Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/pgWKVAsbRd0XkCCKt6-5TFmtAao.roa
File:                     pgWKVAsbRd0XkCCKt6-5TFmtAao.roa (raw, json)
Hash identifier:          Hyhml12iSDXAA/8HWTzf4rIo8PsWbeLBx6IeCd9zifY=
Subject key identifier:   A6:05:8A:54:0B:1B:45:DD:17:90:20:8A:B7:AF:B9:4C:59:AD:01:AA
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1E03
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/pgWKVAsbRd0XkCCKt6-5TFmtAao.roa
Signing time:             Fri 01 Sep 2023 10:15:34 +0000
ROA not before:           Fri 01 Sep 2023 10:15:34 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     24164
IP address blocks:        61.61.212.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7683 (0x1e03)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep  1 10:15:34 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=A6058A540B1B45DD1790208AB7AFB94C59AD01AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:06:c2:96:af:aa:da:74:2b:65:bc:68:93:14:
                    9f:0b:bf:4e:92:4a:c0:d5:ad:69:39:f1:e2:15:7f:
                    e6:ed:91:7e:46:f6:67:ec:b0:1c:83:36:e6:dc:69:
                    5f:57:ad:c5:23:08:04:81:13:4c:b5:31:24:ca:3f:
                    5f:b7:24:67:d0:a6:44:0c:a6:de:2a:14:3d:07:de:
                    fc:2a:3c:fb:96:de:e9:59:32:b9:2a:1d:05:e5:19:
                    65:1a:28:47:f2:5b:4e:a2:6c:c6:71:ac:03:ec:cb:
                    a7:bd:70:26:42:36:f2:4d:fd:ba:de:b6:de:bd:56:
                    0b:7d:da:1e:66:1f:66:33:18:69:16:fe:52:d3:a6:
                    6c:e6:8a:a9:b2:55:16:30:98:56:7b:6b:ca:ae:5b:
                    d1:5d:9b:97:9c:c3:40:db:e9:0c:91:78:d2:73:67:
                    56:28:38:b4:6b:91:32:af:05:81:3f:c1:24:b7:3d:
                    94:10:45:ab:0c:2f:a5:af:9b:7b:12:59:ce:2e:28:
                    85:1c:98:9d:a5:aa:7a:22:d5:4a:69:cf:83:21:e4:
                    6c:37:0e:05:d2:47:be:8c:4b:87:77:09:61:2f:da:
                    b6:fb:c3:af:72:77:6e:28:82:3f:66:2d:a3:01:81:
                    c8:f2:e0:e8:64:f9:47:aa:3b:a4:f5:cd:db:92:5c:
                    77:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:05:8A:54:0B:1B:45:DD:17:90:20:8A:B7:AF:B9:4C:59:AD:01:AA
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/pgWKVAsbRd0XkCCKt6-5TFmtAao.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.61.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:de:08:96:a4:7b:ee:70:12:77:93:22:e5:f8:08:ba:6c:7d:
         4f:98:d2:c9:d4:44:44:bd:7a:eb:a4:74:20:a7:69:55:71:61:
         b2:d1:a3:3b:af:71:05:72:05:89:71:83:1e:f7:6e:9b:31:1b:
         dc:0e:ad:1f:c4:98:2a:01:a6:b5:80:54:f3:63:47:6f:f7:4a:
         7b:de:07:55:70:2c:5d:a7:c4:5d:b8:1c:55:9c:2e:ed:6e:af:
         b6:de:10:07:1d:9e:61:e7:ef:1a:c1:cc:6d:6b:22:de:d0:63:
         56:88:55:e8:95:ca:ac:e4:5d:cf:70:75:56:87:c0:e1:af:21:
         73:9b:09:60:13:c7:7f:57:c1:ba:82:46:9c:0c:ce:61:2e:21:
         06:ab:b1:ed:a2:c5:75:db:78:0e:4b:d2:20:68:84:75:10:73:
         89:e1:14:b8:0d:d4:da:b7:dc:5b:4d:c9:40:ee:b6:25:ab:2e:
         d9:03:f8:6b:ca:71:79:b6:e1:ba:55:4e:ec:85:20:fc:73:fb:
         25:91:5b:ef:7a:cc:59:22:1c:b6:f3:27:51:88:a2:08:5a:5a:
         46:25:09:8b:5e:f8:b6:c8:f0:6f:ba:da:f9:7f:e9:15:90:92:
         5b:4e:b3:bc:86:85:74:da:fa:32:ad:7b:86:dc:ae:17:1e:24:
         96:3a:9c:82
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHgMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx
MDE1MzRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEE2MDU4QTU0MEIxQjQ1
REQxNzkwMjA4QUI3QUZCOTRDNTlBRDAxQUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDABsKWr6radCtlvGiTFJ8Lv06SSsDVrWk58eIVf+btkX5G9mfs
sByDNubcaV9XrcUjCASBE0y1MSTKP1+3JGfQpkQMpt4qFD0H3vwqPPuW3ulZMrkq
HQXlGWUaKEfyW06ibMZxrAPsy6e9cCZCNvJN/brett69Vgt92h5mH2YzGGkW/lLT
pmzmiqmyVRYwmFZ7a8quW9Fdm5ecw0Db6QyReNJzZ1YoOLRrkTKvBYE/wSS3PZQQ
RasML6Wvm3sSWc4uKIUcmJ2lqnoi1Uppz4Mh5Gw3DgXSR76MS4d3CWEv2rb7w69y
d24ogj9mLaMBgcjy4Ohk+UeqO6T1zduSXHeBAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUpgWKVAsbRd0XkCCKt6+5TFmtAaowHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3BnV0tWQXNiUmQwWGtDQ0t0
Ni01VEZtdEFhby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAI9
PdQwDQYJKoZIhvcNAQELBQADggEBAATeCJake+5wEneTIuX4CLpsfU+Y0snURES9
euukdCCnaVVxYbLRozuvcQVyBYlxgx73bpsxG9wOrR/EmCoBprWAVPNjR2/3Snve
B1VwLF2nxF24HFWcLu1ur7beEAcdnmHn7xrBzG1rIt7QY1aIVeiVyqzkXc9wdVaH
wOGvIXObCWATx39XwbqCRpwMzmEuIQarse2ixXXbeA5L0iBohHUQc4nhFLgN1Nq3
3FtNyUDutiWrLtkD+GvKcXm24bpVTuyFIPxz+yWRW+96zFkiHLbzJ1GIoghaWkYl
CYte+LbI8G+62vl/6RWQkltOs7yGhXTa+jKte4bcrhceJJY6nII=
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:28 2024 by rpki-client on console-fra.rpki-client.org