Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/f03k9QOnNTQta-OFTpFgs4NKXeU.roa
File:                     f03k9QOnNTQta-OFTpFgs4NKXeU.roa (raw, json)
Hash identifier:          NIXogi3lUI/QfU2pwaU1aspBTPW5vmm1hOCtzPfM72U=
Subject key identifier:   7F:4D:E4:F5:03:A7:35:34:2D:6B:E3:85:4E:91:60:B3:83:4A:5D:E5
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1DC9
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/f03k9QOnNTQta-OFTpFgs4NKXeU.roa
Signing time:             Fri 01 Sep 2023 10:15:18 +0000
ROA not before:           Fri 01 Sep 2023 10:15:18 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     24164
IP address blocks:        114.198.165.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7625 (0x1dc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep  1 10:15:18 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=7F4DE4F503A735342D6BE3854E9160B3834A5DE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:9a:6a:11:4f:0a:e1:30:b8:72:ea:35:b2:ee:
                    c5:e7:d9:c5:58:9f:7a:67:d2:70:4e:3e:c4:4e:c7:
                    02:2a:0a:a9:a0:8a:e1:2b:6d:ba:c1:3c:ad:e1:93:
                    2c:ad:4f:06:3f:ab:78:8c:ea:13:d3:2a:5e:b5:9a:
                    9a:ec:80:5e:c7:2c:30:6a:4d:86:47:bc:f3:58:11:
                    25:a3:8e:1c:0e:bd:47:56:8d:32:80:31:00:28:9a:
                    f6:89:12:ba:0a:33:25:53:d5:53:34:0b:66:b6:f2:
                    f2:4a:64:f7:f8:ff:91:5f:bb:a5:8a:27:11:f6:c7:
                    d9:1f:05:4f:32:a0:f2:49:2a:d2:5f:ec:eb:0f:6e:
                    00:5b:4e:e7:1b:cb:94:c4:a6:0f:95:5a:3e:9c:6e:
                    2e:3f:9c:37:e2:10:ae:3c:51:ff:40:f9:84:06:b1:
                    d6:60:73:90:ad:26:48:ed:c8:fd:b8:6f:45:81:f0:
                    33:a7:6d:8c:2a:ba:50:0c:97:03:b3:34:4e:89:f5:
                    24:b4:b3:3b:7c:5c:26:f7:74:a8:9d:91:5b:de:6d:
                    7a:b3:81:e1:5a:07:fe:4a:85:b0:ac:9e:eb:2c:49:
                    46:58:eb:25:62:a3:93:30:b3:d8:37:07:cb:a5:26:
                    29:13:2f:ea:cf:d8:e0:03:ff:ef:9f:fa:f5:97:62:
                    ff:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:4D:E4:F5:03:A7:35:34:2D:6B:E3:85:4E:91:60:B3:83:4A:5D:E5
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/f03k9QOnNTQta-OFTpFgs4NKXeU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.198.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:8d:c0:6d:df:03:b9:02:49:d9:6c:af:16:94:84:d6:10:48:
         ce:83:59:db:73:c5:05:cc:5e:ba:fa:41:3b:5d:bd:ba:3e:df:
         38:41:a6:68:c0:a8:ff:f4:87:b4:62:c6:a0:5f:11:ea:07:d9:
         b1:f1:8c:15:28:29:a0:05:2b:6e:3c:8d:bb:bc:f8:9b:a8:46:
         05:aa:8d:73:2f:65:8e:e1:a4:7d:02:bd:93:d8:b5:f3:d7:4b:
         d6:1b:af:b8:10:16:94:14:d0:38:3c:f0:88:e2:da:a9:a6:82:
         37:1b:de:0a:3a:54:7f:67:f1:b5:34:b1:ce:2f:19:f4:9d:1b:
         1a:48:fb:9b:e8:4c:a8:86:6f:11:8d:c5:e9:9c:31:83:85:56:
         17:be:c9:e0:c8:5d:a8:5b:02:a3:d4:f0:f7:ba:db:ec:2f:7d:
         9b:a5:f4:b5:c7:8d:44:33:f8:e3:38:fa:4a:26:1f:55:45:12:
         5b:16:a5:18:62:7b:c9:61:cb:3c:d1:63:dc:44:5c:8e:5b:8f:
         d2:e7:fe:9e:60:59:dc:8b:d1:68:25:0e:ce:62:cc:45:db:03:
         13:ac:c1:e6:81:ae:df:be:57:bc:4f:85:47:37:10:73:1f:d3:
         5d:28:81:b8:73:d3:82:28:21:4c:13:95:bf:be:1f:77:e7:55:
         d8:7d:e3:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:28 2024 by rpki-client on console-fra.rpki-client.org