Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/VIBO/H11fayHEosZveM-F9REP-48FSLw.roa
File:                     H11fayHEosZveM-F9REP-48FSLw.roa (raw, json)
Hash identifier:          iimGFDN0PmvGiAGggTHrPBLkEUhFJHPnfbmrNjLqCW8=
Subject key identifier:   1F:5D:5F:6B:21:C4:A2:C6:6F:78:CF:85:F5:11:0F:FB:8F:05:48:BC
Certificate issuer:       /CN=52A3F0198009803B5165DE5ECB61FD451246CFAB
Certificate serial:       08E2
Authority key identifier: 52:A3:F0:19:80:09:80:3B:51:65:DE:5E:CB:61:FD:45:12:46:CF:AB
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/UqPwGYAJgDtRZd5ey2H9RRJGz6s.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/H11fayHEosZveM-F9REP-48FSLw.roa
Signing time:             Sun 07 Feb 2021 11:32:55 +0000
ROA not before:           Sun 07 Feb 2021 11:32:55 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24157
IP address blocks:        110.50.128.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2274 (0x8e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52A3F0198009803B5165DE5ECB61FD451246CFAB
        Validity
            Not Before: Feb  7 11:32:55 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=1F5D5F6B21C4A2C66F78CF85F5110FFB8F0548BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e9:5b:0e:30:0b:c0:32:1e:c3:16:75:b7:da:
                    32:65:9e:8e:bf:e3:a3:ae:b3:86:e4:9c:41:4a:69:
                    81:b1:64:c4:df:bc:ed:06:79:b2:13:a3:09:43:51:
                    81:15:32:34:83:31:2d:e8:ab:63:3f:07:53:0b:5c:
                    46:c8:2c:da:d1:07:cf:f5:e7:5f:dd:2c:98:f7:dd:
                    9f:bb:b9:7d:ca:79:de:f8:fa:20:2d:d2:94:46:fa:
                    5c:fe:a0:8d:47:c0:c2:66:50:7b:c9:b8:de:ed:7d:
                    3d:c6:1e:64:d2:d7:72:a6:ae:58:56:18:ed:32:40:
                    0e:fc:46:da:30:6c:36:b4:16:b8:0b:87:38:55:a9:
                    f2:fc:0e:c9:3a:76:b2:e3:ad:1e:84:4d:e0:46:a7:
                    a1:93:a1:28:f6:80:7c:ce:d4:16:12:3f:91:f3:da:
                    1e:eb:e3:28:3d:0a:2a:f7:f8:a4:01:26:da:a6:e6:
                    86:9e:a6:bc:29:8b:ad:57:9c:c3:36:58:5f:c2:02:
                    86:a6:6b:d2:1d:0b:30:da:d8:98:d9:c9:5a:11:9a:
                    55:32:5e:aa:b7:22:58:28:c7:5d:39:03:42:82:49:
                    bb:ab:7d:84:df:72:f1:ec:1b:8e:1b:df:95:09:10:
                    7c:d9:20:3c:03:85:ef:b9:ef:52:45:6f:72:e4:aa:
                    5a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:5D:5F:6B:21:C4:A2:C6:6F:78:CF:85:F5:11:0F:FB:8F:05:48:BC
            X509v3 Authority Key Identifier:
                keyid:52:A3:F0:19:80:09:80:3B:51:65:DE:5E:CB:61:FD:45:12:46:CF:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/UqPwGYAJgDtRZd5ey2H9RRJGz6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UqPwGYAJgDtRZd5ey2H9RRJGz6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/H11fayHEosZveM-F9REP-48FSLw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.50.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         67:22:27:7c:9d:96:0a:8f:c2:fd:77:d7:7e:66:6c:70:44:06:
         33:de:74:c7:8c:01:2e:be:87:88:97:66:d0:fc:7c:43:f5:43:
         d5:58:cd:6a:ad:1d:0a:fa:e5:0b:ff:ea:29:f9:32:96:65:7e:
         c0:84:a6:05:4f:f1:a9:0e:23:49:11:9d:69:96:59:44:2c:e6:
         12:ba:e1:ca:87:1e:b7:43:42:da:e1:22:cf:2e:55:9b:e9:3e:
         db:6e:3d:bc:08:c3:9f:20:13:4e:dc:a3:43:2d:03:00:c2:93:
         fd:5f:32:65:dd:f6:a4:a9:9b:5d:5d:b2:a8:3e:98:91:31:95:
         15:b0:ef:b8:ea:d3:4e:56:f8:3b:4e:32:a1:6b:3f:c8:05:75:
         2b:6c:a3:6f:96:ff:cc:37:93:b5:d1:9e:05:33:a5:57:5f:5f:
         4b:03:f2:c6:be:c7:fb:45:bb:47:55:2e:81:72:a8:56:fa:f0:
         e0:21:3d:2d:49:8e:e6:f9:86:af:de:d0:b7:55:6b:d0:56:08:
         9e:a4:dc:79:8b:e6:cc:3e:ed:12:93:71:c8:87:90:ad:52:cd:
         48:79:ce:42:df:f8:d0:9b:0d:5f:bd:f1:44:20:f6:0a:87:90:
         b4:73:d0:eb:e5:0d:3c:c7:01:dd:54:59:4a:a2:a3:ba:88:74:
         eb:46:bb:76
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICCOIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTJB
M0YwMTk4MDA5ODAzQjUxNjVERTVFQ0I2MUZENDUxMjQ2Q0ZBQjAeFw0yMTAyMDcx
MTMyNTVaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDFGNUQ1RjZCMjFDNEEy
QzY2Rjc4Q0Y4NUY1MTEwRkZCOEYwNTQ4QkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCz6VsOMAvAMh7DFnW32jJlno6/46Ous4bknEFKaYGxZMTfvO0G
ebITowlDUYEVMjSDMS3oq2M/B1MLXEbILNrRB8/151/dLJj33Z+7uX3Ked74+iAt
0pRG+lz+oI1HwMJmUHvJuN7tfT3GHmTS13KmrlhWGO0yQA78RtowbDa0FrgLhzhV
qfL8Dsk6drLjrR6ETeBGp6GToSj2gHzO1BYSP5Hz2h7r4yg9Cir3+KQBJtqm5oae
prwpi61XnMM2WF/CAoama9IdCzDa2JjZyVoRmlUyXqq3Ilgox105A0KCSburfYTf
cvHsG44b35UJEHzZIDwDhe+571JFb3LkqlolAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUH11fayHEosZveM+F9REP+48FSLwwHwYDVR0jBBgwFoAUUqPwGYAJgDtRZd5e
y2H9RRJGz6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVklCTy9V
cVB3R1lBSmdEdFJaZDVleTJIOVJSSkd6NnMuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L1VxUHdHWUFKZ0R0UlpkNWV5Mkg5UlJKR3o2cy5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL1ZJQk8vSDExZmF5SEVvc1p2ZU0tRjlSRVAt
NDhGU0x3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBm4ygDAN
BgkqhkiG9w0BAQsFAAOCAQEAZyInfJ2WCo/C/XfXfmZscEQGM950x4wBLr6HiJdm
0Px8Q/VD1VjNaq0dCvrlC//qKfkylmV+wISmBU/xqQ4jSRGdaZZZRCzmErrhyoce
t0NC2uEizy5Vm+k+2249vAjDnyATTtyjQy0DAMKT/V8yZd32pKmbXV2yqD6YkTGV
FbDvuOrTTlb4O04yoWs/yAV1K2yjb5b/zDeTtdGeBTOlV19fSwPyxr7H+0W7R1Uu
gXKoVvrw4CE9LUmO5vmGr97Qt1Vr0FYInqTceYvmzD7tEpNxyIeQrVLNSHnOQt/4
0JsNX73xRCD2CoeQtHPQ6+UNPMcB3VRZSqKjuoh060a7dg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:51 2024 by rpki-client on console-ams.rpki-client.org