Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/VIBO/teGk6bIAFATJK8R_yUj-akCtzis.roa
File:                     teGk6bIAFATJK8R_yUj-akCtzis.roa (raw, json)
Hash identifier:          oOEDpNdgKb4s6VE193MSwKIjVKT+bFvBzfKD6AujUz0=
Subject key identifier:   B5:E1:A4:E9:B2:00:14:04:C9:2B:C4:7F:C9:48:FE:6A:40:AD:CE:2B
Certificate issuer:       /CN=52A3F0198009803B5165DE5ECB61FD451246CFAB
Certificate serial:       0A83
Authority key identifier: 52:A3:F0:19:80:09:80:3B:51:65:DE:5E:CB:61:FD:45:12:46:CF:AB
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/UqPwGYAJgDtRZd5ey2H9RRJGz6s.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/teGk6bIAFATJK8R_yUj-akCtzis.roa
Signing time:             Thu 15 Sep 2022 02:37:57 +0000
ROA not before:           Thu 15 Sep 2022 02:37:57 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24157
IP address blocks:        110.50.128.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2691 (0xa83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52A3F0198009803B5165DE5ECB61FD451246CFAB
        Validity
            Not Before: Sep 15 02:37:57 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=B5E1A4E9B2001404C92BC47FC948FE6A40ADCE2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:15:63:21:96:9c:9d:fa:fd:93:3d:8d:6e:6e:
                    ca:b6:55:fb:e4:9b:a5:02:41:eb:ed:41:ca:55:1a:
                    b9:0d:0c:97:bb:b7:46:19:2e:9d:da:bb:11:a6:af:
                    d5:de:95:a5:35:90:7b:72:f1:5a:b8:eb:72:15:3b:
                    2a:2e:46:4a:18:86:28:76:6e:c9:fd:b9:96:cd:cc:
                    8b:41:33:0f:32:26:40:09:93:55:ec:e6:62:15:d7:
                    0c:b6:a9:2b:ac:d9:ba:2d:df:35:f4:48:15:28:1c:
                    d6:0b:69:cd:03:9c:57:69:37:ea:6c:fa:e4:02:89:
                    8c:d9:b0:1a:d4:2e:9c:61:4e:2e:aa:9f:56:fb:8a:
                    e3:20:ad:7b:4c:f9:66:ba:d3:df:0b:56:d7:bc:1c:
                    52:fc:b5:75:ac:00:6b:b6:20:88:03:49:55:34:83:
                    63:08:f3:f8:49:3d:f1:18:8b:49:3e:a8:20:5d:19:
                    fd:d2:83:bb:94:9e:ed:5e:cd:c7:3a:bb:0e:d6:f6:
                    6c:63:a3:8c:61:da:f8:ed:e7:48:ae:b8:0e:79:5a:
                    2c:21:90:33:20:b1:23:80:96:1a:e7:0a:a2:d4:db:
                    aa:ee:ca:b4:a2:8b:71:c7:1a:c3:9e:cf:9e:b6:87:
                    34:76:6b:5d:7a:b1:45:61:dd:8f:a6:c6:0a:b6:bf:
                    d4:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:E1:A4:E9:B2:00:14:04:C9:2B:C4:7F:C9:48:FE:6A:40:AD:CE:2B
            X509v3 Authority Key Identifier:
                keyid:52:A3:F0:19:80:09:80:3B:51:65:DE:5E:CB:61:FD:45:12:46:CF:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/UqPwGYAJgDtRZd5ey2H9RRJGz6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UqPwGYAJgDtRZd5ey2H9RRJGz6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/teGk6bIAFATJK8R_yUj-akCtzis.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.50.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         1b:f2:f7:c4:f3:2a:2a:0c:51:91:28:4d:8c:16:47:ed:a4:7e:
         69:fc:e0:d3:12:e1:fa:4c:c1:d1:8e:f9:78:55:41:11:79:40:
         4a:ef:32:8c:ef:f2:9c:6e:9d:46:c9:3c:22:be:b7:c3:96:35:
         1e:75:0d:11:bb:3b:66:77:20:f6:7d:7d:f6:c4:43:74:f2:58:
         01:62:cb:ab:c9:9e:32:0e:4f:be:7f:e1:08:51:0e:3c:51:9e:
         e4:f0:f0:0a:20:c2:61:60:d8:ff:88:2c:23:99:93:62:e1:da:
         c1:e6:4d:45:d8:4d:1f:5c:eb:29:2c:0b:8f:cd:f0:27:59:fd:
         b1:a3:1d:f9:07:dc:a4:2b:59:07:93:a6:69:a6:27:8c:13:86:
         d0:51:2b:c6:db:49:e2:cc:46:25:a4:0c:d1:00:80:6a:d3:d8:
         e0:aa:98:13:66:2f:84:cb:82:9c:c1:29:a6:f7:0f:d7:1a:12:
         4a:fc:f8:7a:b0:4e:d1:bc:a5:d5:6f:67:37:4a:a2:16:3c:ee:
         10:6f:29:63:e3:65:1d:e3:2b:87:3c:3b:4b:50:73:17:10:1a:
         c5:5f:c2:e9:42:3e:7c:c1:9a:5d:ea:65:ec:90:5f:dc:3d:d5:
         04:7c:25:13:a2:72:2d:a4:b8:f1:e1:ff:45:f2:24:ac:bd:7a:
         b2:1d:91:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:51 2024 by rpki-client on console-ams.rpki-client.org