:fd:a1:41:22:86:88:e2:96:10:
                    eb:77:3c:50:8e:2b:3d:1b:f7:a0:9c:0b:63:40:82:
                    7a:6b:f4:ff:31:82:1b:a1:f1:00:de:eb:dc:22:51:
                    1e:f8:85:eb:79:d3:c6:6c:20:9a:1e:aa:79:e8:dc:
                    0f:66:9e:c8:86:a6:2b:a8:db:4c:d6:3e:d7:0b:81:
                    76:9f:6c:44:46:20:c1:0d:4b:cf:8d:75:8d:39:f9:
                    59:73:46:a7:7c:b7:e6:20:41:e5:6b:03:db:d8:76:
                    00:41:eb:65:8f:32:a3:5e:58:62:1a:56:45:de:79:
                    3e:08:35:9d:29:43:9f:62:67:50:43:15:f5:bc:d0:
                    be:a5:9b:0c:59:d1:a2:ff:4f:1c:be:d8:b3:2c:01:
                    fb:e0:92:c0:78:25:b0:7d:9b:00:cf:61:12:59:4f:
                    f3:b8:33:3a:b1:58:8e:67:20:2b:13:f9:b1:e3:5b:
                    3a:84:c8:73:ad:41:88:eb:80:bb:c6:7f:f7:47:21:
                    c3:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:A2:03:44:09:D5:C8:CB:F7:A5:E9:1E:E9:40:6E:61:FD:33:D2:C5
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/d6IDRAnVyMv3peke6UBuYf0z0sU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:29:2c:eb:e6:24:7c:bf:a3:d5:7e:36:5b:89:5a:ee:2e:65:
         4b:09:da:2a:5a:0e:ad:35:b1:c6:b1:e8:5a:b5:a5:05:76:00:
         69:db:bb:e6:48:99:49:38:35:5e:7b:63:93:e4:5e:73:bb:3d:
         fb:4f:91:f9:37:cd:5a:6a:4f:e4:77:ce:4e:1e:27:f6:59:01:
         1e:96:56:2d:30:46:f9:85:74:94:2c:dd:eb:43:3a:99:c9:44:
         9f:2e:74:33:7b:70:33:06:2b:e0:ab:69:38:b5:d8:5b:09:8b:
         3c:86:79:2e:3e:00:ac:bd:cc:76:3c:f5:ba:7f:35:b8:eb:1c:
         89:7b:3d:92:38:66:ab:27:f4:fe:79:9a:52:2b:d1:2f:15:4c:
         db:df:ef:d6:89:b8:45:32:96:35:78:6f:05:ae:0d:04:6e:93:
         17:d2:23:b9:fa:b5:ef:4b:ec:ec:87:3b:72:0b:91:2f:3c:22:
         29:71:37:46:dd:c7:5a:8d:d3:8b:1f:56:1f:70:53:a7:17:94:
         35:bf:43:b5:08:64:94:06:cc:11:59:64:61:22:70:b2:81:98:
         e3:28:e9:09:d9:2b:64:ce:37:12:bf:19:4c:83:b3:49:01:fc:
         a7:b2:94:bb:34:51:d0:17:67:05:d1:ba:13:1c:0e:38:a0:cb:
         93:ac:53:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:21 2024 by rpki-client on console-ams.rpki-client.org