Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ZHIYIN/uhPv_ZiUJ2ATpkKOERqUnPE1T98.roa
File:                     uhPv_ZiUJ2ATpkKOERqUnPE1T98.roa (raw, json)
Hash identifier:          /2ULdgqY2/dEfi+yCsF9wl+8c0fTPuZDzF3qUUus4YI=
Subject key identifier:   BA:13:EF:FD:98:94:27:60:13:A6:42:8E:11:1A:94:9C:F1:35:4F:DF
Certificate issuer:       /CN=B56C9B2E3A040879CFD00FE74D697FB0465CF27A
Certificate serial:       0EAC
Authority key identifier: B5:6C:9B:2E:3A:04:08:79:CF:D0:0F:E7:4D:69:7F:B0:46:5C:F2:7A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/tWybLjoECHnP0A_nTWl_sEZc8no.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ZHIYIN/uhPv_ZiUJ2ATpkKOERqUnPE1T98.roa
Signing time:             Fri 01 Sep 2023 10:24:21 +0000
ROA not before:           Fri 01 Sep 2023 10:24:21 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     138145
IP address blocks:        103.135.19.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3756 (0xeac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B56C9B2E3A040879CFD00FE74D697FB0465CF27A
        Validity
            Not Before: Sep  1 10:24:21 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=BA13EFFD9894276013A6428E111A949CF1354FDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:90:0e:c5:f0:7e:36:33:ae:40:33:4c:69:ce:
                    cd:09:bf:08:14:6a:b9:30:75:59:60:e1:da:50:73:
                    64:4c:92:fa:4c:6c:94:45:7c:05:97:43:cf:90:10:
                    45:23:1a:74:89:57:62:77:46:1b:e7:fd:ce:53:b1:
                    32:ad:d5:a4:c7:7b:7e:9d:18:5e:c7:3a:b1:50:68:
                    01:dd:67:8a:6c:fd:3d:f3:08:1f:31:f2:c9:49:70:
                    f9:b7:72:4c:9b:13:78:dc:de:f2:32:ed:c7:58:97:
                    e5:fb:24:76:33:52:c2:0c:d3:16:1c:92:01:fc:cf:
                    48:dc:a2:1b:39:aa:7d:be:8a:f4:88:fb:48:75:fe:
                    d8:e3:f2:74:4c:02:b4:33:6b:ee:b7:1a:d8:66:ac:
                    c5:7f:76:28:7b:95:55:7a:00:01:6f:e7:32:14:9c:
                    8f:8a:60:8d:64:b5:ea:69:cd:6f:3d:3f:b1:5d:9d:
                    be:35:b5:f8:af:91:0a:06:e4:29:65:fd:9a:48:52:
                    29:0d:c0:8c:90:69:6e:13:5b:ac:08:3e:60:3d:88:
                    9d:b7:5d:b2:18:50:d8:6b:aa:f3:07:8d:b3:8e:4a:
                    f9:87:08:38:b2:59:1e:45:49:e3:be:6f:e3:bc:25:
                    ef:8b:11:a9:fe:14:a1:7e:02:cb:b9:59:2d:25:73:
                    ed:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:13:EF:FD:98:94:27:60:13:A6:42:8E:11:1A:94:9C:F1:35:4F:DF
            X509v3 Authority Key Identifier:
                keyid:B5:6C:9B:2E:3A:04:08:79:CF:D0:0F:E7:4D:69:7F:B0:46:5C:F2:7A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZHIYIN/tWybLjoECHnP0A_nTWl_sEZc8no.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tWybLjoECHnP0A_nTWl_sEZc8no.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZHIYIN/uhPv_ZiUJ2ATpkKOERqUnPE1T98.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:e8:9c:29:1a:74:e2:47:38:de:8e:4d:f5:25:27:cd:6b:11:
         d9:3d:c7:e5:5b:38:8d:95:39:3e:e0:b7:e0:53:40:5c:f8:32:
         77:63:c4:69:f7:cb:e2:85:85:ee:59:98:c0:35:ed:4a:bf:4c:
         61:7e:20:e4:e0:61:d3:ba:32:98:94:8c:2b:4b:01:68:8a:80:
         26:2a:41:f0:d0:a8:4c:39:17:1c:77:36:46:24:92:9f:74:42:
         46:af:d4:82:4c:18:02:f9:20:50:08:63:78:5d:65:be:7a:03:
         63:43:78:82:38:08:ef:e5:df:e1:87:d3:53:79:6a:dd:7b:68:
         19:e6:de:9a:9d:6d:e6:20:80:ab:de:86:1d:80:52:20:90:6e:
         ac:4b:5d:3b:e0:e1:40:23:25:fe:55:83:9c:5e:4a:27:3e:4c:
         5e:48:a3:59:83:69:2f:84:cc:64:70:47:8b:b3:83:af:bc:98:
         f9:fd:c1:86:e6:ca:77:d3:06:de:36:43:ec:74:3a:01:cd:62:
         c0:b1:8f:a6:bd:7e:e3:04:33:69:45:5a:30:71:b4:d9:fb:e0:
         39:20:5f:d3:a7:02:0c:fe:12:e9:dd:3e:b6:e6:bd:8e:6f:8d:
         f9:ad:98:a2:fb:3c:17:b4:40:1a:8d:83:be:6f:b0:69:0c:39:
         15:f7:a6:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:52 2024 by rpki-client on console-ams.rpki-client.org