Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/ilI4GR4kR8G4iFJCv88-v-AfK7U.roa
File:                     ilI4GR4kR8G4iFJCv88-v-AfK7U.roa (raw, json)
Hash identifier:          00MI2D5WFNNKBqUo7Zwkta5EPmkB1b38o1c+EyHWENs=
Subject key identifier:   8A:52:38:19:1E:24:47:C1:B8:88:52:42:BF:CF:3E:BF:E0:1F:2B:B5
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       0C5A
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/ilI4GR4kR8G4iFJCv88-v-AfK7U.roa
Signing time:             Fri 01 Sep 2023 10:20:36 +0000
ROA not before:           Fri 01 Sep 2023 10:20:36 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     18424
IP address blocks:        121.50.149.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3162 (0xc5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Sep  1 10:20:36 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=8A5238191E2447C1B8885242BFCF3EBFE01F2BB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:58:cd:a9:66:ba:66:55:6f:bd:d8:cd:d6:22:
                    26:dc:c8:50:69:1f:b8:05:fe:6a:92:0c:b5:66:e6:
                    c2:19:75:3e:90:b7:2e:a6:d6:f7:de:37:cd:45:38:
                    98:c3:5d:94:bb:9c:47:de:db:bc:d6:e4:72:8f:4b:
                    6e:8e:39:3b:35:a8:24:77:cf:94:09:33:23:e3:5e:
                    e6:fd:18:0a:d8:91:b3:a7:7e:64:81:59:fa:cf:be:
                    69:6f:10:f6:60:5a:ff:65:fd:44:5c:2e:29:aa:b7:
                    f4:6c:e2:d7:31:f6:1b:f3:9d:f7:27:ce:45:d7:d7:
                    1d:fd:0c:7b:86:cf:74:b6:ac:34:58:d5:ae:6e:cd:
                    91:8d:ed:c8:4f:0a:15:1e:79:c0:fc:23:35:4a:76:
                    e6:f8:a3:70:ec:92:ae:c6:7e:ef:47:1b:84:6c:3a:
                    e3:14:f1:a5:91:2b:ab:ba:e6:29:8d:2e:19:fe:22:
                    d9:3a:a3:ec:49:80:b3:8d:10:cc:8a:72:81:29:f4:
                    0f:d1:f6:92:a5:d4:0a:67:5f:3b:6d:c1:b5:cd:57:
                    1e:51:ba:00:ee:6a:2b:34:4d:2c:56:5b:d2:46:3c:
                    89:3b:d1:14:b3:58:60:3f:29:47:7d:17:f7:f7:b3:
                    ef:ef:f8:36:f1:39:65:b1:33:0e:23:5c:8c:09:04:
                    b6:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:52:38:19:1E:24:47:C1:B8:88:52:42:BF:CF:3E:BF:E0:1F:2B:B5
            X509v3 Authority Key Identifier:
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/ilI4GR4kR8G4iFJCv88-v-AfK7U.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.50.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:0a:9f:b6:a5:d5:16:01:49:78:83:77:df:50:4a:a3:34:e0:
         09:06:16:9d:c8:4a:19:72:ac:07:b0:ac:29:08:67:08:15:6d:
         a5:99:de:a1:9f:8b:dc:32:87:5b:1a:e7:d0:d3:39:5e:3d:ba:
         7a:1b:0a:06:12:ae:b8:e0:ef:86:ec:f7:11:b5:12:6a:08:5b:
         d5:a2:f5:4b:a5:9d:c6:3f:fd:b4:80:2f:03:10:c4:e0:c1:1d:
         32:75:12:c5:5d:b1:12:85:47:a7:54:a7:fa:ee:49:c3:e5:8c:
         ed:59:fd:f0:70:1d:08:19:b2:a9:b0:cb:f1:dd:43:c7:2e:05:
         c7:cb:90:9e:06:56:a5:b5:d5:14:81:4d:e8:65:f7:75:70:85:
         5c:26:7a:67:39:64:c7:bc:58:f3:b7:dc:4d:47:dc:98:ca:85:
         65:1d:4c:96:b9:4e:89:a2:ed:70:4a:60:90:99:69:62:32:7c:
         9f:d5:13:b0:01:c3:a7:d6:b3:56:a1:3f:dd:34:9b:5a:c2:15:
         ef:3e:3b:c5:4e:2e:1e:7f:33:e2:2f:9a:13:a4:40:17:38:f6:
         ac:da:90:84:a7:9f:a5:6d:09:e5:27:59:e3:7c:86:7f:f5:0d:
         fe:03:bc:f7:c2:14:1c:c1:11:3b:55:81:f6:aa:b6:81:12:82:
         d7:8f:37:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:28 2024 by rpki-client on console-fra.rpki-client.org