Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ZHIYIN/dC7KI0Hd_15CE6vmnwScXS-0Yeg.roa
File:                     dC7KI0Hd_15CE6vmnwScXS-0Yeg.roa (raw, json)
Hash identifier:          88r3MniQucTL2vnfj+tOy2vkgD4eXWVvtznzNkX/nh0=
Subject key identifier:   74:2E:CA:23:41:DD:FF:5E:42:13:AB:E6:9F:04:9C:5D:2F:B4:61:E8
Certificate issuer:       /CN=B56C9B2E3A040879CFD00FE74D697FB0465CF27A
Certificate serial:       0CCE
Authority key identifier: B5:6C:9B:2E:3A:04:08:79:CF:D0:0F:E7:4D:69:7F:B0:46:5C:F2:7A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/tWybLjoECHnP0A_nTWl_sEZc8no.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ZHIYIN/dC7KI0Hd_15CE6vmnwScXS-0Yeg.roa
Signing time:             Wed 29 Sep 2021 02:53:04 +0000
ROA not before:           Wed 29 Sep 2021 02:53:04 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     131662
IP address blocks:        2404:7340::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3278 (0xcce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B56C9B2E3A040879CFD00FE74D697FB0465CF27A
        Validity
            Not Before: Sep 29 02:53:04 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=742ECA2341DDFF5E4213ABE69F049C5D2FB461E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c5:c6:69:18:1c:9f:b9:49:c6:32:7a:0e:31:
                    5c:dc:af:25:b0:70:a1:17:3c:ac:8b:dc:eb:96:00:
                    14:9a:c3:70:4d:99:71:45:a2:56:4f:28:2e:bf:4c:
                    b9:1b:e5:8f:ff:63:b3:bf:fc:fd:b6:b6:5f:4c:68:
                    6a:5e:ba:8a:71:32:8c:4e:b8:38:b8:f5:d9:9a:10:
                    00:d0:a4:bf:12:6e:e6:f8:80:97:80:6b:ce:68:ff:
                    bb:b5:58:c3:af:17:3c:4b:56:b8:4b:57:33:1a:1a:
                    21:cd:42:3f:fe:3e:c9:b7:ca:d4:3c:ff:68:60:eb:
                    9d:6b:31:9c:e9:d7:f4:17:01:31:46:b3:1d:f0:ad:
                    b2:19:a3:9a:04:3b:d0:e4:73:d0:f8:18:49:5c:b6:
                    ab:01:33:e7:cc:ad:ec:7e:76:09:c8:7d:aa:b1:92:
                    1a:86:f0:d5:cd:ce:9d:c6:80:86:2b:ca:b6:d7:79:
                    82:79:4a:ec:a3:55:22:5f:c8:be:c8:38:96:25:b9:
                    4b:ae:7e:1f:a0:87:8c:ed:81:73:e9:6c:3f:fb:dd:
                    c6:6b:b0:27:d1:14:fb:10:d0:6f:83:22:4d:fb:3e:
                    42:a9:4c:1f:ca:d7:81:57:fd:85:98:a1:59:0a:a6:
                    a2:d6:be:7a:c9:93:11:66:37:df:bf:a4:df:7a:51:
                    b5:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:2E:CA:23:41:DD:FF:5E:42:13:AB:E6:9F:04:9C:5D:2F:B4:61:E8
            X509v3 Authority Key Identifier:
                keyid:B5:6C:9B:2E:3A:04:08:79:CF:D0:0F:E7:4D:69:7F:B0:46:5C:F2:7A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZHIYIN/tWybLjoECHnP0A_nTWl_sEZc8no.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tWybLjoECHnP0A_nTWl_sEZc8no.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZHIYIN/dC7KI0Hd_15CE6vmnwScXS-0Yeg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:7340::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:b4:49:34:ad:71:62:26:7b:93:f7:ab:4f:49:98:6a:99:05:
         37:e6:49:c2:d6:18:4f:03:58:a2:c6:08:d9:82:56:cd:f0:e6:
         b7:33:12:4b:26:af:30:d5:7d:d4:22:2c:5a:29:20:44:1d:2c:
         9d:42:48:34:76:08:5e:45:87:18:7c:8d:fe:37:1e:34:67:e8:
         f8:5b:18:77:fe:83:2e:12:90:0d:23:8d:50:02:3e:31:6e:2f:
         7a:8d:3d:a0:7d:63:d8:64:90:58:ac:a9:21:fa:f9:0b:ea:bc:
         d5:62:75:4c:9f:39:81:49:e8:fc:ab:a9:91:e6:1a:19:fe:9c:
         b2:ed:69:cc:cc:22:01:10:96:dd:c5:50:07:56:1c:d1:ce:b1:
         63:8f:32:77:1b:3a:5e:c0:cb:38:29:69:ff:0f:12:70:6d:c6:
         d3:a4:f1:fa:1a:8d:97:6a:2d:09:d8:78:08:43:30:d8:ee:db:
         f5:39:39:01:e8:6b:dc:12:0e:21:51:eb:e0:d2:ad:8d:7b:bf:
         a9:80:b4:6c:d3:ca:a8:51:c1:67:58:9c:80:59:6f:7a:9a:ae:
         bb:2c:56:10:fd:7f:07:27:57:81:c6:c9:56:65:36:5b:d6:d9:
         d9:2e:4d:66:f0:5e:c7:9d:df:64:e4:41:09:4d:fd:bc:f1:58:
         6e:31:03:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:07 2024 by rpki-client on console-fra.rpki-client.org