Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fEM2UDGVa-d_8XIUO0Pi7vJiBpc.roa
File:                     fEM2UDGVa-d_8XIUO0Pi7vJiBpc.roa (raw, json)
Hash identifier:          aCpmgR1YC5IUQw0MyorkMlQllPFalJTx8Ul5/r3gKzs=
Subject key identifier:   7C:43:36:50:31:95:6B:E7:7F:F1:72:14:3B:43:E2:EE:F2:62:06:97
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1D61
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fEM2UDGVa-d_8XIUO0Pi7vJiBpc.roa
Signing time:             Fri 01 Sep 2023 10:14:44 +0000
ROA not before:           Fri 01 Sep 2023 10:14:44 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     24164
IP address blocks:        180.218.152.0/21 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7521 (0x1d61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep  1 10:14:44 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=7C43365031956BE77FF172143B43E2EEF2620697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b9:50:d1:d6:f9:18:86:ed:ea:b6:3d:77:35:
                    e8:6d:6e:a6:45:85:e1:c1:2d:a5:b0:44:2a:b3:2c:
                    c2:50:f6:59:bd:51:c8:c4:28:b5:03:1b:84:c1:0c:
                    ad:b6:f7:bf:2f:20:65:f6:8d:19:c8:92:f7:63:59:
                    87:cc:52:e1:6c:c4:2a:d7:52:81:70:ad:b3:fc:90:
                    03:64:73:f0:5a:f1:09:a1:cd:1a:9c:2d:ed:ee:8c:
                    09:bf:b1:d7:9a:1e:18:de:5f:6f:68:4b:76:76:6d:
                    c9:7b:a9:0c:2f:31:a1:bb:b0:7e:68:00:da:8d:17:
                    5a:2c:b9:25:43:3d:33:1f:56:16:c2:1a:4a:fb:7c:
                    3a:fe:68:f7:61:e2:03:d1:1a:9f:b3:ca:e3:3b:61:
                    1b:db:5d:bc:72:01:07:2c:f2:a0:d9:c0:06:ac:4d:
                    75:1c:78:de:ea:1e:d1:d4:c8:68:44:23:32:3b:92:
                    2f:f4:1d:13:22:26:83:f4:c2:97:54:90:38:6a:1e:
                    e5:ec:31:5b:21:23:42:38:3b:b5:8a:01:b2:90:9c:
                    28:99:a6:93:97:52:09:6d:ce:df:88:0c:f9:c6:e5:
                    a0:92:3d:e6:62:a5:1f:e3:df:a1:a7:e3:93:ec:05:
                    3d:f6:7c:49:99:dc:af:8d:47:75:04:13:6c:8d:f4:
                    70:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:43:36:50:31:95:6B:E7:7F:F1:72:14:3B:43:E2:EE:F2:62:06:97
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fEM2UDGVa-d_8XIUO0Pi7vJiBpc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9b:c7:bf:3f:3c:18:3c:b6:55:97:d8:bc:75:a8:40:5b:aa:ef:
         2d:79:ac:35:ff:76:79:32:07:3c:b1:8e:4d:be:62:ca:6e:77:
         09:64:6b:63:e5:f7:f4:87:41:4d:a6:d7:3e:3d:32:bc:0b:de:
         b1:3b:b7:84:65:6d:46:70:8f:59:0e:9f:74:63:8e:14:62:b3:
         01:54:e2:d4:79:2b:b6:a1:1f:94:e9:f4:b7:ee:73:37:35:d0:
         89:ec:47:d3:ad:72:26:96:02:24:ed:00:8d:f6:41:c8:3d:9f:
         14:96:2b:1e:6a:86:d6:8b:94:79:5f:ec:37:7b:5d:e0:34:b6:
         c5:e2:22:a5:c0:fc:f8:7c:7b:10:52:85:47:4f:27:85:7f:89:
         ad:f6:fc:36:ca:de:b2:e3:f6:1c:d7:91:50:e9:cf:81:25:bf:
         ec:c5:e4:ce:56:85:26:a7:4f:ef:1e:1b:37:da:88:d3:3f:83:
         ac:4b:c4:b6:0a:74:46:b4:33:c9:7c:df:a1:8a:0d:48:7b:52:
         9f:5b:e4:af:a5:79:a6:e9:db:18:3a:48:fe:d7:21:ca:0f:33:
         ae:73:03:10:b8:a6:68:67:ea:95:ca:a1:78:0b:e2:38:f5:53:
         84:6d:8b:3c:83:b6:a8:bb:ee:9a:0a:0d:a7:a7:cc:20:2d:d0:
         c2:1b:e7:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:28 2024 by rpki-client on console-fra.rpki-client.org