Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/QtNzi0KfinYum0ikL1OMDIqPmAE.roa
File:                     QtNzi0KfinYum0ikL1OMDIqPmAE.roa (raw, json)
Hash identifier:          ba+qEqj77OtpYIErkKb+m1OoyvHGHtUW2V/pH8HEIxU=
Subject key identifier:   42:D3:73:8B:42:9F:8A:76:2E:9B:48:A4:2F:53:8C:0C:8A:8F:98:01
Certificate issuer:       /CN=6762E00A4FEFCDD7F05273E4150218C3A9FE12E9
Certificate serial:       0E47
Authority key identifier: 67:62:E0:0A:4F:EF:CD:D7:F0:52:73:E4:15:02:18:C3:A9:FE:12:E9
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/QtNzi0KfinYum0ikL1OMDIqPmAE.roa
Signing time:             Fri 01 Sep 2023 10:23:53 +0000
ROA not before:           Fri 01 Sep 2023 10:23:53 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     134823
IP address blocks:        103.134.80.0/22 maxlen: 30

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3655 (0xe47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6762E00A4FEFCDD7F05273E4150218C3A9FE12E9
        Validity
            Not Before: Sep  1 10:23:53 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=42D3738B429F8A762E9B48A42F538C0C8A8F9801
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:74:76:5e:5c:98:b2:aa:17:0d:b7:5a:4b:19:
                    fc:24:c2:95:51:c2:71:59:08:d7:67:1a:17:70:93:
                    cb:dd:d2:5b:c9:59:96:c6:d2:2b:2b:1d:62:aa:d5:
                    38:53:d0:fc:1d:8a:40:91:e8:6f:0b:db:9e:46:65:
                    1d:1a:17:62:2d:ae:c1:ff:c3:fd:13:0e:72:2f:38:
                    be:a4:fb:6b:12:11:54:d6:8a:93:58:7d:ca:7f:f3:
                    ca:63:20:a0:7c:85:45:31:e4:13:90:d9:b2:37:84:
                    44:fc:03:a6:a9:ef:a1:65:e3:dd:c6:9c:35:da:fb:
                    0b:6c:20:c9:8d:f7:2e:22:a7:25:b8:07:b2:a9:ec:
                    e8:17:47:39:8b:cb:6f:c2:7c:70:d2:e6:63:6c:c3:
                    19:a6:a6:e1:85:1b:1b:4b:0f:b9:55:26:0d:82:7d:
                    9a:94:14:ac:60:57:33:fb:46:3f:ff:87:01:2e:83:
                    89:52:36:8f:19:29:1d:26:10:4a:0e:54:c0:77:44:
                    ae:3d:e6:e8:82:29:54:ff:9a:06:03:87:93:34:ad:
                    b4:1d:6f:ff:a1:07:95:38:6e:67:be:f8:f8:9d:36:
                    ee:6d:df:f0:94:fb:13:ca:25:3f:f9:db:e7:db:86:
                    63:94:99:66:09:4b:ad:61:62:d0:d5:7c:47:e5:d8:
                    2e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:D3:73:8B:42:9F:8A:76:2E:9B:48:A4:2F:53:8C:0C:8A:8F:98:01
            X509v3 Authority Key Identifier:
                keyid:67:62:E0:0A:4F:EF:CD:D7:F0:52:73:E4:15:02:18:C3:A9:FE:12:E9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/QtNzi0KfinYum0ikL1OMDIqPmAE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.134.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         40:b9:1a:0c:8f:1a:d7:6b:00:83:cd:23:82:ee:2e:61:19:58:
         1d:98:27:ed:50:c7:82:a3:7e:7c:68:52:fc:6f:a4:ac:b0:16:
         ef:f2:d5:9d:f4:6d:df:cb:36:44:b2:da:f6:15:e2:eb:c5:a2:
         9a:2f:80:48:73:e5:c9:ef:b8:b5:cc:ed:49:9d:34:16:9f:e1:
         8d:69:28:55:0e:26:db:77:1a:5c:4f:bd:27:17:1f:99:b2:c3:
         d3:fc:ae:90:48:76:6d:f9:6b:cd:5e:23:6b:3e:7e:58:6a:0f:
         5f:e0:24:5b:bb:cf:b2:76:05:9c:5b:f8:64:96:f0:6d:59:c6:
         a0:1d:cd:f6:f0:6a:24:76:bb:71:60:71:d9:25:60:be:b2:d2:
         69:d4:da:d6:40:ea:27:08:85:3a:be:bb:de:5f:8d:22:bd:6c:
         58:39:36:97:19:e1:32:5c:3d:d9:35:8c:15:11:bc:b0:39:1e:
         d4:49:c1:f7:37:27:d9:d2:46:e4:f1:68:18:37:9a:e2:59:5a:
         64:d4:8a:5a:74:b4:2b:cb:70:c5:7a:7b:86:88:77:40:25:bb:
         c1:bc:1b:58:96:5c:4e:b0:0f:3c:15:9d:9d:ef:d0:7b:6a:4b:
         1c:5f:20:ed:5a:f9:ff:ce:1e:4c:11:41:72:91:31:4e:c0:e2:
         e6:c9:56:cc
-----BEGIN CERTIFICATE-----
MIIE2jCCA8KgAwIBAgICDkcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjc2
MkUwMEE0RkVGQ0REN0YwNTI3M0U0MTUwMjE4QzNBOUZFMTJFOTAeFw0yMzA5MDEx
MDIzNTNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDQyRDM3MzhCNDI5RjhB
NzYyRTlCNDhBNDJGNTM4QzBDOEE4Rjk4MDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC5dHZeXJiyqhcNt1pLGfwkwpVRwnFZCNdnGhdwk8vd0lvJWZbG
0isrHWKq1ThT0PwdikCR6G8L255GZR0aF2ItrsH/w/0TDnIvOL6k+2sSEVTWipNY
fcp/88pjIKB8hUUx5BOQ2bI3hET8A6ap76Fl493GnDXa+wtsIMmN9y4ipyW4B7Kp
7OgXRzmLy2/CfHDS5mNswxmmpuGFGxtLD7lVJg2CfZqUFKxgVzP7Rj//hwEug4lS
No8ZKR0mEEoOVMB3RK495uiCKVT/mgYDh5M0rbQdb/+hB5U4bme++PidNu5t3/CU
+xPKJT/52+fbhmOUmWYJS61hYtDVfEfl2C4vAgMBAAGjggH2MIIB8jAdBgNVHQ4E
FgQUQtNzi0KfinYum0ikL1OMDIqPmAEwHwYDVR0jBBgwFoAUZ2LgCk/vzdfwUnPk
FQIYw6n+EukwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg
U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvWUlNSU5H
SU5GTy9aMkxnQ2tfdnpkZndVblBrRlFJWXc2bi1FdWsuY3JsMGAGCCsGAQUFBwEB
BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U
V05JQ0NBL1oyTGdDa192emRmd1VuUGtGUUlZdzZuLUV1ay5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y
cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL1lJTUlOR0lORk8vUXROemkwS2Zp
bll1bTBpa0wxT01ESXFQbUFFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw
LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAmeGUDANBgkqhkiG9w0BAQsFAAOCAQEAQLkaDI8a12sAg80jgu4uYRlY
HZgn7VDHgqN+fGhS/G+krLAW7/LVnfRt38s2RLLa9hXi68Wimi+ASHPlye+4tczt
SZ00Fp/hjWkoVQ4m23caXE+9JxcfmbLD0/yukEh2bflrzV4jaz5+WGoPX+AkW7vP
snYFnFv4ZJbwbVnGoB3N9vBqJHa7cWBx2SVgvrLSadTa1kDqJwiFOr673l+NIr1s
WDk2lxnhMlw92TWMFRG8sDke1EnB9zcn2dJG5PFoGDea4llaZNSKWnS0K8twxXp7
hoh3QCW7wbwbWJZcTrAPPBWdne/Qe2pLHF8g7Vr5/84eTBFBcpExTsDi5slWzA==
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:28 2024 by rpki-client on console-fra.rpki-client.org