Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ZHIYIN/7z2a7aqIECiHA7k-YrT8JyPXMxY.roa
File:                     7z2a7aqIECiHA7k-YrT8JyPXMxY.roa (raw, json)
Hash identifier:          re6tyISdPS11Q+1ViTE0NmfT8CLqyjcrd8WclDm3ziA=
Subject key identifier:   EF:3D:9A:ED:AA:88:10:28:87:03:B9:3E:62:B4:FC:27:23:D7:33:16
Certificate issuer:       /CN=B56C9B2E3A040879CFD00FE74D697FB0465CF27A
Certificate serial:       0EAF
Authority key identifier: B5:6C:9B:2E:3A:04:08:79:CF:D0:0F:E7:4D:69:7F:B0:46:5C:F2:7A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/tWybLjoECHnP0A_nTWl_sEZc8no.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ZHIYIN/7z2a7aqIECiHA7k-YrT8JyPXMxY.roa
Signing time:             Fri 01 Sep 2023 10:24:22 +0000
ROA not before:           Fri 01 Sep 2023 10:24:22 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     131662
IP address blocks:        103.135.18.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3759 (0xeaf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B56C9B2E3A040879CFD00FE74D697FB0465CF27A
        Validity
            Not Before: Sep  1 10:24:22 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=EF3D9AEDAA8810288703B93E62B4FC2723D73316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:70:c0:68:75:f1:5c:44:26:b5:69:40:85:b7:
                    f3:01:57:fd:c2:af:cd:46:4d:09:4f:1c:6f:51:a9:
                    c6:38:24:6e:be:6a:f3:84:13:a3:71:fe:f8:7d:7d:
                    b8:d9:3f:57:d5:b8:b5:5d:93:27:60:1d:2d:7e:6b:
                    33:67:e3:34:58:d7:fd:1f:bd:dd:a6:1d:b6:55:9a:
                    a9:54:2e:d4:58:6f:af:68:5c:ba:50:7f:8e:e9:8a:
                    3d:0a:1e:c3:05:6a:fd:16:8f:9c:9e:05:90:a3:80:
                    88:b1:d3:34:5b:de:35:81:7a:89:2f:db:ac:dd:22:
                    3d:11:8c:80:71:6d:ba:57:f4:f2:7e:13:33:81:9b:
                    a9:65:fa:4e:db:f4:52:50:f0:b4:42:94:7f:f5:71:
                    59:23:d6:78:06:64:7f:12:dc:41:27:f1:8e:62:9e:
                    24:a3:1f:55:cc:15:cf:0f:ee:2d:98:81:0d:d5:13:
                    36:fc:2b:e8:23:c2:db:2e:55:6e:b7:53:b0:4f:69:
                    f3:7c:61:bb:fa:fc:46:d8:61:e1:5d:bf:64:8d:06:
                    a3:9e:61:f0:97:6b:bf:fc:86:e4:45:d2:da:7a:1f:
                    e6:04:7b:95:48:ac:88:57:ea:08:65:c1:4e:eb:91:
                    32:31:49:d3:aa:31:82:c4:f9:b3:50:12:a8:5e:24:
                    d1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:3D:9A:ED:AA:88:10:28:87:03:B9:3E:62:B4:FC:27:23:D7:33:16
            X509v3 Authority Key Identifier:
                keyid:B5:6C:9B:2E:3A:04:08:79:CF:D0:0F:E7:4D:69:7F:B0:46:5C:F2:7A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZHIYIN/tWybLjoECHnP0A_nTWl_sEZc8no.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tWybLjoECHnP0A_nTWl_sEZc8no.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZHIYIN/7z2a7aqIECiHA7k-YrT8JyPXMxY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:8a:b7:8a:71:87:43:f4:d0:b6:2a:a1:18:74:35:53:6f:b8:
         d1:18:8e:5d:1c:ac:00:29:99:9b:70:36:bb:77:b2:21:c9:34:
         cb:68:64:b0:4e:c8:e7:6e:f7:16:09:95:43:e5:3d:d1:0b:5f:
         9d:97:c5:a7:ae:5f:5f:c8:c8:5b:06:cc:77:38:76:e7:1d:a0:
         c4:37:3f:39:f0:f2:72:de:04:bc:1e:94:95:75:48:9f:0f:fb:
         ad:ab:f9:9c:80:df:fe:9e:65:67:8d:04:01:fe:e7:0f:78:54:
         47:3b:b1:b1:6e:c9:75:fc:31:d0:b0:e7:7f:c1:0b:18:00:1f:
         e6:e3:b7:6b:0f:14:2f:e9:8a:dc:53:fd:d3:f3:c9:c9:85:2a:
         63:db:43:58:c0:18:a3:61:6e:b7:4b:99:ff:90:36:96:88:00:
         0c:35:61:24:f3:d4:98:8c:ca:d4:70:23:dd:27:78:86:6c:d9:
         4e:82:c1:95:dc:e4:ba:ba:ad:c2:dc:bd:ea:5f:f3:06:d0:40:
         b3:68:c1:44:69:42:96:b5:7a:9d:20:88:c2:ee:07:2f:6b:ac:
         a8:ac:08:ab:3e:12:2b:8a:7c:19:af:17:56:68:86:e9:da:3d:
         64:b3:31:47:5a:94:aa:99:24:19:a4:f2:99:43:4c:b5:cb:70:
         ec:48:6c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:07 2024 by rpki-client on console-fra.rpki-client.org