Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/lUXqpf_v-bp-32x_QTGF-fUn7os.roa
File:                     lUXqpf_v-bp-32x_QTGF-fUn7os.roa (raw, json)
Hash identifier:          wJMCR1j6rHSO8ns5VHfBi7wmAN/NPsvxWoP0ri/Ud2M=
Subject key identifier:   95:45:EA:A5:FF:EF:F9:BA:7E:DF:6C:7F:41:31:85:F9:F5:27:EE:8B
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1E13
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/lUXqpf_v-bp-32x_QTGF-fUn7os.roa
Signing time:             Fri 01 Sep 2023 10:15:39 +0000
ROA not before:           Fri 01 Sep 2023 10:15:39 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     24164
IP address blocks:        211.76.64.0/20 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7699 (0x1e13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep  1 10:15:39 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=9545EAA5FFEFF9BA7EDF6C7F413185F9F527EE8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f0:32:18:58:a7:a8:f1:7f:0f:a3:1c:0d:f8:
                    ab:49:cb:3b:32:0b:0b:a5:62:c6:48:3a:2f:b3:76:
                    99:f3:e5:fe:75:f7:b3:c1:0c:f9:cd:1d:27:78:96:
                    0c:e4:da:a1:a5:1e:83:79:45:e8:88:20:5a:e1:c1:
                    fa:02:5d:51:ec:23:5a:8b:62:67:5c:62:ed:0e:56:
                    24:c7:41:84:19:73:39:75:f9:11:bb:a0:d9:5e:a9:
                    13:e6:ad:1c:d5:43:ca:a2:2d:70:d2:50:db:8f:3c:
                    76:9d:5f:d0:82:49:5c:0e:b6:98:eb:26:77:01:09:
                    90:ab:32:1f:1f:1e:f6:82:f9:9c:85:80:00:12:60:
                    12:a8:b7:55:74:cc:e5:d8:9b:eb:84:bc:56:72:2a:
                    2a:d2:d4:4e:9f:f8:1b:6f:f2:a3:75:26:40:c8:ef:
                    12:91:a4:90:22:ec:e5:02:f3:bf:34:1d:1c:7f:fc:
                    99:38:1c:5d:bd:7a:72:3c:4c:6d:1c:ef:c8:2b:12:
                    be:98:93:06:e3:1c:95:8b:1c:91:a9:99:f9:cf:8e:
                    0a:9c:39:e7:2a:1f:64:24:6a:01:5d:9c:14:b0:19:
                    ac:d9:76:44:d1:a3:22:f8:0a:79:ce:36:47:64:ad:
                    ee:e5:76:f3:13:20:63:c9:11:7e:5f:d0:4c:32:9a:
                    b4:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:45:EA:A5:FF:EF:F9:BA:7E:DF:6C:7F:41:31:85:F9:F5:27:EE:8B
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/lUXqpf_v-bp-32x_QTGF-fUn7os.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.76.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         86:36:51:d3:73:d4:16:a9:fb:e0:70:73:4d:e8:26:ae:4c:83:
         71:91:9e:2d:3b:d3:cf:fd:e2:62:0c:35:61:0c:cd:f2:bc:94:
         4d:94:3c:c2:e0:c8:f4:8f:0b:21:d8:34:f0:6c:2e:40:46:c7:
         04:0e:f5:5a:d9:ab:04:e9:81:4f:82:62:ef:b3:06:35:3a:59:
         25:e3:b8:b1:92:29:4c:5b:5b:93:fd:b9:23:7a:ec:8e:06:8d:
         22:9a:97:d2:64:f1:16:31:63:5e:27:63:b0:c2:c1:87:74:6a:
         a3:bc:0b:12:75:e5:9d:c9:35:d9:c2:c7:bf:59:44:63:cb:ed:
         e5:89:ef:e0:7e:f9:e4:66:fa:20:ff:13:5f:26:5b:59:60:e1:
         66:fb:45:a5:39:43:67:f5:af:65:d2:28:ec:49:f0:79:39:f7:
         9e:a4:5a:d9:8c:65:9e:c3:ed:4d:25:e1:52:10:74:10:bf:bd:
         7e:be:12:2f:70:09:25:bf:5e:99:fc:97:66:3d:0f:bb:3c:17:
         11:9e:f0:da:88:d8:13:7b:8c:5b:d8:14:5e:19:5a:49:3b:c0:
         35:49:7d:e0:5f:78:1c:ee:4d:6c:bb:86:49:a1:f7:70:d7:80:
         3e:3e:6c:60:0c:44:8d:67:e6:01:13:b4:a3:8a:47:61:1d:07:
         0b:b1:d8:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:28 2024 by rpki-client on console-fra.rpki-client.org