Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ZHIYIN/9_JqGZ1pwtKiMv21MDBlIPer5qk.roa
File:                     9_JqGZ1pwtKiMv21MDBlIPer5qk.roa (raw, json)
Hash identifier:          m18ixvNBfV9KxdEDrsLGmOSCFxjYIq5LPx5bvTxWU0o=
Subject key identifier:   F7:F2:6A:19:9D:69:C2:D2:A2:32:FD:B5:30:30:65:20:F7:AB:E6:A9
Certificate issuer:       /CN=B56C9B2E3A040879CFD00FE74D697FB0465CF27A
Certificate serial:       0CCB
Authority key identifier: B5:6C:9B:2E:3A:04:08:79:CF:D0:0F:E7:4D:69:7F:B0:46:5C:F2:7A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/tWybLjoECHnP0A_nTWl_sEZc8no.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ZHIYIN/9_JqGZ1pwtKiMv21MDBlIPer5qk.roa
Signing time:             Wed 29 Sep 2021 02:53:03 +0000
ROA not before:           Wed 29 Sep 2021 02:53:03 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     138145
IP address blocks:        103.135.16.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3275 (0xccb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B56C9B2E3A040879CFD00FE74D697FB0465CF27A
        Validity
            Not Before: Sep 29 02:53:03 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=F7F26A199D69C2D2A232FDB530306520F7ABE6A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8f:00:f6:a1:e2:3e:1f:ca:11:98:cd:4b:f2:
                    cc:6c:54:c8:65:32:99:23:d4:49:2f:ac:1d:3e:3c:
                    81:e1:2c:fd:10:96:95:5e:4e:4f:b7:db:59:8d:15:
                    ae:d0:29:32:3e:f8:8e:a6:7b:f0:f8:44:92:61:fb:
                    64:5f:d8:0c:6a:cb:9d:3c:67:5e:32:a0:33:c0:7a:
                    e1:e5:8c:24:87:81:2e:b5:37:53:ac:60:52:3c:d1:
                    f5:79:83:7d:67:b0:4e:f2:ed:79:41:84:ec:f1:9f:
                    34:70:72:56:a8:87:cd:08:38:68:b0:f3:dc:5e:f8:
                    9f:aa:1c:d2:0d:57:33:f7:d9:75:e4:8a:c2:55:ed:
                    0a:8a:31:22:bc:56:0e:82:70:f4:73:38:38:a9:e3:
                    75:fe:61:90:18:e2:cc:b4:d0:c9:d6:bc:d9:f8:37:
                    d6:bf:13:fa:1a:73:c7:54:5c:70:b7:32:e3:7d:d2:
                    79:40:df:f0:92:a0:2f:73:f3:7b:c5:fb:90:50:c8:
                    ba:db:5b:fe:2e:e2:47:4e:b0:7c:ea:ec:8a:93:29:
                    aa:c1:4e:43:e3:eb:bf:aa:7e:e7:cd:78:cc:12:17:
                    2f:8f:e9:f1:e8:db:77:9c:67:15:20:6f:e8:39:70:
                    bc:b3:3d:fc:92:22:94:48:00:b4:7a:22:ea:c2:b8:
                    f1:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:F2:6A:19:9D:69:C2:D2:A2:32:FD:B5:30:30:65:20:F7:AB:E6:A9
            X509v3 Authority Key Identifier:
                keyid:B5:6C:9B:2E:3A:04:08:79:CF:D0:0F:E7:4D:69:7F:B0:46:5C:F2:7A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZHIYIN/tWybLjoECHnP0A_nTWl_sEZc8no.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tWybLjoECHnP0A_nTWl_sEZc8no.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZHIYIN/9_JqGZ1pwtKiMv21MDBlIPer5qk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:92:12:ad:6a:a3:d9:e0:ed:03:39:7c:09:c6:75:1c:b1:c8:
         b6:96:f5:e7:8d:b4:b9:8a:d4:1f:6a:d1:55:0a:b9:ee:aa:64:
         00:a6:09:23:90:ca:a2:1e:a3:a8:d6:95:82:fc:f5:a0:f4:12:
         95:a2:43:7c:eb:da:c2:7f:a8:a8:af:fb:6a:c7:6e:9a:30:e4:
         43:5e:94:d2:c2:6b:5c:8f:2c:41:f6:81:d9:7b:62:e5:b7:f8:
         6f:16:ae:43:17:30:c9:85:33:2d:f1:9c:64:89:77:b5:a4:13:
         b7:bf:be:28:7b:6b:b0:ed:21:43:4a:b6:c0:52:8b:c8:46:af:
         f2:27:27:9c:b8:33:3b:9e:9c:d2:7d:27:60:54:db:d4:d0:73:
         a4:f0:61:27:c1:b2:c2:20:d1:4d:9a:9a:c5:70:ed:ee:b4:6f:
         c6:f4:d3:41:69:ce:63:5f:8b:aa:01:6a:e1:f2:c2:33:b2:ce:
         08:8a:b9:9a:a9:35:0b:74:d7:a8:44:28:83:da:6e:ba:70:7d:
         da:9e:23:88:c5:ad:97:51:20:9a:7e:22:25:ea:87:87:70:f0:
         29:0a:85:3d:80:9d:bc:b0:f9:73:a1:a4:39:b8:74:e6:d0:f9:
         a1:6e:93:7d:14:6e:99:cf:6a:4e:da:d9:52:85:33:3d:86:28:
         9e:b7:64:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:52 2024 by rpki-client on console-ams.rpki-client.org