Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/j6kvkzR09BDTPxCdc9IzlSQZhAg.roa
File:                     j6kvkzR09BDTPxCdc9IzlSQZhAg.roa (raw, json)
Hash identifier:          anPeSFGT7Q6aO+G/RasmodnZndQa8UqtJwpnHuLgWCk=
Subject key identifier:   8F:A9:2F:93:34:74:F4:10:D3:3F:10:9D:73:D2:33:95:24:19:84:08
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1DB9
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/j6kvkzR09BDTPxCdc9IzlSQZhAg.roa
Signing time:             Fri 01 Sep 2023 10:15:12 +0000
ROA not before:           Fri 01 Sep 2023 10:15:12 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     24165
IP address blocks:        180.218.96.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7609 (0x1db9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep  1 10:15:12 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=8FA92F933474F410D33F109D73D2339524198408
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ac:32:54:cf:73:52:dd:1a:6b:5b:c4:c6:2c:
                    67:05:be:e3:c2:44:d4:7b:ac:cc:c1:04:c1:43:69:
                    74:90:1d:c8:5a:62:44:78:70:41:59:5c:38:d8:ca:
                    50:5d:f8:6f:66:86:61:c2:ff:0e:c1:55:3e:32:c9:
                    5b:94:61:67:e7:cb:0a:f2:de:61:62:90:60:22:c0:
                    6c:45:87:4c:09:c6:1a:f9:23:7c:e6:bd:4d:fe:69:
                    16:4b:49:78:6b:23:2d:fe:48:34:27:9b:e4:13:fe:
                    06:73:cb:78:c4:87:3b:20:9a:3a:55:02:ed:90:6a:
                    6c:16:ad:76:a0:68:83:3c:5e:a3:a9:8b:f4:33:62:
                    01:2b:fc:a3:2d:22:37:33:da:e6:d6:c7:8b:a9:23:
                    6e:33:83:6c:67:b6:6c:1b:17:0c:60:fd:b0:7f:ce:
                    2d:e2:39:be:f4:7f:b5:6e:d8:ce:e6:35:d1:bb:16:
                    ad:78:ba:6e:23:b4:a0:8b:40:0a:50:22:5b:f1:28:
                    54:1d:bb:cc:b0:b0:69:0f:ea:23:1b:46:fd:21:54:
                    58:01:b8:af:ba:4d:0a:a5:82:9c:64:ea:89:84:f9:
                    5c:e1:b4:de:02:fe:43:1b:1f:96:35:bc:fb:18:1c:
                    f7:a2:0f:cf:15:07:8a:c4:72:c1:9e:20:f6:a4:d0:
                    fb:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:A9:2F:93:34:74:F4:10:D3:3F:10:9D:73:D2:33:95:24:19:84:08
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/j6kvkzR09BDTPxCdc9IzlSQZhAg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:fd:b7:4a:23:13:f2:3b:b4:4f:28:14:04:aa:7d:e8:70:96:
         11:80:5c:8e:79:b9:b7:a0:38:22:60:6e:df:4b:86:bd:b5:b2:
         8b:dd:08:d2:b9:1a:af:aa:b0:ed:27:bd:a9:0e:bb:af:52:eb:
         fd:0c:43:4f:14:c1:73:1b:92:c7:a0:f9:d7:da:fd:90:cd:dd:
         8d:c7:53:fc:5c:ac:29:88:1d:83:ed:71:13:82:6c:14:7a:75:
         07:bb:11:25:68:2f:6a:a7:4d:1e:41:e1:e2:e3:09:0e:eb:39:
         b6:90:f9:c9:a7:d1:5e:49:d1:5f:1d:1a:81:48:86:01:0f:43:
         42:b5:d4:42:4a:a3:2e:d0:44:03:df:a2:6f:5b:17:92:1e:8c:
         2f:cf:4b:3d:28:56:77:f8:d1:a8:f8:d6:f5:d6:39:95:60:f2:
         ed:c2:a6:88:ce:b7:94:99:73:c3:36:87:b2:fd:09:ee:30:50:
         01:de:08:4a:02:a0:8b:7a:0d:63:0a:95:70:84:61:40:11:d3:
         5c:01:f5:08:1d:16:9d:ed:35:96:2e:7d:de:ee:ed:af:bc:64:
         cd:2b:a5:9c:11:dd:fd:0a:98:34:3c:08:78:8e:75:98:bd:a8:
         49:c4:e7:a1:c3:33:9f:10:82:37:a4:a5:97:57:1a:3a:30:84:
         3d:e1:eb:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:21 2024 by rpki-client on console-ams.rpki-client.org