Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/VIBO/HIWxZplRLkpEdLUz1rJSAt6rs8s.roa
File:                     HIWxZplRLkpEdLUz1rJSAt6rs8s.roa (raw, json)
Hash identifier:          iIgbDeyFhjBYES15MkOXfiw94icFsi+m1qAV60UVLus=
Subject key identifier:   1C:85:B1:66:99:51:2E:4A:44:74:B5:33:D6:B2:52:02:DE:AB:B3:CB
Certificate issuer:       /CN=52A3F0198009803B5165DE5ECB61FD451246CFAB
Certificate serial:       0992
Authority key identifier: 52:A3:F0:19:80:09:80:3B:51:65:DE:5E:CB:61:FD:45:12:46:CF:AB
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/UqPwGYAJgDtRZd5ey2H9RRJGz6s.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/HIWxZplRLkpEdLUz1rJSAt6rs8s.roa
Signing time:             Wed 29 Sep 2021 02:36:57 +0000
ROA not before:           Wed 29 Sep 2021 02:36:57 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24157
IP address blocks:        110.50.128.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2450 (0x992)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52A3F0198009803B5165DE5ECB61FD451246CFAB
        Validity
            Not Before: Sep 29 02:36:57 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=1C85B16699512E4A4474B533D6B25202DEABB3CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:08:33:59:72:ad:5d:dc:3e:ca:48:a7:be:74:
                    5e:c5:02:a0:34:4b:f4:bc:a9:98:05:a7:92:0e:aa:
                    32:c6:73:fd:24:cd:c6:3b:9d:c3:49:e6:44:45:a9:
                    39:70:19:ed:2d:5a:bc:4f:ec:1d:98:88:29:15:87:
                    99:d9:2c:d6:da:cb:71:77:0f:57:e0:41:1f:f8:7b:
                    13:35:dc:b7:a3:60:e1:f1:6e:fa:82:d4:1d:2d:f3:
                    b3:e2:f7:6f:46:60:79:f5:f4:81:c3:e7:a4:39:85:
                    7f:bd:3d:e4:38:78:3a:f5:22:7a:c6:fb:a6:ff:f6:
                    d0:6f:93:dd:52:31:cc:ae:5c:65:91:7e:79:8a:95:
                    ad:d4:2f:9a:e1:04:5b:87:5c:d5:56:f5:81:b0:1d:
                    db:b1:8f:b3:25:f0:5f:aa:a6:df:18:c3:01:7e:86:
                    3a:af:b3:bf:fc:c1:28:37:fd:b4:f4:17:b6:c9:43:
                    23:16:7b:e0:4e:b1:a4:da:33:ec:4f:89:85:37:de:
                    18:f0:ad:df:77:0b:72:a5:db:9f:b9:1e:f6:a6:eb:
                    40:e0:f1:e4:78:a8:99:0a:0e:07:b0:f2:b2:00:c7:
                    2c:5d:91:5d:c9:20:22:51:31:60:f7:17:25:fa:cc:
                    c7:7a:d7:d0:fb:1b:ec:9b:6d:ca:75:20:55:54:f3:
                    52:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:85:B1:66:99:51:2E:4A:44:74:B5:33:D6:B2:52:02:DE:AB:B3:CB
            X509v3 Authority Key Identifier:
                keyid:52:A3:F0:19:80:09:80:3B:51:65:DE:5E:CB:61:FD:45:12:46:CF:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/UqPwGYAJgDtRZd5ey2H9RRJGz6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UqPwGYAJgDtRZd5ey2H9RRJGz6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/HIWxZplRLkpEdLUz1rJSAt6rs8s.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.50.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         2b:92:72:c3:79:1d:90:a3:99:b7:e4:9a:a4:14:35:e8:78:d8:
         03:eb:5d:be:f6:20:d0:ef:29:5f:5a:bd:bc:91:ff:36:99:44:
         0a:e3:1e:de:de:59:a6:11:5d:d6:2e:68:7c:31:a4:d4:7c:b4:
         3c:05:32:8c:d8:32:15:fd:37:24:46:95:4e:76:15:10:e8:ae:
         c0:87:fd:1c:db:93:62:c8:b2:15:49:17:04:10:b4:6a:69:cd:
         9c:5c:16:0b:1f:7c:bc:15:c1:50:43:08:23:92:7d:93:51:09:
         3f:d4:88:74:d3:9f:cd:72:f4:1a:75:9a:47:cc:ff:e4:19:b5:
         9b:2e:00:1e:53:4d:02:6f:9c:f2:90:f0:61:b5:bf:4a:0b:36:
         e9:55:d3:3d:cb:61:a6:b6:7b:6f:c9:35:0f:f8:5b:8b:1c:e9:
         a0:9a:89:22:b9:e5:9b:24:28:f3:04:2e:0d:65:40:81:a1:67:
         ad:54:f9:b0:6d:93:c3:5a:2c:86:ca:41:63:f1:59:e1:b3:b6:
         4a:97:ae:f7:68:31:2b:db:76:53:02:48:8f:97:26:a2:b8:35:
         c2:f7:cb:0c:13:f1:54:f5:3c:2a:b7:fa:dd:14:d3:1e:d6:67:
         f8:89:8e:09:44:cb:62:dc:c9:28:15:36:a6:c8:9b:ba:e1:b1:
         97:00:fb:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:06 2024 by rpki-client on console-fra.rpki-client.org