Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/wuaVLCf2yzbXhLAGpe_Y1Y2M00g.roa
File:                     wuaVLCf2yzbXhLAGpe_Y1Y2M00g.roa (raw, json)
Hash identifier:          m8nVl6adS0K0Ku6+7SCfjtZSEPJ8wjd5RnCLVIfLLRI=
Subject key identifier:   C2:E6:95:2C:27:F6:CB:36:D7:84:B0:06:A5:EF:D8:D5:8D:8C:D3:48
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1D8D
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/wuaVLCf2yzbXhLAGpe_Y1Y2M00g.roa
Signing time:             Fri 01 Sep 2023 10:15:00 +0000
ROA not before:           Fri 01 Sep 2023 10:15:00 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     24164
IP address blocks:        119.77.160.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7565 (0x1d8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep  1 10:15:00 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=C2E6952C27F6CB36D784B006A5EFD8D58D8CD348
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:09:06:8a:5b:ad:97:7f:73:e4:e6:fd:dd:18:
                    d6:d6:53:ec:e9:66:67:49:20:b1:35:88:fb:30:df:
                    e6:ec:62:21:8d:c5:a9:2c:e4:e1:2f:7d:68:33:33:
                    c5:58:97:e6:8a:2b:d1:aa:8d:22:7a:6e:46:c2:3d:
                    fa:40:dd:29:81:1b:18:53:d1:cf:72:40:c8:72:1b:
                    a7:b6:56:dc:4a:cb:1c:fe:f7:92:b9:18:b5:9d:7c:
                    54:6c:4b:14:80:b1:80:30:fc:f4:f0:1b:25:a3:c4:
                    1b:ba:22:b9:44:91:8f:7a:9d:f6:d2:d5:2d:a2:36:
                    e3:eb:14:02:50:36:0c:eb:2d:3f:98:c5:eb:d7:02:
                    06:61:c9:7d:44:00:81:c4:6f:bc:49:a3:e9:bd:3b:
                    b5:61:f0:d2:77:41:b2:b1:d0:fc:e0:83:fc:22:92:
                    35:57:52:97:c2:e4:4b:ac:44:6a:ec:be:0f:48:f3:
                    14:d0:43:8b:da:7a:3d:01:48:9d:e9:b7:1d:c7:93:
                    59:86:8a:4d:2e:ba:66:5e:ff:cd:5e:1a:1b:74:24:
                    b8:7e:14:4f:45:0a:8a:9e:66:6c:de:ac:49:41:2b:
                    de:41:53:38:fa:66:e5:91:a4:ff:5a:91:29:16:01:
                    1f:ae:fe:f5:a4:71:91:19:fb:cd:c5:e7:5d:91:5b:
                    fe:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:E6:95:2C:27:F6:CB:36:D7:84:B0:06:A5:EF:D8:D5:8D:8C:D3:48
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/wuaVLCf2yzbXhLAGpe_Y1Y2M00g.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.77.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         12:67:e2:2c:03:12:46:3a:22:9c:75:3b:f5:1d:de:33:e8:8d:
         fb:aa:64:25:32:62:3d:9e:78:27:70:29:50:aa:79:6f:11:a0:
         46:55:64:ae:ea:87:cb:e4:71:a8:1b:52:1d:21:a5:95:b5:60:
         7a:30:52:ab:74:99:0c:0d:e7:2c:10:61:0a:e3:a7:f0:52:85:
         dd:9f:c9:99:bc:cc:61:0a:e2:4a:d7:48:38:d5:42:81:c9:c5:
         ee:8e:8c:d4:60:47:84:c8:32:51:31:0d:d7:b6:4b:b2:50:68:
         94:88:cc:d6:db:94:a4:e0:3d:b4:53:d5:39:fa:22:2e:cc:25:
         07:f2:00:53:6c:67:18:e3:28:09:4f:fe:b0:7d:28:14:82:ac:
         6c:8f:1e:02:06:e1:ea:bc:e6:bb:06:8b:ef:9e:7f:a2:bd:b5:
         e1:a9:89:0c:ec:01:bb:a8:f5:2f:0c:5f:28:94:83:75:60:74:
         01:ab:af:86:0d:3f:68:e1:91:19:71:7b:fd:d8:09:a1:32:3b:
         c2:fd:27:1e:84:5c:e0:dd:11:5d:5c:a4:01:30:96:b7:3e:4a:
         de:12:80:3b:b6:eb:a7:ff:a5:e6:4c:76:25:87:24:88:a1:01:
         c4:bd:e4:ec:99:97:20:18:7e:90:e8:f5:f9:ab:3d:eb:96:9f:
         37:2c:19:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:28 2024 by rpki-client on console-fra.rpki-client.org