Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ZHIYIN/dJXnKI8rQ_HMWYeuomdaDb1sowM.roa
File:                     dJXnKI8rQ_HMWYeuomdaDb1sowM.roa (raw, json)
Hash identifier:          2AvEJ9YEMo/VDIxijTRasqh7Q7H7QM6rz5eXd0TTk88=
Subject key identifier:   74:95:E7:28:8F:2B:43:F1:CC:59:87:AE:A2:67:5A:0D:BD:6C:A3:03
Certificate issuer:       /CN=B56C9B2E3A040879CFD00FE74D697FB0465CF27A
Certificate serial:       0ADF
Authority key identifier: B5:6C:9B:2E:3A:04:08:79:CF:D0:0F:E7:4D:69:7F:B0:46:5C:F2:7A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/tWybLjoECHnP0A_nTWl_sEZc8no.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ZHIYIN/dJXnKI8rQ_HMWYeuomdaDb1sowM.roa
Signing time:             Tue 29 Sep 2020 10:00:45 +0000
ROA not before:           Tue 29 Sep 2020 10:00:45 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     131662
IP address blocks:        2404:7340::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2783 (0xadf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B56C9B2E3A040879CFD00FE74D697FB0465CF27A
        Validity
            Not Before: Sep 29 10:00:45 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=7495E7288F2B43F1CC5987AEA2675A0DBD6CA303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:98:2f:c5:11:51:3e:ee:d8:aa:01:0c:e7:00:
                    19:f2:02:2b:e9:99:0a:4c:77:2d:be:de:3b:58:d3:
                    54:77:07:42:3b:03:b6:ad:14:8b:09:e2:c5:02:19:
                    30:09:24:77:9e:7f:9b:72:f5:e0:50:57:13:5e:c3:
                    01:f9:07:a0:10:f8:10:c8:08:76:fd:35:c0:32:08:
                    bb:28:6c:6f:fc:f3:4c:48:1e:57:c0:17:c4:e6:be:
                    0f:d6:f0:35:56:60:bb:5b:06:ad:c1:f5:5d:8c:4d:
                    ee:a3:1c:7c:ce:51:a6:3a:78:f4:bd:0c:98:a6:c6:
                    2b:23:49:b1:cf:53:f9:85:d1:3f:7e:24:2c:e4:8d:
                    e5:a9:ef:f5:71:98:36:48:01:2c:fa:4e:71:7c:fc:
                    58:d6:2e:6e:b9:69:8e:99:65:57:85:46:7e:72:16:
                    05:db:14:46:bd:29:92:bc:f7:91:7d:b0:af:f2:71:
                    b7:49:d1:13:0f:bd:5a:80:d2:0e:34:fe:6b:4a:6f:
                    fc:5a:d8:cf:ac:b9:61:0c:93:c9:e6:22:87:9f:ca:
                    23:12:07:b5:c2:42:0c:c6:e5:3b:9c:27:5f:89:5d:
                    48:04:c0:ca:78:7d:b6:58:0b:20:e8:fa:b4:ef:cd:
                    c1:a4:26:c1:34:9c:4b:46:21:77:d1:e2:c1:46:a3:
                    95:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:95:E7:28:8F:2B:43:F1:CC:59:87:AE:A2:67:5A:0D:BD:6C:A3:03
            X509v3 Authority Key Identifier:
                keyid:B5:6C:9B:2E:3A:04:08:79:CF:D0:0F:E7:4D:69:7F:B0:46:5C:F2:7A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZHIYIN/tWybLjoECHnP0A_nTWl_sEZc8no.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tWybLjoECHnP0A_nTWl_sEZc8no.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZHIYIN/dJXnKI8rQ_HMWYeuomdaDb1sowM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:7340::/32

    Signature Algorithm: sha256WithRSAEncryption
         ad:ec:bb:1e:ab:7d:2b:e9:c4:74:41:89:d1:00:85:d7:9a:43:
         74:32:78:01:00:b6:4f:16:96:d7:47:66:e0:23:d9:88:d8:1e:
         45:7f:79:5b:a2:00:34:e7:9e:59:a1:eb:7a:6c:40:5c:8e:c4:
         7d:ba:03:f9:71:b9:02:1d:1a:a2:f1:4c:22:f1:eb:9f:04:92:
         5f:53:19:d8:69:5a:47:5c:13:43:41:de:9c:40:d2:ac:71:76:
         19:8f:5f:a4:0a:79:37:16:50:4a:bb:d7:cd:bc:37:72:2e:d5:
         0d:93:8a:c6:dc:43:e9:03:a0:1c:73:49:9b:79:71:1f:1b:b2:
         c0:56:a9:c6:cd:54:25:03:49:e8:94:ac:88:1b:3e:c5:ce:e2:
         42:12:ed:6f:b1:cf:b3:3a:bf:5e:b9:80:22:ef:2a:1c:2a:9c:
         94:08:f1:69:0c:bd:3a:fa:45:fc:92:a3:32:f5:07:7d:6c:01:
         1e:46:3f:e0:fd:cb:31:7f:96:4a:b4:99:86:a8:03:e7:ab:d6:
         49:4a:0d:fa:a8:90:3b:2d:c8:23:ce:35:65:56:11:ac:42:45:
         24:22:7a:ac:c7:49:0f:2d:10:ef:27:20:9b:be:fd:61:10:84:
         26:77:4e:6c:57:a6:6f:b6:6c:5b:5e:f1:b2:e3:5f:fc:fd:a6:
         6e:8f:9e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:07 2024 by rpki-client on console-fra.rpki-client.org