Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WSN-TW/eBufjbYBhZCRBzOI2ncfUyMrX30.roa
File:                     eBufjbYBhZCRBzOI2ncfUyMrX30.roa (raw, json)
Hash identifier:          FhyvdQM8owPZpLvz+CBB/58wWWz6cPrUCPJjxXHXUtQ=
Subject key identifier:   78:1B:9F:8D:B6:01:85:90:91:07:33:88:DA:77:1F:53:23:2B:5F:7D
Certificate issuer:       /CN=1CB1CA70A33248FB3DAEE8BF41E2DAA76A7DCFD3
Certificate serial:       0775
Authority key identifier: 1C:B1:CA:70:A3:32:48:FB:3D:AE:E8:BF:41:E2:DA:A7:6A:7D:CF:D3
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/HLHKcKMySPs9rui_QeLap2p9z9M.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WSN-TW/eBufjbYBhZCRBzOI2ncfUyMrX30.roa
Signing time:             Tue 29 Sep 2020 10:09:19 +0000
ROA not before:           Tue 29 Sep 2020 10:09:19 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     131603
IP address blocks:        43.251.56.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1909 (0x775)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CB1CA70A33248FB3DAEE8BF41E2DAA76A7DCFD3
        Validity
            Not Before: Sep 29 10:09:19 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=781B9F8DB601859091073388DA771F53232B5F7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:d6:77:20:f5:33:3d:38:c0:25:af:00:9f:51:
                    e9:2d:e4:12:26:7e:1a:5e:5e:ba:1c:d7:e0:0f:c0:
                    a4:36:13:46:0e:01:b7:a6:3f:01:d0:a6:71:41:93:
                    43:98:60:dd:c0:85:db:9b:dc:f0:0e:17:b4:3d:a9:
                    38:d0:5a:bb:05:d0:8b:9e:bf:0a:ee:76:ff:5e:97:
                    3e:15:41:5e:dd:13:91:00:0c:02:be:bf:c4:c1:9a:
                    84:33:44:61:bd:2f:ee:99:97:c0:6b:96:06:38:0d:
                    c1:7e:89:fb:b2:a8:89:11:a4:57:59:44:c5:8f:3e:
                    ba:f8:b7:9c:e2:33:73:ed:a9:60:81:b7:70:ba:97:
                    30:03:7e:74:83:96:68:c3:f1:5c:d6:36:e3:db:b6:
                    d2:6f:21:e8:38:d5:b7:de:f3:10:89:9c:91:ea:d8:
                    59:1d:9b:1c:ea:1e:82:d9:4e:b5:72:41:2d:1b:08:
                    4e:ae:f5:d1:3a:ac:64:67:e7:cb:54:52:0d:96:5a:
                    31:10:ed:3f:74:b8:b8:c4:df:67:75:29:0f:6b:a2:
                    5e:01:16:41:72:69:fb:c5:0e:24:6f:08:2c:d2:c9:
                    db:06:e8:fa:9b:90:58:04:3a:2d:34:ed:c1:d7:a5:
                    30:94:eb:e3:6d:87:f3:a9:9e:59:ee:b0:c6:4d:35:
                    51:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:1B:9F:8D:B6:01:85:90:91:07:33:88:DA:77:1F:53:23:2B:5F:7D
            X509v3 Authority Key Identifier:
                keyid:1C:B1:CA:70:A3:32:48:FB:3D:AE:E8:BF:41:E2:DA:A7:6A:7D:CF:D3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WSN-TW/HLHKcKMySPs9rui_QeLap2p9z9M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HLHKcKMySPs9rui_QeLap2p9z9M.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WSN-TW/eBufjbYBhZCRBzOI2ncfUyMrX30.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.251.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:64:34:45:4d:f7:9b:b0:4a:28:fe:b3:ec:89:e8:70:60:9d:
         e7:be:d3:09:98:bd:db:da:f1:35:08:63:5f:c8:26:bc:31:91:
         5b:b4:6e:99:0d:20:e1:e2:97:14:35:7a:5f:68:02:21:d8:69:
         f0:5c:6d:e6:fa:c4:fd:77:ef:b3:80:5b:85:62:f3:ad:7e:f7:
         1b:a3:61:f2:0f:79:8b:08:dc:71:29:52:ba:a3:e5:1e:75:69:
         ee:1a:2c:49:40:d9:24:c8:9d:d9:4c:a7:4c:df:56:27:9a:0c:
         d6:ee:ae:07:f1:55:ce:40:0f:7c:73:0f:c6:cd:05:55:09:9f:
         b3:f9:56:44:f3:e3:29:f9:7e:cf:9e:9d:70:4c:e9:8b:3b:a4:
         76:d0:eb:42:15:8c:b9:e7:46:5f:1e:6b:de:e5:59:17:69:c8:
         47:38:fd:13:f9:fb:15:70:87:42:7e:74:cd:b4:3a:aa:0d:72:
         ea:f8:47:6e:89:21:3f:bd:9b:70:af:79:06:d5:d3:d5:8f:36:
         f0:ce:fe:2f:6e:be:d0:fe:5c:2a:48:68:aa:0a:d9:77:a7:f5:
         ca:7b:e9:51:61:74:e9:08:47:71:32:b3:c4:fc:6d:2c:9a:ae:
         34:c8:28:bf:be:1d:d6:2c:53:c2:85:41:64:a1:d9:b9:f9:c6:
         9f:52:19:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:07 2024 by rpki-client on console-fra.rpki-client.org