Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/iVJA7XGqOvvlMKGGS7iH_wElSLo.roa
File:                     iVJA7XGqOvvlMKGGS7iH_wElSLo.roa (raw, json)
Hash identifier:          J67/fcfLsYQ5zDHZkL7theBIvkx7Q+OmHF8oodYQBLU=
Subject key identifier:   89:52:40:ED:71:AA:3A:FB:E5:30:A1:86:4B:B8:87:FF:01:25:48:BA
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       0C60
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/iVJA7XGqOvvlMKGGS7iH_wElSLo.roa
Signing time:             Fri 01 Sep 2023 10:20:37 +0000
ROA not before:           Fri 01 Sep 2023 10:20:37 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     18424
IP address blocks:        121.50.144.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3168 (0xc60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Sep  1 10:20:37 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=895240ED71AA3AFBE530A1864BB887FF012548BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:60:84:75:42:19:b4:eb:d0:ae:be:35:b2:d9:
                    a4:43:fd:35:0f:c7:fa:80:fc:27:d6:d7:6c:29:af:
                    bd:ec:2a:12:b1:04:ad:00:ee:f3:06:bf:5d:4d:7c:
                    d7:b7:38:e8:01:ba:b0:84:22:1b:86:ef:e8:6f:5f:
                    bd:00:ee:eb:17:28:fe:ed:1e:ab:5b:52:5f:d2:3f:
                    ec:79:09:e4:23:84:a3:9c:d8:4c:46:d5:be:be:da:
                    12:92:b5:2e:87:d0:ac:30:c1:8f:05:e2:33:d3:e3:
                    ed:58:a7:6b:4e:28:28:48:ea:e9:73:c5:6a:6d:21:
                    c2:57:d9:70:bb:8c:31:f2:5b:b2:cf:4f:6e:95:7c:
                    63:b3:4e:70:f5:1b:6c:89:ae:76:ed:d6:42:7c:a3:
                    80:0a:57:35:95:4f:84:26:41:2d:55:9c:5e:6e:4e:
                    2b:f8:e7:92:5f:b9:68:7a:ff:b4:31:df:c6:05:61:
                    4e:9f:74:e4:f3:5b:b7:0d:e7:9b:97:52:5d:ab:36:
                    09:0e:f8:bc:0d:ec:38:cb:4a:23:e8:a1:e9:6b:85:
                    36:8d:ab:99:bf:34:5e:fd:28:29:75:3b:dd:20:a8:
                    3f:a6:b8:a8:ef:0d:a5:ab:08:37:0f:33:93:67:24:
                    65:06:7a:98:10:9d:a1:2c:25:ab:89:83:75:5a:b5:
                    9b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:52:40:ED:71:AA:3A:FB:E5:30:A1:86:4B:B8:87:FF:01:25:48:BA
            X509v3 Authority Key Identifier:
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/iVJA7XGqOvvlMKGGS7iH_wElSLo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.50.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3f:70:8f:0e:ba:b6:ef:ed:86:b0:b8:64:58:6b:d5:c3:2b:bf:
         95:6b:7d:4f:19:12:31:ba:d4:92:f0:7b:04:4a:7a:5d:62:50:
         b8:80:bb:ae:31:30:85:69:61:8a:7a:2a:83:9e:34:66:2c:0e:
         16:67:b0:36:1e:57:80:ee:61:87:35:9d:d8:8b:5f:11:38:2f:
         dd:d6:ff:3b:1a:6e:34:43:27:f9:c2:3a:3a:84:74:b0:b9:41:
         15:2b:c8:55:b8:ad:6b:d0:f8:82:0e:08:e4:31:c8:67:68:4d:
         75:f4:84:51:bc:34:1e:1b:47:dc:cc:0a:a6:5a:75:0b:da:92:
         da:5d:75:10:73:20:83:6c:32:05:64:a8:d4:9c:d9:d3:af:bf:
         e7:8e:11:73:f5:ff:1c:69:b0:28:9e:3a:cb:18:48:7f:31:7d:
         d7:7c:bf:a7:89:0b:46:6e:43:93:1b:73:96:e9:03:cb:b9:84:
         cd:06:99:0d:a5:41:9d:ce:9e:c5:32:89:48:b4:9b:43:c2:29:
         08:11:2c:16:31:2a:52:2a:10:b9:81:90:0a:5a:53:5b:a7:2c:
         f8:18:01:f8:0e:31:ac:57:61:08:5d:eb:63:0c:23:78:ac:ab:
         05:82:72:05:6b:32:55:2f:42:38:77:fe:68:f4:4e:66:d5:5d:
         92:07:d1:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:28 2024 by rpki-client on console-fra.rpki-client.org