Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ZHIYIN/3K22qMq4bS_znFRuCFUl7mQRVqE.roa
File:                     3K22qMq4bS_znFRuCFUl7mQRVqE.roa (raw, json)
Hash identifier:          WldtvRrTp7Z3ang8rfOspf9OQvOpXX/n/MzN9cv2bfE=
Subject key identifier:   DC:AD:B6:A8:CA:B8:6D:2F:F3:9C:54:6E:08:55:25:EE:64:11:56:A1
Certificate issuer:       /CN=B56C9B2E3A040879CFD00FE74D697FB0465CF27A
Certificate serial:       0DB9
Authority key identifier: B5:6C:9B:2E:3A:04:08:79:CF:D0:0F:E7:4D:69:7F:B0:46:5C:F2:7A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/tWybLjoECHnP0A_nTWl_sEZc8no.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ZHIYIN/3K22qMq4bS_znFRuCFUl7mQRVqE.roa
Signing time:             Thu 15 Sep 2022 02:50:42 +0000
ROA not before:           Thu 15 Sep 2022 02:50:42 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     138145
IP address blocks:        103.135.19.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3513 (0xdb9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B56C9B2E3A040879CFD00FE74D697FB0465CF27A
        Validity
            Not Before: Sep 15 02:50:42 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=DCADB6A8CAB86D2FF39C546E085525EE641156A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:12:37:90:e4:20:b4:5c:c0:d2:3a:cc:59:97:
                    b2:f1:57:91:51:e0:79:2a:1f:46:1d:f4:69:0c:15:
                    45:89:9e:9b:bb:f9:d1:a7:7f:bc:f8:27:00:b5:73:
                    49:69:60:4b:4c:11:04:c0:d2:aa:0f:03:37:7f:d4:
                    64:0e:6b:59:62:af:5e:2d:50:45:cb:64:49:e1:6f:
                    6d:1d:00:37:b6:fe:83:7c:ad:1d:90:0a:37:22:48:
                    1f:1c:d1:05:d6:ff:a8:c6:09:39:d5:ba:5c:9c:3e:
                    ba:ac:9a:39:00:fd:94:64:7f:41:c5:78:f6:a3:00:
                    ca:9c:e5:d1:97:5f:85:fe:a2:c1:28:45:e7:bb:8e:
                    90:02:1e:f0:d5:36:4d:08:a3:b4:40:57:aa:0e:33:
                    5c:c4:e7:09:2f:08:a4:d8:b1:b6:3b:ab:84:a4:e2:
                    ca:71:5a:ca:b6:c7:02:a3:62:17:fc:12:8d:14:58:
                    36:a8:d7:48:08:d7:30:c8:04:32:51:4e:75:51:4e:
                    ef:53:40:dd:1f:65:b4:5e:41:62:8c:ad:02:54:6a:
                    03:12:f5:c0:ca:a2:b0:0a:f7:bb:b5:4a:e1:97:0b:
                    38:41:14:55:98:73:e6:70:6f:78:ea:7b:b5:98:ca:
                    b3:b7:63:88:99:e0:5c:5c:f2:8c:fe:9e:b1:e7:ef:
                    33:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:AD:B6:A8:CA:B8:6D:2F:F3:9C:54:6E:08:55:25:EE:64:11:56:A1
            X509v3 Authority Key Identifier:
                keyid:B5:6C:9B:2E:3A:04:08:79:CF:D0:0F:E7:4D:69:7F:B0:46:5C:F2:7A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZHIYIN/tWybLjoECHnP0A_nTWl_sEZc8no.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tWybLjoECHnP0A_nTWl_sEZc8no.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZHIYIN/3K22qMq4bS_znFRuCFUl7mQRVqE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:d0:be:24:4e:5e:27:78:5a:f5:ce:71:c0:e2:e2:07:7c:40:
         4d:ed:6b:12:bd:b2:84:69:2c:e4:0c:c1:ae:03:cc:20:69:d9:
         a0:52:d3:a4:65:e7:9b:e3:00:75:91:99:dd:4f:37:30:bf:9e:
         df:38:c2:7d:34:7b:a3:77:9a:50:89:6e:7b:56:d4:b7:60:93:
         54:87:05:64:b6:09:85:a1:dd:bb:c9:fe:0f:92:75:0f:41:f6:
         5e:ba:75:d4:df:b6:9b:fd:57:93:8e:07:14:89:49:67:df:88:
         f5:e5:bc:75:54:6e:fc:3b:88:4f:9f:3b:26:3e:50:d9:cd:67:
         2d:19:8b:ec:03:4e:3c:45:31:bf:03:66:c6:58:9a:50:0c:52:
         8d:6e:c6:80:fd:a2:4c:ea:87:6e:8c:d2:89:e8:13:cd:f9:0e:
         8b:2c:54:b4:61:91:93:68:8e:b6:c0:1e:63:87:3d:45:ac:f6:
         f6:d5:00:cd:c2:0c:98:e7:3e:87:a2:4f:bc:4c:2a:e1:a9:e5:
         fd:5b:60:ca:b8:f2:eb:4e:90:1b:83:54:ef:33:32:8d:e6:35:
         90:43:2f:63:2b:e2:78:55:4d:fb:b4:d7:a7:22:66:ab:8d:0e:
         67:88:aa:c6:59:0d:05:43:aa:1f:b8:21:f5:d5:1a:be:a1:12:
         b0:e2:16:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:52 2024 by rpki-client on console-ams.rpki-client.org