Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/XINYUN/WESnOvR79RAoLcBZ_wZmQE7z-28.roa
File:                     WESnOvR79RAoLcBZ_wZmQE7z-28.roa (raw, json)
Hash identifier:          9U7dgg67g24CT7ek4/fvudqRzS3au2HivNmcsPLd5Vw=
Subject key identifier:   58:44:A7:3A:F4:7B:F5:10:28:2D:C0:59:FF:06:66:40:4E:F3:FB:6F
Certificate issuer:       /CN=84F850C0651B699E190DC9D97CD1DE326C164EC5
Certificate serial:       0ABD
Authority key identifier: 84:F8:50:C0:65:1B:69:9E:19:0D:C9:D9:7C:D1:DE:32:6C:16:4E:C5
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/XINYUN/WESnOvR79RAoLcBZ_wZmQE7z-28.roa
Signing time:             Tue 29 Sep 2020 10:09:21 +0000
ROA not before:           Tue 29 Sep 2020 10:09:21 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     138145
IP address blocks:        2404:4fc0:a011::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2749 (0xabd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84F850C0651B699E190DC9D97CD1DE326C164EC5
        Validity
            Not Before: Sep 29 10:09:21 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=5844A73AF47BF510282DC059FF0666404EF3FB6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:04:ac:7e:07:15:7c:34:e5:35:ab:53:96:c9:
                    fc:c5:f6:d8:8d:7c:43:1f:30:9e:f5:ba:40:d1:41:
                    93:c1:5f:71:85:0d:ab:85:9a:37:10:e0:10:c3:7b:
                    8e:c7:de:97:04:cc:05:c4:4e:ee:dc:a4:40:86:6e:
                    4f:24:95:25:c6:c8:f4:bf:b6:2e:0d:65:bc:ef:98:
                    63:11:f8:d2:6a:6d:2c:68:5b:03:35:23:fe:39:cb:
                    5d:b8:44:1c:69:18:17:42:9a:0c:2c:82:29:ec:b8:
                    9b:98:2c:2a:55:32:c3:b9:8b:60:28:2d:72:05:41:
                    36:e6:59:a5:cd:34:37:89:ca:f6:9f:fb:b4:5c:1e:
                    e4:a5:11:9d:e1:93:6d:c4:ea:68:60:13:60:9a:6c:
                    c8:97:9a:9e:67:2e:75:46:29:7b:97:b8:e3:8f:77:
                    86:e1:ee:1e:c0:b5:32:c8:ec:96:21:a6:91:37:65:
                    0b:0f:f4:5b:73:cb:17:93:26:31:99:ea:25:34:4c:
                    19:b6:f1:69:d0:e1:e9:a0:ef:e2:81:44:52:de:88:
                    3d:3d:12:87:d1:61:2f:f7:22:19:9d:44:f0:25:1d:
                    3d:bf:9a:a1:28:27:f2:d2:5c:d0:2d:e7:70:0f:c8:
                    ee:22:d5:47:99:aa:4c:bc:89:b8:34:99:80:8e:91:
                    8d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:44:A7:3A:F4:7B:F5:10:28:2D:C0:59:FF:06:66:40:4E:F3:FB:6F
            X509v3 Authority Key Identifier:
                keyid:84:F8:50:C0:65:1B:69:9E:19:0D:C9:D9:7C:D1:DE:32:6C:16:4E:C5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XINYUN/hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XINYUN/WESnOvR79RAoLcBZ_wZmQE7z-28.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:4fc0:a011::/48

    Signature Algorithm: sha256WithRSAEncryption
         62:58:cc:03:c5:24:89:f0:cd:9b:5d:8d:cc:57:86:44:0e:ed:
         08:35:28:69:73:25:97:ed:ab:34:2c:7b:aa:34:fc:45:72:9d:
         a6:d8:cb:ca:59:3f:c2:54:7d:4d:db:0a:6d:cf:1f:91:be:4f:
         7d:73:df:ae:62:17:64:3d:fc:6d:c6:45:c8:26:d6:b5:58:e2:
         35:76:d2:77:49:16:a4:20:8a:03:83:05:10:18:ce:b0:54:5b:
         81:18:ab:90:3b:be:cb:37:76:05:89:e5:e4:b0:ab:16:81:c8:
         13:56:88:2d:eb:83:32:b4:de:11:d2:be:c6:a0:95:40:7f:f6:
         9a:64:88:25:14:66:5e:43:ef:93:6f:08:98:76:f8:cf:71:dd:
         e9:20:25:06:29:ab:7c:7f:4f:07:cc:88:dd:3a:d2:14:19:48:
         45:35:7c:96:97:21:5a:d8:4a:64:f4:77:c5:5a:11:45:d5:cb:
         89:98:ed:f2:f1:39:d7:18:ab:49:9f:d4:f1:be:76:01:a9:b4:
         db:3f:be:2f:b0:93:b2:80:27:82:2f:5f:85:b9:05:c5:89:4b:
         e4:b9:df:74:4c:b6:6a:90:b4:36:42:c3:fc:ed:d2:92:75:f1:
         1a:29:63:cf:72:b5:86:c6:24:1e:31:01:cc:ce:cc:ef:75:6b:
         ab:f1:39:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:51 2024 by rpki-client on console-ams.rpki-client.org