Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/VIBO/t3r0dMN5sRm-maY1KGZMLmX_L5Y.roa
File:                     t3r0dMN5sRm-maY1KGZMLmX_L5Y.roa (raw, json)
Hash identifier:          X4qKkxZuAS4d2p2VrVZ7CMsEEwnhCLe28rHx1NXXNPQ=
Subject key identifier:   B7:7A:F4:74:C3:79:B1:19:BE:99:A6:35:28:66:4C:2E:65:FF:2F:96
Certificate issuer:       /CN=52A3F0198009803B5165DE5ECB61FD451246CFAB
Certificate serial:       0990
Authority key identifier: 52:A3:F0:19:80:09:80:3B:51:65:DE:5E:CB:61:FD:45:12:46:CF:AB
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/UqPwGYAJgDtRZd5ey2H9RRJGz6s.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/t3r0dMN5sRm-maY1KGZMLmX_L5Y.roa
Signing time:             Wed 29 Sep 2021 02:36:57 +0000
ROA not before:           Wed 29 Sep 2021 02:36:57 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24157
IP address blocks:        116.89.128.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2448 (0x990)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52A3F0198009803B5165DE5ECB61FD451246CFAB
        Validity
            Not Before: Sep 29 02:36:57 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=B77AF474C379B119BE99A63528664C2E65FF2F96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d9:09:12:ea:b0:20:c9:ff:66:df:8e:d5:e8:
                    01:21:69:71:2a:59:aa:69:ba:e6:33:06:82:50:18:
                    4d:e5:17:b2:8e:23:a8:20:d0:a1:36:69:fb:b4:47:
                    15:f6:96:83:16:12:18:26:7a:c7:a8:12:8e:cd:f3:
                    d8:67:a3:fb:7c:c3:fe:24:5b:68:61:7b:64:34:02:
                    85:39:38:da:05:45:13:a8:95:db:bc:4d:a8:82:b8:
                    27:79:b2:a6:81:d4:7d:45:ec:b9:d5:21:f1:32:40:
                    72:f6:59:2a:cb:9a:16:78:52:94:e9:a8:07:98:5b:
                    be:c4:8b:c3:35:38:63:7e:63:98:32:10:df:fe:f1:
                    10:35:8c:84:68:90:28:f3:de:5f:52:a2:f8:02:cb:
                    6f:a0:7d:7e:7c:34:4f:c5:95:97:59:8e:31:5e:3f:
                    8b:8f:c8:fe:4b:da:53:cd:ec:c1:e6:67:b3:70:48:
                    81:6b:a0:db:e5:a4:bf:9c:11:ed:65:7b:f8:61:ed:
                    50:2b:be:66:17:3d:32:c2:07:bf:93:cd:bb:c9:ab:
                    ae:e9:ba:80:a9:ab:58:76:f4:6e:14:c9:81:8d:ee:
                    31:eb:d2:98:ea:e7:ac:63:d5:25:92:bd:ec:ee:86:
                    8a:d1:93:f6:a0:1b:e4:68:b3:27:ae:e6:53:2c:d6:
                    40:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:7A:F4:74:C3:79:B1:19:BE:99:A6:35:28:66:4C:2E:65:FF:2F:96
            X509v3 Authority Key Identifier:
                keyid:52:A3:F0:19:80:09:80:3B:51:65:DE:5E:CB:61:FD:45:12:46:CF:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/UqPwGYAJgDtRZd5ey2H9RRJGz6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UqPwGYAJgDtRZd5ey2H9RRJGz6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/t3r0dMN5sRm-maY1KGZMLmX_L5Y.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.89.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4b:65:43:c5:c2:0f:92:69:05:f9:ab:e8:55:e7:42:67:4b:41:
         e2:11:b3:cd:a5:27:a6:d0:3f:30:99:ec:26:b8:c9:34:56:cf:
         23:d1:20:4c:3f:18:c4:dc:1b:5f:21:10:ae:2d:d2:21:e9:7c:
         03:7b:47:36:ca:b9:e7:45:6a:12:c8:5a:02:bc:09:57:b4:da:
         b6:ad:64:66:79:e5:a7:69:62:27:0f:0a:ac:1f:76:98:46:fc:
         2d:e5:85:76:dd:df:2a:7b:9d:8a:6a:82:cd:b2:56:00:f2:4c:
         1e:97:f8:ea:62:3e:79:bf:0e:aa:37:00:46:77:bf:71:10:ed:
         72:a1:14:44:13:0f:61:9c:a4:ac:9f:5b:a8:ba:31:ce:ce:e8:
         af:f0:ef:06:22:71:0f:b3:62:ea:aa:56:fa:00:be:40:c1:5c:
         47:c3:78:7b:90:4b:18:e7:34:ec:5c:48:bf:c2:e4:f3:ba:59:
         9b:d4:bb:9d:a0:66:87:6e:f4:29:8f:b4:41:77:91:6d:98:dd:
         45:0a:d5:d6:96:55:70:a8:df:ea:64:fc:9d:d4:82:5a:8d:cc:
         9d:35:aa:f2:9a:9a:c4:c6:6e:20:dd:4c:ba:c5:9b:d1:4b:a0:
         42:e3:e8:d4:8a:80:83:a6:94:5e:59:f7:2c:ba:b5:ee:d7:90:
         93:30:2b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:06 2024 by rpki-client on console-fra.rpki-client.org