Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ZHIYIN/I2G6arovlbMHdLuYIzpEVE0Kuvs.roa
File:                     I2G6arovlbMHdLuYIzpEVE0Kuvs.roa (raw, json)
Hash identifier:          OeqVkLlEvGmems8xhH8JBmwSMIJk4qkBfokMH1gEJfE=
Subject key identifier:   23:61:BA:6A:BA:2F:95:B3:07:74:BB:98:23:3A:44:54:4D:0A:BA:FB
Certificate issuer:       /CN=B56C9B2E3A040879CFD00FE74D697FB0465CF27A
Certificate serial:       0AE3
Authority key identifier: B5:6C:9B:2E:3A:04:08:79:CF:D0:0F:E7:4D:69:7F:B0:46:5C:F2:7A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/tWybLjoECHnP0A_nTWl_sEZc8no.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ZHIYIN/I2G6arovlbMHdLuYIzpEVE0Kuvs.roa
Signing time:             Tue 29 Sep 2020 10:00:46 +0000
ROA not before:           Tue 29 Sep 2020 10:00:46 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     138145
IP address blocks:        103.135.19.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2787 (0xae3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B56C9B2E3A040879CFD00FE74D697FB0465CF27A
        Validity
            Not Before: Sep 29 10:00:46 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=2361BA6ABA2F95B30774BB98233A44544D0ABAFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c2:89:87:90:be:21:a0:01:b5:4d:49:b3:08:
                    78:b5:a0:ab:09:8b:27:a8:aa:c3:c3:eb:88:30:37:
                    35:48:3d:d0:8b:ec:14:43:c0:b8:27:cf:95:5a:e1:
                    2e:d5:db:2a:8a:a2:f2:23:aa:61:e3:71:55:a4:4c:
                    6e:1c:02:55:e7:eb:d7:37:53:56:c6:96:00:da:65:
                    7e:4f:b6:e9:90:d7:27:86:e8:9d:ca:aa:7a:5c:b4:
                    63:ab:b1:03:d3:34:2c:ce:ab:66:a1:ff:ed:40:42:
                    a4:5b:fe:a1:af:53:f9:cf:f6:e6:35:88:db:1f:84:
                    44:59:1e:f6:1c:d7:3b:59:5d:c2:30:54:7c:f8:96:
                    ad:d6:3a:21:d8:05:80:da:b6:70:12:da:8d:31:43:
                    87:7e:71:bd:ca:b0:37:51:77:e7:fc:97:62:24:85:
                    b5:10:7b:1d:59:b9:63:44:b7:1b:30:f3:52:66:aa:
                    5a:14:e5:27:51:1a:ad:4f:b5:10:c6:be:c3:42:61:
                    be:55:a1:7b:e6:be:06:e0:28:dc:62:a3:9a:11:3d:
                    39:dc:71:70:aa:60:12:d1:48:78:f5:14:31:3f:9f:
                    54:72:cb:b3:f6:36:be:dc:10:ea:c8:5c:52:4b:71:
                    b7:5d:f0:1d:93:6c:a4:df:63:20:52:86:3b:7f:c3:
                    aa:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:61:BA:6A:BA:2F:95:B3:07:74:BB:98:23:3A:44:54:4D:0A:BA:FB
            X509v3 Authority Key Identifier:
                keyid:B5:6C:9B:2E:3A:04:08:79:CF:D0:0F:E7:4D:69:7F:B0:46:5C:F2:7A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZHIYIN/tWybLjoECHnP0A_nTWl_sEZc8no.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tWybLjoECHnP0A_nTWl_sEZc8no.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZHIYIN/I2G6arovlbMHdLuYIzpEVE0Kuvs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:00:d3:14:a3:fe:9a:58:f4:15:44:22:08:6f:57:c1:c4:cd:
         c5:57:14:ea:43:ba:3a:00:a7:83:6d:15:77:0f:75:b4:f5:7a:
         33:67:17:c9:23:0a:70:ba:0b:ce:09:dc:9e:9b:4f:42:c0:4c:
         58:98:69:0d:4a:c0:cc:d7:c6:45:ba:e8:c2:b2:50:ab:e3:2e:
         d0:fe:b2:14:da:24:b6:fe:79:23:a4:2e:64:bf:b1:6d:0d:16:
         d6:d9:63:b8:16:8f:b4:77:58:e4:87:66:41:13:d5:db:4a:ba:
         69:f6:f5:c5:f5:76:6d:b5:ae:00:4e:be:fe:54:75:43:81:11:
         3f:82:f2:68:ce:7a:cb:fe:dd:2b:77:76:f4:62:fe:dc:9b:27:
         f6:75:50:09:95:ab:58:c3:45:2b:ea:4e:58:9a:6e:3b:da:95:
         98:45:00:3f:65:32:44:25:6c:86:91:0e:b0:07:e6:2a:da:53:
         6d:4c:0b:01:29:ae:d4:07:d7:e1:47:58:a3:e0:1f:1f:43:c9:
         42:e1:49:66:4e:6d:85:ac:bb:fb:72:19:80:8a:8b:01:d7:60:
         23:93:89:50:d4:b1:d9:05:d0:3c:8f:68:5f:18:fa:99:b5:6c:
         9e:8d:6f:3d:29:27:99:ab:93:da:ca:89:69:a8:46:b6:c8:e6:
         51:d8:36:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:07 2024 by rpki-client on console-fra.rpki-client.org