Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/e4kEkDjoDzmSDSV1TKhqmPo_LSs.roa
File:                     e4kEkDjoDzmSDSV1TKhqmPo_LSs.roa (raw, json)
Hash identifier:          Hog6y4NtelTReYp9sILxZsaXbZw49WbXerjBH+cOyKY=
Subject key identifier:   7B:89:04:90:38:E8:0F:39:92:0D:25:75:4C:A8:6A:98:FA:3F:2D:2B
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1D87
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/e4kEkDjoDzmSDSV1TKhqmPo_LSs.roa
Signing time:             Fri 01 Sep 2023 10:14:58 +0000
ROA not before:           Fri 01 Sep 2023 10:14:58 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     9924
IP address blocks:        119.77.188.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7559 (0x1d87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep  1 10:14:58 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=7B89049038E80F39920D25754CA86A98FA3F2D2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:55:3f:13:b3:66:78:9f:43:1d:7c:69:8c:8d:
                    54:7a:33:96:3a:af:1a:4e:9a:8a:7c:27:cc:85:5b:
                    1e:01:9d:45:4d:b8:1b:8f:16:c1:16:08:da:a5:18:
                    b7:bb:d0:4c:33:59:3d:db:ea:70:b2:1b:58:cd:2a:
                    55:8f:8d:bf:72:05:d8:40:75:be:60:f7:cf:ba:ee:
                    07:ea:f9:66:52:0b:fe:d5:d3:18:28:9e:d4:6e:11:
                    d6:d9:9f:ed:cf:06:73:55:73:02:03:06:82:e2:9d:
                    3e:2e:bd:ab:41:a4:ff:98:d3:cc:33:d0:18:b0:23:
                    85:a4:98:60:d3:2a:4a:4d:81:48:97:1f:82:ce:83:
                    3e:af:a4:19:b4:06:58:2d:5a:c8:d7:9d:8a:01:83:
                    96:07:d1:8c:b4:31:a3:9d:b4:bf:f6:93:44:ef:2a:
                    10:69:64:cc:af:1d:a6:58:f0:7d:54:b7:3a:26:1c:
                    0e:55:32:2b:d6:a9:49:32:8b:8e:19:69:ed:42:b2:
                    09:83:ee:7f:c5:97:db:13:cc:65:b7:93:6b:a5:52:
                    5b:c3:7f:b5:0e:2b:76:cf:13:83:67:db:f3:34:20:
                    fe:4e:09:11:65:29:58:0c:fa:26:be:1d:45:f3:22:
                    48:8e:49:36:82:5f:4a:a5:4e:33:c7:b0:05:fe:3e:
                    95:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:89:04:90:38:E8:0F:39:92:0D:25:75:4C:A8:6A:98:FA:3F:2D:2B
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/e4kEkDjoDzmSDSV1TKhqmPo_LSs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.77.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:79:2f:3d:80:b5:45:25:22:40:ca:f4:a1:9c:8d:4d:86:b3:
         60:f7:12:27:36:50:52:cc:d8:a2:71:24:9d:70:ed:3a:0a:6f:
         36:c7:bb:6d:fc:e3:53:eb:2a:24:fe:5d:ed:62:2f:f2:d2:a7:
         08:de:4f:16:d3:d2:e8:1c:51:b5:49:71:72:3e:a4:83:67:28:
         4e:65:6f:64:6d:b9:40:b0:54:a2:a5:e3:c3:70:3d:41:b7:ec:
         72:bd:64:0b:d1:e6:b3:d6:16:90:71:9a:3c:78:80:fe:dc:5a:
         f3:f6:b6:ad:99:bf:8e:ce:11:6a:1e:d0:17:e5:e2:69:0e:fb:
         08:a7:d8:e5:47:6e:50:f8:9a:c4:45:84:16:85:99:6f:82:0c:
         df:00:87:89:a0:55:81:de:ef:59:b1:26:f7:9f:7a:d2:8e:7c:
         0a:15:8a:44:e1:35:f8:3a:1f:ef:83:bc:e6:87:2a:2f:a3:e3:
         24:0d:67:67:50:a2:c9:36:50:5b:56:2a:ab:8f:c4:de:c0:51:
         e5:7c:db:c9:93:fa:3f:1f:09:bd:f9:3c:9c:83:ab:33:a2:e9:
         5a:4b:95:9d:12:ca:ee:5f:83:54:2d:0f:e1:43:3e:fe:6e:ef:
         6f:15:8f:f9:09:2a:6c:c2:76:ce:58:7e:86:75:a9:0d:de:bb:
         1c:d8:36:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:21 2024 by rpki-client on console-ams.rpki-client.org