Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/zLaiZPM1c6ckJzjl8tA5DlKsXCc.roa
File:                     zLaiZPM1c6ckJzjl8tA5DlKsXCc.roa (raw, json)
Hash identifier:          i2zniAGmmtYRWvyhawhdi9dN9A94D9ADaB3nXy/9tSk=
Subject key identifier:   CC:B6:A2:64:F3:35:73:A7:24:27:38:E5:F2:D0:39:0E:52:AC:5C:27
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1DE3
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/zLaiZPM1c6ckJzjl8tA5DlKsXCc.roa
Signing time:             Fri 01 Sep 2023 10:15:25 +0000
ROA not before:           Fri 01 Sep 2023 10:15:25 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     24164
IP address blocks:        180.218.0.0/20 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7651 (0x1de3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep  1 10:15:25 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=CCB6A264F33573A7242738E5F2D0390E52AC5C27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:34:16:9f:ea:62:74:83:02:a2:af:77:81:16:
                    14:cf:8e:92:d5:70:f2:6b:88:08:ad:65:cb:9d:39:
                    88:27:f4:ba:f7:21:fc:85:a0:89:dc:29:37:2c:27:
                    83:0f:0b:02:af:d7:c1:96:87:d7:f7:f1:5b:08:d5:
                    51:36:58:64:6f:dc:77:11:b5:8c:d2:cb:a9:82:eb:
                    25:b9:bd:e2:81:83:c0:77:45:1d:05:b0:e3:ec:0e:
                    f5:33:2f:24:c8:cb:26:37:16:00:c0:3d:c8:e5:c9:
                    c8:4c:73:d9:bb:8b:73:60:33:eb:d4:1e:ad:b8:d9:
                    93:2d:81:13:44:2c:45:dd:76:07:33:d9:b8:40:a5:
                    eb:b6:e6:78:5e:36:69:83:36:00:43:a5:88:01:87:
                    77:28:0a:fc:f6:17:62:ed:38:0d:9f:0c:74:30:b0:
                    9c:93:df:4c:43:39:69:f3:e3:e6:df:9a:7f:b4:f3:
                    75:59:3f:b4:00:de:54:df:67:ee:3f:34:a3:b2:e4:
                    15:7e:10:63:3f:28:5b:eb:27:10:09:ac:79:06:da:
                    7f:a8:9f:66:94:d3:4c:6a:5a:e4:3c:39:59:d8:c6:
                    fd:be:92:38:71:eb:21:50:e4:60:8e:12:4c:b8:5d:
                    40:8a:1b:21:41:c7:59:61:11:13:ec:53:b2:b6:8a:
                    b1:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:B6:A2:64:F3:35:73:A7:24:27:38:E5:F2:D0:39:0E:52:AC:5C:27
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/zLaiZPM1c6ckJzjl8tA5DlKsXCc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         16:74:ee:fb:dd:6a:f3:8c:46:a3:2a:e1:cf:75:62:4e:c7:76:
         3d:27:e1:d3:2c:76:92:b2:6f:33:cf:e6:82:2d:27:84:30:ae:
         e4:31:9b:b6:92:da:14:d6:ae:c8:82:4f:2d:92:96:8e:ce:4e:
         1f:66:92:93:47:5b:b8:d7:cc:3a:44:e0:f9:64:eb:f6:37:ea:
         03:b9:a9:ec:dc:ae:5a:94:36:50:ac:e3:b2:9d:32:e2:a6:e3:
         2e:c7:88:1e:a6:ef:88:36:ca:73:67:b5:7b:dc:ee:29:43:ce:
         b1:02:6a:6a:0b:55:89:3a:ef:f3:15:9e:9e:13:27:6d:22:be:
         b7:2b:cb:37:51:13:5a:47:c8:bc:5d:33:2b:bd:dc:92:95:b4:
         ff:c3:0d:d2:20:e8:66:f8:e7:37:a8:44:64:49:d4:84:b8:e3:
         02:3f:47:7a:4e:40:e8:9b:b6:e1:2d:68:7c:50:bc:e4:84:7d:
         3b:ae:d5:80:41:3f:54:0f:44:8f:db:9b:34:3b:47:12:c8:05:
         23:bd:d1:47:ed:62:4a:86:d5:53:95:8f:28:47:58:49:94:54:
         1e:52:1c:18:39:60:5e:03:e6:c1:8e:6d:57:14:4d:33:02:65:
         92:d5:a6:c9:de:d7:ae:43:74:0c:3d:b0:00:3f:bd:e7:c5:bf:
         6a:69:e4:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:22 2024 by rpki-client on console-ams.rpki-client.org