Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/VIBO/e9soiJAFvkVvyjRooYh7PepO7-0.roa
File:                     e9soiJAFvkVvyjRooYh7PepO7-0.roa (raw, json)
Hash identifier:          njXuvsEKvs7tKIdqYlfSN/ntY1QuORECxAwBdY8ZB+8=
Subject key identifier:   7B:DB:28:88:90:05:BE:45:6F:CA:34:68:A1:88:7B:3D:EA:4E:EF:ED
Certificate issuer:       /CN=52A3F0198009803B5165DE5ECB61FD451246CFAB
Certificate serial:       08E8
Authority key identifier: 52:A3:F0:19:80:09:80:3B:51:65:DE:5E:CB:61:FD:45:12:46:CF:AB
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/UqPwGYAJgDtRZd5ey2H9RRJGz6s.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/e9soiJAFvkVvyjRooYh7PepO7-0.roa
Signing time:             Sun 07 Feb 2021 11:32:59 +0000
ROA not before:           Sun 07 Feb 2021 11:32:59 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24157
IP address blocks:        180.217.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2280 (0x8e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52A3F0198009803B5165DE5ECB61FD451246CFAB
        Validity
            Not Before: Feb  7 11:32:59 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=7BDB28889005BE456FCA3468A1887B3DEA4EEFED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c2:72:0a:20:4b:25:03:88:b5:09:9d:ba:23:
                    45:d8:49:56:37:68:27:a1:75:fa:e3:b6:a6:ff:df:
                    e9:75:c3:7c:d6:96:9b:10:54:16:5a:2b:40:6f:d6:
                    71:c7:ab:49:84:9c:17:96:e2:a9:0a:92:b9:57:95:
                    8c:b4:69:07:83:d6:a5:6d:10:eb:81:5d:2d:86:61:
                    3a:ab:85:91:00:88:b4:fc:a1:ab:5f:24:16:a2:47:
                    66:d8:b2:54:c0:fe:5e:80:42:d6:90:11:cf:14:de:
                    1c:d5:04:40:68:45:4f:1c:df:e6:9c:2e:c5:a4:9c:
                    c6:a5:45:28:a2:d0:eb:07:e7:08:b2:ba:d1:12:2c:
                    c0:63:6c:61:52:e4:9a:94:c8:2c:02:b7:a6:62:1c:
                    3d:6d:10:68:cb:44:4a:f8:89:0a:ea:60:ee:6b:13:
                    3c:a2:db:e4:da:b0:d3:e1:5f:34:10:b5:5d:de:4d:
                    91:6e:94:ef:ac:d7:53:f8:f8:6b:f3:d8:c4:e9:11:
                    09:e0:2e:d4:59:70:84:a9:89:ee:af:e1:28:cb:24:
                    f9:c1:8c:7a:08:f6:4b:98:dc:5e:a0:0d:bc:93:62:
                    8c:9a:79:a6:34:92:05:33:a9:a1:b0:f6:ff:26:56:
                    c5:8b:d8:a9:2e:c9:fe:b8:9a:d3:a6:6b:61:1d:a3:
                    be:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:DB:28:88:90:05:BE:45:6F:CA:34:68:A1:88:7B:3D:EA:4E:EF:ED
            X509v3 Authority Key Identifier:
                keyid:52:A3:F0:19:80:09:80:3B:51:65:DE:5E:CB:61:FD:45:12:46:CF:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/UqPwGYAJgDtRZd5ey2H9RRJGz6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UqPwGYAJgDtRZd5ey2H9RRJGz6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/e9soiJAFvkVvyjRooYh7PepO7-0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.217.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         17:5f:49:af:d3:4a:f6:ac:0b:4e:7a:42:91:36:55:38:df:db:
         c4:fe:55:f7:57:9f:10:bf:bd:f0:2f:86:8d:3d:6b:c8:f0:f7:
         60:f2:0b:86:aa:c4:eb:2e:1e:8e:8e:b2:81:3e:09:19:d4:95:
         6b:70:af:d9:47:cd:04:60:1a:48:d2:f0:32:87:af:9d:ea:6b:
         32:ca:15:36:27:ee:cc:b6:e7:c5:8b:8c:d5:86:cb:43:33:9c:
         6f:de:94:06:af:ee:07:4a:55:66:9b:14:dd:ec:ff:97:2e:0b:
         77:78:58:93:16:a4:0f:e7:33:2b:01:30:05:ff:c1:7a:89:24:
         97:45:7e:06:ca:c1:83:c3:d6:cd:9d:41:4c:d9:a4:ec:a4:20:
         7b:48:3f:12:ef:bd:e2:6f:c3:5a:65:3c:e1:c9:a2:94:6e:89:
         d7:d5:25:a0:75:98:f2:c2:4b:ba:6e:d2:18:3c:ac:99:05:36:
         a0:84:06:44:8d:d1:52:9c:b7:dd:78:1f:9c:27:a4:09:d1:4e:
         6e:3d:8f:30:be:88:b4:2d:6e:ca:ec:a3:09:35:44:2f:4d:c5:
         ec:fd:35:13:1e:b8:b0:90:96:f0:8d:c9:6b:22:71:ef:87:09:
         21:93:fa:e1:1a:11:e6:ea:d5:cd:02:62:85:61:e9:83:6e:c7:
         5b:4c:81:a4
-----BEGIN CERTIFICATE-----
MIIEzTCCA7WgAwIBAgICCOgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTJB
M0YwMTk4MDA5ODAzQjUxNjVERTVFQ0I2MUZENDUxMjQ2Q0ZBQjAeFw0yMTAyMDcx
MTMyNTlaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDdCREIyODg4OTAwNUJF
NDU2RkNBMzQ2OEExODg3QjNERUE0RUVGRUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCswnIKIEslA4i1CZ26I0XYSVY3aCehdfrjtqb/3+l1w3zWlpsQ
VBZaK0Bv1nHHq0mEnBeW4qkKkrlXlYy0aQeD1qVtEOuBXS2GYTqrhZEAiLT8oatf
JBaiR2bYslTA/l6AQtaQEc8U3hzVBEBoRU8c3+acLsWknMalRSii0OsH5wiyutES
LMBjbGFS5JqUyCwCt6ZiHD1tEGjLREr4iQrqYO5rEzyi2+TasNPhXzQQtV3eTZFu
lO+s11P4+Gvz2MTpEQngLtRZcISpie6v4SjLJPnBjHoI9kuY3F6gDbyTYoyaeaY0
kgUzqaGw9v8mVsWL2Kkuyf64mtOma2Edo74RAgMBAAGjggHpMIIB5TAdBgNVHQ4E
FgQUe9soiJAFvkVvyjRooYh7PepO7+0wHwYDVR0jBBgwFoAUUqPwGYAJgDtRZd5e
y2H9RRJGz6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVklCTy9V
cVB3R1lBSmdEdFJaZDVleTJIOVJSSkd6NnMuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L1VxUHdHWUFKZ0R0UlpkNWV5Mkg5UlJKR3o2cy5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL1ZJQk8vZTlzb2lKQUZ2a1Z2eWpSb29ZaDdQ
ZXBPNy0wLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDALTZMA0G
CSqGSIb3DQEBCwUAA4IBAQAXX0mv00r2rAtOekKRNlU439vE/lX3V58Qv73wL4aN
PWvI8Pdg8guGqsTrLh6OjrKBPgkZ1JVrcK/ZR80EYBpI0vAyh6+d6msyyhU2J+7M
tufFi4zVhstDM5xv3pQGr+4HSlVmmxTd7P+XLgt3eFiTFqQP5zMrATAF/8F6iSSX
RX4GysGDw9bNnUFM2aTspCB7SD8S773ib8NaZTzhyaKUbonX1SWgdZjywku6btIY
PKyZBTaghAZEjdFSnLfdeB+cJ6QJ0U5uPY8wvoi0LW7K7KMJNUQvTcXs/TUTHriw
kJbwjclrInHvhwkhk/rhGhHm6tXNAmKFYemDbsdbTIGk
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:51 2024 by rpki-client on console-ams.rpki-client.org