Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/oCMiPvZEOIq4Uj3UA2L-5hFOCFg.roa
File:                     oCMiPvZEOIq4Uj3UA2L-5hFOCFg.roa (raw, json)
Hash identifier:          Z21z4eceYGICVcgz2U89Ch92aa4MRNx1qJlfIZYGt0s=
Subject key identifier:   A0:23:22:3E:F6:44:38:8A:B8:52:3D:D4:03:62:FE:E6:11:4E:08:58
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       0C5E
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/oCMiPvZEOIq4Uj3UA2L-5hFOCFg.roa
Signing time:             Fri 01 Sep 2023 10:20:36 +0000
ROA not before:           Fri 01 Sep 2023 10:20:36 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     24168
IP address blocks:        121.50.144.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3166 (0xc5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Sep  1 10:20:36 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=A023223EF644388AB8523DD40362FEE6114E0858
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f7:2a:a3:a0:69:d8:63:9e:97:cf:cc:d9:41:
                    0d:50:ac:5a:fe:28:17:17:b4:98:c2:cb:87:66:14:
                    d9:c6:7d:3d:4d:8f:9a:fb:f2:51:ad:e3:e3:99:b6:
                    fa:c9:08:13:3b:f8:a9:07:18:d3:05:b8:8c:58:a5:
                    3f:7b:1b:30:ad:e4:b3:6d:f0:a3:b7:29:74:3e:c7:
                    e9:31:b8:5b:7e:4f:93:7f:29:c1:40:1f:69:25:b0:
                    ff:5f:14:84:b4:12:34:49:ea:23:b2:62:80:04:56:
                    74:3c:a8:40:1d:a4:d1:45:cd:c7:95:a0:03:b3:ca:
                    b4:0d:ba:9a:ee:f9:95:f9:3a:65:fe:e7:43:86:5b:
                    a1:63:f5:f5:8a:58:44:0b:66:c8:53:7e:7f:a7:a6:
                    51:f9:50:2d:75:e7:49:6d:0a:6d:2a:38:91:7f:1e:
                    98:66:4a:92:40:47:e8:f7:27:52:74:81:de:06:b1:
                    d6:9f:1d:45:ab:69:b2:e0:86:17:98:db:17:58:a4:
                    47:e0:af:b4:f2:2d:fa:c4:27:b5:a1:4c:f9:6c:42:
                    e9:b4:0a:dc:6a:e9:37:5c:30:8a:fb:da:95:b7:c3:
                    e5:66:11:20:16:4a:42:e7:93:e8:28:d8:b9:8b:2a:
                    cc:7c:e6:bc:56:b3:3b:b0:f5:1c:ca:d7:10:3a:5b:
                    9c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:23:22:3E:F6:44:38:8A:B8:52:3D:D4:03:62:FE:E6:11:4E:08:58
            X509v3 Authority Key Identifier:
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/oCMiPvZEOIq4Uj3UA2L-5hFOCFg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.50.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         58:51:c2:02:fb:3a:13:65:0d:97:dc:06:85:58:27:4e:8b:dd:
         b9:f1:6d:d8:63:b7:e1:99:a6:c1:5a:ed:5a:ad:6e:03:f5:41:
         bc:03:e4:6d:c2:8e:c2:6c:b6:0d:59:3a:d7:6b:83:2a:6c:7f:
         fd:46:3d:c6:3d:20:47:03:46:6a:41:f8:6c:38:05:6e:2f:ee:
         1f:81:3d:8b:5e:2e:7d:9d:c1:17:6e:ba:c0:ce:9e:6f:88:d1:
         7b:ad:c3:4f:d4:3f:e2:34:bd:9c:3d:80:20:91:4a:1a:68:63:
         da:0f:bf:f9:ba:0e:bf:22:b6:cf:b2:33:98:6f:d1:d9:69:1c:
         fb:fe:a1:fa:23:f8:ce:30:a3:3a:fa:d0:d0:26:70:93:95:45:
         2e:28:68:f3:a5:f9:ff:6b:06:f0:62:fb:da:b6:ab:53:88:cb:
         61:cf:14:d7:a2:c8:97:14:1f:3d:32:cc:e6:20:ae:c9:df:0b:
         35:df:73:a8:99:21:ea:10:2d:f5:8f:26:cb:07:28:18:d5:af:
         76:9d:f5:b1:21:99:b3:3a:66:36:05:35:ca:89:61:8e:05:dc:
         9f:9a:e8:e5:e7:78:8f:d4:a8:d3:68:8c:15:34:95:05:ae:72:
         78:ac:ca:0b:b5:2f:8d:a0:22:15:21:84:ff:5f:71:e8:0e:d0:
         e8:e2:00:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:28 2024 by rpki-client on console-fra.rpki-client.org