Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/UTH7TuVjytG36v_36RAKkWnEFyA.roa
File:                     UTH7TuVjytG36v_36RAKkWnEFyA.roa (raw, json)
Hash identifier:          FrnAZowTY83RYTGK3Gm36v74cx6FPb/uSXBBOuwLwno=
Subject key identifier:   51:31:FB:4E:E5:63:CA:D1:B7:EA:FF:F7:E9:10:0A:91:69:C4:17:20
Certificate issuer:       /CN=390A0412F8B5EC4F3F9FDBB3A61270DBD0EA9E6B
Certificate serial:       0B8B
Authority key identifier: 39:0A:04:12:F8:B5:EC:4F:3F:9F:DB:B3:A6:12:70:DB:D0:EA:9E:6B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/OQoEEvi17E8_n9uzphJw29Dqnms.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/UTH7TuVjytG36v_36RAKkWnEFyA.roa
Signing time:             Fri 08 Dec 2023 08:57:29 +0000
ROA not before:           Fri 08 Dec 2023 08:57:29 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     17408
IP address blocks:        103.123.252.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2955 (0xb8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=390A0412F8B5EC4F3F9FDBB3A61270DBD0EA9E6B
        Validity
            Not Before: Dec  8 08:57:29 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=5131FB4EE563CAD1B7EAFFF7E9100A9169C41720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:09:de:19:d1:a8:7d:7c:ff:33:17:17:59:5f:
                    54:42:86:eb:a7:c0:60:19:2a:a1:0d:5c:fe:e1:50:
                    c6:f6:b5:18:79:aa:23:b0:cf:6d:55:fd:e3:bc:0f:
                    68:6a:59:74:5e:85:8d:2c:12:7b:bd:17:ff:f0:76:
                    09:ad:07:74:48:af:96:0a:d3:49:3e:6e:ee:34:f8:
                    1e:95:61:29:f4:7c:e6:ee:18:cc:d1:d1:fc:74:8a:
                    39:03:6d:e6:b7:55:e3:bc:e7:35:a6:d8:be:d9:6b:
                    4c:a5:a4:ec:df:3b:bb:74:b1:53:b4:75:76:c7:19:
                    c6:3a:f9:15:be:96:e9:e5:2f:44:89:7e:c8:03:cd:
                    35:85:e7:52:de:35:17:9e:8b:26:79:63:bd:ea:6a:
                    a3:74:6c:7c:56:49:a5:a5:1a:43:1b:b2:cc:35:f3:
                    fa:f9:58:80:3e:0d:c3:4a:7b:6b:be:9a:aa:02:29:
                    d9:0e:e0:78:6b:8c:e7:06:e2:d6:23:f8:b1:ae:42:
                    a3:73:3c:5e:20:c9:a1:db:d2:4f:4e:ad:9b:e7:d4:
                    0c:0b:5c:15:e9:a2:7d:f9:34:18:d4:8a:1e:54:13:
                    a2:9d:03:59:d9:00:af:88:c3:13:d4:1a:26:9e:a5:
                    14:05:95:a0:38:49:dc:15:70:c4:97:ad:a7:78:29:
                    8c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:31:FB:4E:E5:63:CA:D1:B7:EA:FF:F7:E9:10:0A:91:69:C4:17:20
            X509v3 Authority Key Identifier:
                keyid:39:0A:04:12:F8:B5:EC:4F:3F:9F:DB:B3:A6:12:70:DB:D0:EA:9E:6B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/OQoEEvi17E8_n9uzphJw29Dqnms.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OQoEEvi17E8_n9uzphJw29Dqnms.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/UTH7TuVjytG36v_36RAKkWnEFyA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.123.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:b1:b0:d6:84:cf:ec:6c:f6:d0:24:c6:ea:5f:79:d0:76:d9:
         56:30:33:fd:40:11:a9:9f:0a:cc:e5:bb:08:f9:10:45:e6:64:
         8e:fc:b2:f7:1e:0a:54:ae:13:38:62:7f:5f:e5:bf:2d:13:c8:
         a1:30:78:91:c6:ac:b5:e3:05:77:9b:cc:a8:b7:0e:a4:16:8d:
         7b:fa:a1:ee:a3:4b:9a:a0:ac:d7:7a:ce:14:f7:19:65:53:01:
         f9:e0:83:d0:01:5c:7d:0c:17:a8:04:dd:d3:c9:11:12:59:a7:
         aa:30:aa:ac:e7:dd:e8:04:fb:5a:bc:c3:86:d2:c6:ea:35:bd:
         b3:df:00:fe:bd:40:0f:89:dd:ac:8f:2b:14:d2:ec:c4:6f:9b:
         61:13:90:7d:05:c9:c1:3e:b6:11:5d:cf:df:39:95:37:3f:9c:
         8f:e2:d6:ca:c3:08:50:24:6e:06:a6:52:44:1c:0f:bb:29:bf:
         3d:f7:a5:b2:89:2a:4a:98:c8:ed:e2:ed:2a:4b:4b:b7:a0:ce:
         ce:04:8c:4b:bc:b9:2a:2b:94:aa:8f:41:f3:72:b3:20:69:c1:
         57:f1:d9:87:33:e0:56:9a:2c:98:22:2b:70:eb:2d:e9:df:8f:
         76:af:5e:8c:a2:ab:cb:d8:8c:2d:92:b7:a2:8f:fc:fd:d4:0d:
         e4:47:5e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:28 2024 by rpki-client on console-fra.rpki-client.org