Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/tTx_H_PYRYb77sxPNZT2ih9Dl04.roa
File:                     tTx_H_PYRYb77sxPNZT2ih9Dl04.roa (raw, json)
Hash identifier:          6IlEAYRJiJP50/H4ON3Dg2Mh8Kx0w3B14xFQULr4uFw=
Subject key identifier:   B5:3C:7F:1F:F3:D8:45:86:FB:EE:CC:4F:35:94:F6:8A:1F:43:97:4E
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1DB7
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/tTx_H_PYRYb77sxPNZT2ih9Dl04.roa
Signing time:             Fri 01 Sep 2023 10:15:11 +0000
ROA not before:           Fri 01 Sep 2023 10:15:11 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     24163
IP address blocks:        61.56.160.0/19 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7607 (0x1db7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep  1 10:15:11 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=B53C7F1FF3D84586FBEECC4F3594F68A1F43974E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:0e:d2:33:fc:fd:35:21:e6:e3:42:7c:08:2d:
                    8b:3a:80:aa:2e:94:fb:49:0d:0a:c5:30:45:19:14:
                    46:bc:81:de:53:af:19:5f:e0:39:90:d2:46:29:10:
                    f2:6f:26:1b:16:38:58:3c:87:b6:68:60:eb:ee:bb:
                    55:a0:14:26:ac:6b:e2:e4:15:e8:bb:46:ce:1e:bd:
                    2f:bb:86:92:03:a7:be:5a:bf:c9:e6:8d:14:95:0c:
                    87:0a:56:0d:2b:1e:ae:fb:2e:2e:46:e8:65:2a:6c:
                    17:54:0c:d1:2c:4d:98:4f:e6:8b:e6:0b:0d:28:a3:
                    e3:f4:34:5f:da:5a:d7:ce:da:8c:06:18:3b:b2:d6:
                    e6:88:72:69:14:4b:fd:3b:b7:76:a1:07:08:0d:8e:
                    02:42:3f:0b:b3:15:17:41:eb:a8:83:8c:97:46:b5:
                    ad:6e:24:04:88:65:6e:92:e2:93:ca:25:88:42:50:
                    63:a4:94:f8:4a:c1:99:3f:f8:94:69:d7:de:7f:d0:
                    5b:ef:7a:16:a7:40:45:9e:f9:9d:b6:5e:ab:ff:8f:
                    b3:31:f1:cd:bd:c1:0f:b9:51:4c:fb:60:d2:8b:d0:
                    30:3e:18:e3:c7:20:42:10:11:4c:7d:8b:4f:8c:c2:
                    a1:21:fb:28:47:2f:65:5d:91:42:ae:8f:50:c1:3d:
                    a7:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:3C:7F:1F:F3:D8:45:86:FB:EE:CC:4F:35:94:F6:8A:1F:43:97:4E
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/tTx_H_PYRYb77sxPNZT2ih9Dl04.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.56.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         4d:fc:43:1b:e2:e7:eb:ae:da:26:76:29:58:cd:d1:d2:ff:94:
         6f:72:34:b5:ff:71:aa:d0:01:2f:1b:5e:9a:2a:aa:6c:44:48:
         27:11:69:e1:bf:6a:3f:66:26:aa:9d:eb:bd:3f:f8:ea:55:7f:
         cd:55:ba:54:f3:b2:21:b5:49:83:a8:7a:5b:ab:87:51:9b:4e:
         78:93:4e:3e:e5:6b:01:08:af:9f:6c:dd:f4:83:ca:63:45:92:
         a3:26:25:b7:11:26:b1:21:51:7f:01:2c:a1:ce:57:6a:35:0d:
         64:cd:7f:a4:5b:52:3f:34:3e:b7:c3:03:f0:ba:88:00:db:2b:
         37:b3:20:d5:84:d0:e5:3d:fd:47:76:8b:9e:97:aa:08:bc:2e:
         26:03:d1:a6:f8:75:08:a1:72:cd:0b:9c:6c:dd:87:75:27:7c:
         d1:da:c3:3a:b8:a8:2e:0d:9e:47:06:31:4d:9e:59:8f:24:28:
         24:af:0f:24:0b:e7:ee:67:f0:d2:d5:54:cb:45:d1:31:78:78:
         d9:89:d2:ae:fa:08:ff:e3:be:ee:0a:1a:6b:d8:f5:ae:f4:38:
         80:86:af:3d:cd:58:1e:b0:e1:f6:70:1f:4a:a4:27:f7:10:3f:
         28:4d:e4:dd:ad:6f:7c:be:22:2e:7b:f1:4e:31:06:fe:81:03:
         42:8c:6b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:28 2024 by rpki-client on console-fra.rpki-client.org