Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/VOCOM/rguLvhUwhopnegmWWrnerp_PzKw.roa
File:                     rguLvhUwhopnegmWWrnerp_PzKw.roa (raw, json)
Hash identifier:          NdLrLQoN9Q/Ckl0qOf0CCodI7gMR9ZVFhSbwMzhRnqs=
Subject key identifier:   AE:0B:8B:BE:15:30:86:8A:67:7A:09:96:5A:B9:DE:AE:9F:CF:CC:AC
Certificate issuer:       /CN=9E847108EBA0B550BC020FD9B1DC6DEB29E0DBEF
Certificate serial:       55
Authority key identifier: 9E:84:71:08:EB:A0:B5:50:BC:02:0F:D9:B1:DC:6D:EB:29:E0:DB:EF
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/noRxCOugtVC8Ag_Zsdxt6yng2-8.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/VOCOM/rguLvhUwhopnegmWWrnerp_PzKw.roa
Signing time:             Fri 01 Sep 2023 10:19:41 +0000
ROA not before:           Fri 01 Sep 2023 10:19:41 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     63897
IP address blocks:        103.178.37.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85 (0x55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E847108EBA0B550BC020FD9B1DC6DEB29E0DBEF
        Validity
            Not Before: Sep  1 10:19:41 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=AE0B8BBE1530868A677A09965AB9DEAE9FCFCCAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:83:57:a0:c6:de:de:42:b3:44:fb:87:94:be:
                    3a:a8:be:ec:64:cc:5d:7f:09:e2:80:2c:6b:d2:55:
                    cc:29:0c:00:32:d9:88:95:dd:40:a8:19:4c:c3:56:
                    9a:9e:8b:dc:38:b8:84:fd:d0:17:1c:6b:e3:c3:22:
                    65:10:81:05:60:f2:2f:da:40:48:ec:e8:74:c3:03:
                    58:8b:ef:7e:e5:7d:5a:88:e5:ec:e6:5c:d4:c3:fd:
                    39:e3:75:b8:63:3e:cc:e4:66:cd:ac:0a:43:1d:fb:
                    6f:62:6e:d6:4d:f6:48:56:d2:8c:f6:94:b4:e5:2b:
                    2d:77:85:cf:35:40:ea:8f:32:57:27:6f:0d:e3:7e:
                    c0:d5:e6:50:78:6b:b5:67:99:56:11:6b:41:47:9b:
                    4e:b9:c5:0c:0e:7b:d9:f3:bc:9c:5f:df:91:ab:3c:
                    50:34:9f:24:90:40:a3:6e:d9:ec:f4:78:df:69:ed:
                    b7:f8:ee:37:30:73:89:06:93:a3:f6:ab:f2:8c:58:
                    fa:fe:4b:bd:ee:70:af:26:e1:6b:93:5e:66:ca:85:
                    b1:48:0c:3e:4d:91:59:26:bb:94:a9:aa:38:65:d6:
                    10:3a:aa:4f:0d:76:a1:7a:d5:b8:d0:20:32:bd:39:
                    e2:b1:89:cc:8b:4a:52:94:49:42:ba:07:1f:d2:2b:
                    d7:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:0B:8B:BE:15:30:86:8A:67:7A:09:96:5A:B9:DE:AE:9F:CF:CC:AC
            X509v3 Authority Key Identifier:
                keyid:9E:84:71:08:EB:A0:B5:50:BC:02:0F:D9:B1:DC:6D:EB:29:E0:DB:EF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VOCOM/noRxCOugtVC8Ag_Zsdxt6yng2-8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/noRxCOugtVC8Ag_Zsdxt6yng2-8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VOCOM/rguLvhUwhopnegmWWrnerp_PzKw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:02:24:4d:0a:07:4a:d7:7e:85:03:b9:f1:5d:9e:b1:e1:c9:
         c9:f4:2c:c4:f5:9a:e1:4c:fa:e6:9a:c3:7b:eb:6e:bc:26:93:
         b1:4f:bb:7d:f2:c3:53:92:01:67:d9:75:1e:ce:cb:fe:a2:d9:
         36:2b:59:76:be:be:35:4b:9b:a1:c3:b9:f2:ad:47:64:7b:81:
         55:be:55:c2:f5:82:71:7a:69:01:6f:31:1f:e9:da:e5:66:01:
         bd:1a:8d:e0:eb:bf:b8:b7:62:64:27:03:28:6b:a1:8a:c1:2d:
         83:7d:35:71:0e:67:36:c7:05:43:18:b1:c2:53:2d:ee:04:51:
         49:ed:d3:84:60:81:de:9d:6d:82:d8:6c:ac:15:c1:44:08:9f:
         4c:34:90:5b:e6:53:02:1a:9b:77:13:e2:c7:35:0e:47:21:25:
         ad:bf:36:22:df:ae:28:a7:cc:b9:c8:03:ab:d6:43:d8:a0:cd:
         98:ee:e7:c0:1a:5e:2c:3d:10:a1:61:6b:d9:a9:7e:8f:3e:2a:
         c7:bc:00:cd:a6:82:de:d2:5e:2e:a7:2a:fd:64:2c:ad:b1:de:
         ef:b2:eb:20:7e:3b:65:73:34:3e:9a:4e:b9:9a:e3:18:41:81:
         90:e5:49:bf:48:7d:0b:d4:5f:bd:fd:98:70:d3:19:aa:14:7d:
         6b:6c:03:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:28 2024 by rpki-client on console-fra.rpki-client.org