Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/XINYUN/wYMqadZOY7ixGavlV_k7zR9y3zA.roa
File:                     wYMqadZOY7ixGavlV_k7zR9y3zA.roa (raw, json)
Hash identifier:          +CwYyy49k4wECePeK3Z4059EWk4GHq+tLy+eV9LnGVQ=
Subject key identifier:   C1:83:2A:69:D6:4E:63:B8:B1:19:AB:E5:57:F9:3B:CD:1F:72:DF:30
Certificate issuer:       /CN=84F850C0651B699E190DC9D97CD1DE326C164EC5
Certificate serial:       0EA0
Authority key identifier: 84:F8:50:C0:65:1B:69:9E:19:0D:C9:D9:7C:D1:DE:32:6C:16:4E:C5
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/XINYUN/wYMqadZOY7ixGavlV_k7zR9y3zA.roa
Signing time:             Fri 01 Sep 2023 10:21:35 +0000
ROA not before:           Fri 01 Sep 2023 10:21:35 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     38047
IP address blocks:        2404:4fc0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3744 (0xea0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84F850C0651B699E190DC9D97CD1DE326C164EC5
        Validity
            Not Before: Sep  1 10:21:35 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=C1832A69D64E63B8B119ABE557F93BCD1F72DF30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:38:07:32:c9:19:a2:4e:e7:2d:4f:68:a5:11:
                    91:eb:3f:3b:aa:ec:64:88:fa:7c:5a:c9:99:e0:8f:
                    68:49:3c:2b:51:91:0e:ef:e8:f1:63:47:19:43:59:
                    12:fd:53:4b:8d:44:0e:21:18:2b:d8:61:fe:4a:39:
                    cd:33:48:15:1d:40:3b:2c:48:93:6f:c9:87:28:69:
                    82:e6:65:ec:06:fb:a0:c2:f1:9f:94:3a:6d:8f:8c:
                    1a:e5:a3:37:1d:69:2c:8d:52:29:a6:1d:27:06:61:
                    d5:12:7a:01:3d:e4:27:e2:ec:02:f3:79:32:a4:9e:
                    af:ee:a8:71:ed:2f:5b:3d:c5:c5:06:56:af:59:96:
                    1a:b2:20:72:73:e0:41:7f:74:47:c3:4b:8a:bd:ba:
                    ef:ee:af:13:2c:bd:b4:24:fc:38:fb:16:84:26:e2:
                    56:f9:48:35:e4:43:af:b4:c6:89:19:b5:57:8b:61:
                    da:1c:ee:4c:90:21:91:85:0b:80:a7:1b:63:a9:f3:
                    b4:eb:83:89:38:45:02:6e:42:db:e2:dd:90:9d:c4:
                    61:0f:4c:33:13:70:ed:3b:7b:4a:b3:96:53:c3:2e:
                    d1:5f:01:e4:e4:54:25:fa:20:37:ec:cc:1e:1d:c2:
                    1b:d4:53:14:4f:29:e7:a5:00:30:9f:e2:ea:a8:cf:
                    40:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:83:2A:69:D6:4E:63:B8:B1:19:AB:E5:57:F9:3B:CD:1F:72:DF:30
            X509v3 Authority Key Identifier:
                keyid:84:F8:50:C0:65:1B:69:9E:19:0D:C9:D9:7C:D1:DE:32:6C:16:4E:C5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XINYUN/hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XINYUN/wYMqadZOY7ixGavlV_k7zR9y3zA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:4fc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:c5:76:2f:fe:de:69:27:c9:11:43:ae:67:e0:cf:e3:52:1f:
         95:80:33:4c:75:ee:60:e8:47:b2:2f:ce:89:cc:69:5f:2b:9c:
         aa:6d:bc:a3:4b:59:bd:b4:b2:83:5d:95:f7:21:14:08:fd:e1:
         fb:35:54:b3:be:b2:63:d7:d1:90:93:4f:2e:fb:57:30:b7:2d:
         c0:bd:88:30:70:4e:c7:42:af:89:a3:38:cd:27:40:98:c9:af:
         75:0b:f4:12:e5:2c:02:90:f6:1f:62:03:ba:dd:7b:a9:9b:c3:
         14:0e:14:21:25:0a:c9:50:de:4a:8b:27:ec:c0:d5:bf:0d:b8:
         c2:73:a8:4c:5d:89:36:68:8f:a8:f8:6a:2a:20:61:43:37:49:
         cd:ae:f6:9a:ab:5d:ec:3e:9f:eb:eb:91:51:f3:0b:4a:fc:c9:
         7c:b5:40:9c:0d:d8:ae:9b:c4:52:44:75:39:95:89:2c:7c:17:
         41:6b:63:00:67:96:8c:76:09:b9:d3:85:c0:66:09:08:57:01:
         2f:d4:92:ed:e4:02:4a:dc:4d:38:24:11:04:d8:46:c2:fc:6a:
         d6:80:f6:24:b7:06:89:b1:77:ce:02:a6:ca:81:c7:28:01:1d:
         d7:e6:eb:ef:7e:05:b2:06:31:b5:33:18:33:2b:cb:dc:2e:0a:
         ca:a6:83:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:51 2024 by rpki-client on console-ams.rpki-client.org