Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WSN-TW/Vl1j2ItZ16tmNoJlm05GA1g03tk.roa
File:                     Vl1j2ItZ16tmNoJlm05GA1g03tk.roa (raw, json)
Hash identifier:          0MLndKiXmyxaU9p8YcmHU78p+OnaPOwXByXaj9trdQY=
Subject key identifier:   56:5D:63:D8:8B:59:D7:AB:66:36:82:65:9B:4E:46:03:58:34:DE:D9
Certificate issuer:       /CN=1CB1CA70A33248FB3DAEE8BF41E2DAA76A7DCFD3
Certificate serial:       0774
Authority key identifier: 1C:B1:CA:70:A3:32:48:FB:3D:AE:E8:BF:41:E2:DA:A7:6A:7D:CF:D3
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/HLHKcKMySPs9rui_QeLap2p9z9M.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WSN-TW/Vl1j2ItZ16tmNoJlm05GA1g03tk.roa
Signing time:             Tue 29 Sep 2020 10:09:18 +0000
ROA not before:           Tue 29 Sep 2020 10:09:18 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     131603
IP address blocks:        103.229.50.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1908 (0x774)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CB1CA70A33248FB3DAEE8BF41E2DAA76A7DCFD3
        Validity
            Not Before: Sep 29 10:09:18 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=565D63D88B59D7AB663682659B4E46035834DED9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8a:5f:b5:76:97:c7:7c:e8:20:99:86:ba:31:
                    fe:f7:09:9e:15:b8:2b:56:7d:fd:10:e3:90:37:f1:
                    f6:5b:8d:db:39:23:3c:47:ab:89:35:cb:60:af:8b:
                    f1:f0:b6:94:d9:ba:4a:8a:ca:c2:b6:67:63:50:31:
                    30:a1:4b:78:3d:fb:a3:39:e1:10:ef:4e:b0:7b:74:
                    68:24:b5:9e:5b:39:bd:ee:7a:52:03:10:37:0f:6e:
                    0a:5e:f6:d2:83:cb:f7:26:f3:60:71:f5:55:df:97:
                    53:72:46:df:1f:8d:5c:1f:ad:00:62:6c:6f:51:67:
                    fc:72:34:fe:e8:e9:e3:ad:94:ee:1c:5c:8f:99:6f:
                    e8:31:41:f7:95:cd:ab:72:dd:81:b6:9a:b6:59:ae:
                    17:c9:ce:10:7c:c1:1f:74:e4:b1:15:92:f4:af:46:
                    3d:dd:c1:d7:19:12:a4:36:c9:07:fa:f5:80:f6:d3:
                    00:19:60:96:34:db:90:91:a0:c3:00:5e:bb:d6:6c:
                    ab:2c:36:e7:4b:d6:01:7f:6b:69:34:e2:e4:d0:f4:
                    5c:82:92:bd:5a:63:e2:da:0e:7c:31:32:99:4d:f6:
                    ee:f1:67:b1:cb:08:48:13:04:5a:6d:a0:74:ff:63:
                    94:90:fb:ae:93:fa:5a:e5:64:c1:d6:23:a0:83:2e:
                    7e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:5D:63:D8:8B:59:D7:AB:66:36:82:65:9B:4E:46:03:58:34:DE:D9
            X509v3 Authority Key Identifier:
                keyid:1C:B1:CA:70:A3:32:48:FB:3D:AE:E8:BF:41:E2:DA:A7:6A:7D:CF:D3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WSN-TW/HLHKcKMySPs9rui_QeLap2p9z9M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HLHKcKMySPs9rui_QeLap2p9z9M.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WSN-TW/Vl1j2ItZ16tmNoJlm05GA1g03tk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.229.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:1e:74:c4:8d:33:d2:46:fd:26:19:f0:2b:dc:31:62:b7:12:
         11:b3:dc:e8:55:76:ee:3b:ce:6b:71:c2:39:24:fe:cb:12:ac:
         73:18:53:a8:b8:45:43:85:2a:ce:d3:58:ca:6b:fe:06:d2:89:
         b5:69:40:34:a0:57:30:08:c7:bf:fc:6d:f1:76:d6:48:93:e0:
         82:64:46:cf:61:1b:41:a6:a6:8f:01:37:b1:bc:6c:a2:f2:fa:
         a5:ae:42:87:9f:7a:f0:55:d7:94:1b:b9:39:ed:19:aa:c7:11:
         03:42:4d:3e:4e:e0:31:45:9b:46:8c:d9:52:8a:12:d4:90:67:
         46:84:4e:a8:09:da:c7:57:81:e3:29:80:ce:59:99:83:2a:72:
         07:2a:82:75:7e:24:e2:46:ee:ca:f5:d9:db:83:f4:54:7c:40:
         ca:34:ad:9e:87:a2:23:c2:ed:eb:32:cf:a8:3b:94:32:ab:7d:
         6f:69:1d:7c:bc:9c:32:1a:d9:14:f1:8b:11:65:98:4b:a8:22:
         13:d6:42:9d:ed:a4:92:90:30:04:4d:40:13:68:ce:33:2b:45:
         45:6e:89:88:26:df:ab:c3:25:c4:e8:50:e2:13:04:26:ae:ee:
         8b:7e:53:05:d2:78:93:9e:86:4d:85:3a:6b:99:06:c5:e3:6a:
         61:8d:02:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:51 2024 by rpki-client on console-ams.rpki-client.org