Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/YFCTELECOM/ZltMulbgwrKD-yIilsjI8oGbAtI.roa
File:                     ZltMulbgwrKD-yIilsjI8oGbAtI.roa (raw, json)
Hash identifier:          fOc+2StjW6lsn+lQoG5QaiPm3jCcKBsUP9pjQEJqPds=
Subject key identifier:   66:5B:4C:BA:56:E0:C2:B2:83:FB:22:22:96:C8:C8:F2:81:9B:02:D2
Certificate issuer:       /CN=97CAADC8439AACEC6C28CF433EC9D8BE0C69C4B1
Certificate serial:       0F40
Authority key identifier: 97:CA:AD:C8:43:9A:AC:EC:6C:28:CF:43:3E:C9:D8:BE:0C:69:C4:B1
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/l8qtyEOarOxsKM9DPsnYvgxpxLE.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/YFCTELECOM/ZltMulbgwrKD-yIilsjI8oGbAtI.roa
Signing time:             Sun 07 Feb 2021 12:43:14 +0000
ROA not before:           Sun 07 Feb 2021 12:43:14 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     18419
IP address blocks:        103.130.96.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3904 (0xf40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97CAADC8439AACEC6C28CF433EC9D8BE0C69C4B1
        Validity
            Not Before: Feb  7 12:43:14 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=665B4CBA56E0C2B283FB222296C8C8F2819B02D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:74:4d:66:47:19:2b:5c:77:6c:dd:cb:7e:0b:
                    1f:13:e1:37:3d:47:19:c7:ff:7d:79:56:32:28:36:
                    cd:87:da:8a:90:1f:18:b2:a3:b2:78:84:9a:c2:44:
                    de:07:31:b1:24:e9:e0:8f:ee:b3:95:ed:fa:05:e5:
                    c6:24:af:cb:14:bc:16:4c:4f:2b:25:ba:0d:bf:1a:
                    d7:25:0a:12:65:65:bb:3b:65:41:e9:49:c1:d5:a4:
                    82:a0:cb:0b:05:7e:ef:0c:98:00:7f:81:96:06:f4:
                    17:0e:70:b4:1a:2c:69:71:a2:a7:00:fb:ce:3f:28:
                    b2:60:b3:75:88:00:72:62:c8:34:c6:79:f6:37:7e:
                    df:67:d7:72:0d:b8:02:9d:89:2a:a1:c5:ea:62:c5:
                    0d:fa:f4:87:94:ba:63:87:d8:c3:48:81:60:b6:93:
                    b9:4c:7a:3f:6d:08:87:05:eb:12:88:9c:9f:4d:ae:
                    c6:30:e3:3b:0a:44:47:95:01:c1:27:0d:20:ed:27:
                    49:6d:71:22:85:2b:3d:db:8f:62:ea:7f:5d:42:95:
                    f0:21:4e:c6:9b:53:dc:6d:c7:ae:06:1d:86:df:ea:
                    db:63:33:4f:95:5b:0b:b0:6a:cf:d8:ae:b3:6e:0b:
                    49:64:ff:da:1b:d0:c8:87:e2:b5:bc:9c:6a:4f:be:
                    59:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:5B:4C:BA:56:E0:C2:B2:83:FB:22:22:96:C8:C8:F2:81:9B:02:D2
            X509v3 Authority Key Identifier:
                keyid:97:CA:AD:C8:43:9A:AC:EC:6C:28:CF:43:3E:C9:D8:BE:0C:69:C4:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YFCTELECOM/l8qtyEOarOxsKM9DPsnYvgxpxLE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/l8qtyEOarOxsKM9DPsnYvgxpxLE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YFCTELECOM/ZltMulbgwrKD-yIilsjI8oGbAtI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:3f:b3:27:b2:46:a0:7e:f9:1b:ef:6a:45:a7:50:80:f1:67:
         e3:e2:22:25:48:fe:61:a7:62:81:6b:1f:bd:97:83:a9:8b:7e:
         f4:41:f2:14:25:8d:bd:3b:5e:ff:97:91:c0:5b:c6:5a:6c:56:
         1e:bb:26:39:0a:76:f4:99:57:6b:57:0c:ce:20:79:f8:14:1f:
         d6:3c:89:84:44:8e:e7:d1:65:d8:ac:c6:73:9c:f8:8f:c7:5e:
         42:1a:ef:ca:ec:37:b1:09:32:25:32:5e:fa:d2:82:cb:31:a2:
         99:88:c3:e1:3f:cb:97:95:0e:2a:03:76:03:56:6a:65:9e:ea:
         35:d5:f7:f7:ab:e3:1c:91:ed:26:37:3a:10:dc:22:12:f4:30:
         39:8f:72:7a:96:27:3f:ba:2b:8f:66:54:2f:3c:d2:35:bb:0f:
         82:ff:09:88:37:0e:08:ba:ff:dd:c8:dc:ba:f7:95:c9:fa:53:
         7b:e7:3f:13:f7:f0:b0:87:ac:91:75:9c:cc:79:d1:5c:44:3d:
         2f:cb:dd:f4:7c:c3:89:43:2c:ba:3e:29:3a:3c:92:18:0c:88:
         31:3d:51:6d:e7:d8:9a:10:a0:22:b3:e4:11:bd:4b:bd:c6:df:
         97:54:98:bd:a7:7a:e2:39:d9:eb:d9:a4:31:d5:77:f6:ce:82:
         e4:05:50:a9
-----BEGIN CERTIFICATE-----
MIIE2jCCA8KgAwIBAgICD0AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTdD
QUFEQzg0MzlBQUNFQzZDMjhDRjQzM0VDOUQ4QkUwQzY5QzRCMTAeFw0yMTAyMDcx
MjQzMTRaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDY2NUI0Q0JBNTZFMEMy
QjI4M0ZCMjIyMjk2QzhDOEYyODE5QjAyRDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCqdE1mRxkrXHds3ct+Cx8T4Tc9RxnH/315VjIoNs2H2oqQHxiy
o7J4hJrCRN4HMbEk6eCP7rOV7foF5cYkr8sUvBZMTyslug2/GtclChJlZbs7ZUHp
ScHVpIKgywsFfu8MmAB/gZYG9BcOcLQaLGlxoqcA+84/KLJgs3WIAHJiyDTGefY3
ft9n13INuAKdiSqhxepixQ369IeUumOH2MNIgWC2k7lMej9tCIcF6xKInJ9NrsYw
4zsKREeVAcEnDSDtJ0ltcSKFKz3bj2Lqf11ClfAhTsabU9xtx64GHYbf6ttjM0+V
Wwuwas/YrrNuC0lk/9ob0MiH4rW8nGpPvllRAgMBAAGjggH2MIIB8jAdBgNVHQ4E
FgQUZltMulbgwrKD+yIilsjI8oGbAtIwHwYDVR0jBBgwFoAUl8qtyEOarOxsKM9D
PsnYvgxpxLEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg
U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvWUZDVEVM
RUNPTS9sOHF0eUVPYXJPeHNLTTlEUHNuWXZneHB4TEUuY3JsMGAGCCsGAQUFBwEB
BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U
V05JQ0NBL2w4cXR5RU9hck94c0tNOURQc25Zdmd4cHhMRS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y
cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL1lGQ1RFTEVDT00vWmx0TXVsYmd3
cktELXlJaWxzakk4b0diQXRJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw
LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAmeCYDANBgkqhkiG9w0BAQsFAAOCAQEAWj+zJ7JGoH75G+9qRadQgPFn
4+IiJUj+YadigWsfvZeDqYt+9EHyFCWNvTte/5eRwFvGWmxWHrsmOQp29JlXa1cM
ziB5+BQf1jyJhESO59Fl2KzGc5z4j8deQhrvyuw3sQkyJTJe+tKCyzGimYjD4T/L
l5UOKgN2A1ZqZZ7qNdX396vjHJHtJjc6ENwiEvQwOY9yepYnP7orj2ZULzzSNbsP
gv8JiDcOCLr/3cjcuveVyfpTe+c/E/fwsIeskXWczHnRXEQ9L8vd9HzDiUMsuj4p
OjySGAyIMT1RbefYmhCgIrPkEb1Lvcbfl1SYvad64jnZ69mkMdV39s6C5AVQqQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:52 2024 by rpki-client on console-ams.rpki-client.org