Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/VIBO/bADfETfUu5uGmq_ZMj5a6RQt9VU.roa
File:                     bADfETfUu5uGmq_ZMj5a6RQt9VU.roa (raw, json)
Hash identifier:          hzDNf4hr1urteBMoOY1q8RvnG1EZZoL6UcrCXTXP2Co=
Subject key identifier:   6C:00:DF:11:37:D4:BB:9B:86:9A:AF:D9:32:3E:5A:E9:14:2D:F5:55
Certificate issuer:       /CN=52A3F0198009803B5165DE5ECB61FD451246CFAB
Certificate serial:       08EE
Authority key identifier: 52:A3:F0:19:80:09:80:3B:51:65:DE:5E:CB:61:FD:45:12:46:CF:AB
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/UqPwGYAJgDtRZd5ey2H9RRJGz6s.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/bADfETfUu5uGmq_ZMj5a6RQt9VU.roa
Signing time:             Sun 07 Feb 2021 11:33:03 +0000
ROA not before:           Sun 07 Feb 2021 11:33:03 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24157
IP address blocks:        43.255.88.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2286 (0x8ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52A3F0198009803B5165DE5ECB61FD451246CFAB
        Validity
            Not Before: Feb  7 11:33:03 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=6C00DF1137D4BB9B869AAFD9323E5AE9142DF555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:64:0c:ec:95:a2:d4:15:72:2a:aa:d3:bd:bd:
                    fa:0b:88:20:d0:60:bd:99:01:83:47:46:d8:87:39:
                    6e:e0:5c:be:93:c6:db:0e:06:c3:f2:45:96:d5:73:
                    ef:ec:9d:f9:c9:5d:82:8a:27:c8:f3:cb:b8:3f:df:
                    8c:e8:fd:db:ae:35:d5:fd:2e:0c:5a:06:a6:fb:d8:
                    19:a9:12:07:2a:69:08:39:69:b6:55:a9:8c:0c:1e:
                    f1:4c:e3:2c:34:6e:4a:3e:b1:ec:51:1c:2c:0e:62:
                    9f:37:92:05:bc:69:51:3f:e7:22:41:8a:02:5d:95:
                    57:7c:71:83:7c:eb:e8:b0:79:ab:59:f8:02:6d:81:
                    14:38:61:4b:9c:7f:01:dd:a3:38:c5:7f:ec:e7:04:
                    94:fa:de:c8:41:7c:23:49:c8:9b:cf:fb:b8:0a:f0:
                    0b:22:7d:be:be:ae:bc:17:ed:fc:2c:af:d0:79:f5:
                    86:bf:36:b5:5b:fb:0b:5d:53:cf:34:8f:83:cd:e2:
                    2f:18:fd:fc:a0:03:a1:b9:78:8e:dd:6b:ad:5b:49:
                    fd:15:30:ff:a2:9a:d2:1b:26:4a:11:a6:a3:69:ef:
                    ec:24:38:36:ab:a7:17:e0:23:ff:b0:ae:aa:28:53:
                    bc:75:fa:fa:f8:c0:96:42:59:b5:2b:a3:77:d9:8a:
                    e1:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:00:DF:11:37:D4:BB:9B:86:9A:AF:D9:32:3E:5A:E9:14:2D:F5:55
            X509v3 Authority Key Identifier:
                keyid:52:A3:F0:19:80:09:80:3B:51:65:DE:5E:CB:61:FD:45:12:46:CF:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/UqPwGYAJgDtRZd5ey2H9RRJGz6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UqPwGYAJgDtRZd5ey2H9RRJGz6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/bADfETfUu5uGmq_ZMj5a6RQt9VU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.255.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:13:4f:d3:8b:42:fe:3e:de:85:9f:63:58:09:49:6b:47:25:
         90:b9:2a:c8:19:8b:48:e2:ca:bf:eb:48:03:b7:1b:f6:10:5c:
         ed:01:bb:9f:9b:86:27:32:bc:72:a7:d0:6a:20:e4:2b:dc:95:
         19:7c:fb:ed:1e:fa:fc:3d:ed:e5:7d:e0:dd:1d:ee:5c:68:c5:
         6b:d2:7d:01:ec:1c:9a:72:0e:55:b6:de:77:b5:5a:0e:03:b0:
         67:62:f2:2f:eb:a3:ea:1b:2e:b3:6d:11:12:dc:e8:51:f7:40:
         76:5b:92:8e:0e:d2:94:25:af:2e:95:98:06:f2:b0:35:18:4b:
         d5:86:36:d9:f9:85:df:12:ef:95:71:51:d9:6e:38:d7:a7:b1:
         eb:4d:fb:be:4d:42:90:31:ee:4d:59:59:eb:5c:7a:ac:a4:37:
         df:7b:d0:6a:8f:fc:20:91:d5:c7:d5:a8:7a:5e:d9:c9:8f:23:
         3a:a0:e8:d8:3c:c5:9c:df:d0:da:f7:ea:e9:96:50:03:b9:67:
         80:b8:52:a6:64:e0:57:92:e0:ae:17:83:0a:9e:80:41:04:09:
         71:85:39:4b:15:5b:86:91:f4:64:bb:7e:b4:d9:87:2d:9d:78:
         4f:e1:d7:1b:5a:70:c4:34:45:fa:11:4f:3d:01:87:8b:ac:8e:
         25:a7:ef:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:51 2024 by rpki-client on console-ams.rpki-client.org