Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ZHIYIN/zwWZWukg5T-R_ER2hZVgQs7ClTA.roa
File:                     zwWZWukg5T-R_ER2hZVgQs7ClTA.roa (raw, json)
Hash identifier:          Ra1bRSzS31+v4Oy4IamiyHI7gQ4rcmZlGQIQe8Dtja4=
Subject key identifier:   CF:05:99:5A:E9:20:E5:3F:91:FC:44:76:85:95:60:42:CE:C2:95:30
Certificate issuer:       /CN=B56C9B2E3A040879CFD00FE74D697FB0465CF27A
Certificate serial:       0CCA
Authority key identifier: B5:6C:9B:2E:3A:04:08:79:CF:D0:0F:E7:4D:69:7F:B0:46:5C:F2:7A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/tWybLjoECHnP0A_nTWl_sEZc8no.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ZHIYIN/zwWZWukg5T-R_ER2hZVgQs7ClTA.roa
Signing time:             Wed 29 Sep 2021 02:53:02 +0000
ROA not before:           Wed 29 Sep 2021 02:53:02 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     138145
IP address blocks:        103.135.19.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3274 (0xcca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B56C9B2E3A040879CFD00FE74D697FB0465CF27A
        Validity
            Not Before: Sep 29 02:53:02 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=CF05995AE920E53F91FC447685956042CEC29530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a1:23:54:25:e6:0c:6b:c8:c6:47:e6:49:74:
                    22:69:ea:f0:a7:45:35:ab:9b:9e:d4:57:e2:aa:da:
                    b9:d7:49:72:ed:55:c2:a9:ec:bb:84:45:12:8c:bd:
                    dc:66:1c:10:a3:1f:11:ef:13:44:88:0c:f8:91:cf:
                    80:ee:6f:9b:19:a5:33:6e:7d:8a:1e:da:10:a1:80:
                    fb:82:01:56:10:54:62:80:1a:33:0a:47:8d:ec:f5:
                    41:a5:bd:e0:4c:e9:93:e6:72:03:2a:7a:11:ce:28:
                    fe:87:31:60:8a:b6:f9:5e:02:11:df:b2:a0:6e:0b:
                    6e:49:a2:88:3f:7f:cb:61:49:1b:5b:d2:ff:3b:a4:
                    8a:b1:e9:fb:10:4c:ef:ca:8f:60:d3:95:3f:5f:ea:
                    67:32:46:ad:8c:25:99:25:7d:a5:f5:a6:1a:df:54:
                    90:dd:12:35:08:c8:4f:95:13:a1:e1:01:9a:e0:54:
                    48:33:aa:10:50:e3:43:35:88:64:0b:c0:c6:e3:ac:
                    e0:38:d1:d1:bf:2a:b6:a5:66:9b:87:c6:21:0a:b9:
                    69:5b:89:9e:7b:29:f5:4a:63:f5:ed:0b:d8:02:34:
                    fd:a7:06:32:e7:5c:1c:04:0c:9f:1a:db:35:e4:a1:
                    d6:a9:06:91:5d:4f:04:0d:84:5c:0e:8a:24:0a:88:
                    b1:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:05:99:5A:E9:20:E5:3F:91:FC:44:76:85:95:60:42:CE:C2:95:30
            X509v3 Authority Key Identifier:
                keyid:B5:6C:9B:2E:3A:04:08:79:CF:D0:0F:E7:4D:69:7F:B0:46:5C:F2:7A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZHIYIN/tWybLjoECHnP0A_nTWl_sEZc8no.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tWybLjoECHnP0A_nTWl_sEZc8no.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZHIYIN/zwWZWukg5T-R_ER2hZVgQs7ClTA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:44:5a:e1:4e:dc:d2:cd:4f:13:5d:dd:14:51:4a:57:77:dd:
         68:68:1b:9e:70:64:ef:93:b1:0b:48:4a:6f:ec:d4:6b:db:ae:
         17:ea:8d:c5:7e:48:6b:37:6c:58:d3:97:20:61:56:78:29:38:
         08:41:1f:12:0b:7a:cc:df:4a:dc:f7:67:85:ca:9b:8f:6c:7a:
         a0:04:9b:c6:a1:7b:9a:0d:19:a8:c0:91:fd:57:a7:5c:3a:d2:
         c6:24:d8:05:3d:47:9a:7f:c7:28:e6:31:85:dd:44:ba:3f:06:
         7d:d0:0b:cb:f7:75:fe:6d:d2:43:a3:fe:28:52:6a:da:68:78:
         da:99:e0:45:d8:be:2b:92:88:49:55:c2:69:ce:55:ae:04:61:
         95:11:5e:cf:94:d4:36:28:23:47:95:c2:7a:dd:5b:d4:e5:87:
         61:e2:74:0c:3e:d3:b6:66:e6:d1:37:c4:9c:3c:3c:29:3e:ba:
         c9:f5:6b:f1:29:44:2a:ab:8c:38:42:3b:ff:ca:c8:02:f0:22:
         3d:96:2b:fe:c2:af:9f:b5:01:59:f1:8b:ff:33:ab:60:22:ae:
         93:1e:a1:10:b7:5e:26:63:20:22:ee:b7:9e:8d:dc:88:fa:30:
         9f:df:82:2f:6a:3b:24:07:e2:b7:ba:ec:7d:e7:42:ef:cd:07:
         ef:3a:79:a0
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDMowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjU2
QzlCMkUzQTA0MDg3OUNGRDAwRkU3NEQ2OTdGQjA0NjVDRjI3QTAeFw0yMTA5Mjkw
MjUzMDJaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKENGMDU5OTVBRTkyMEU1
M0Y5MUZDNDQ3Njg1OTU2MDQyQ0VDMjk1MzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCcoSNUJeYMa8jGR+ZJdCJp6vCnRTWrm57UV+Kq2rnXSXLtVcKp
7LuERRKMvdxmHBCjHxHvE0SIDPiRz4Dub5sZpTNufYoe2hChgPuCAVYQVGKAGjMK
R43s9UGlveBM6ZPmcgMqehHOKP6HMWCKtvleAhHfsqBuC25Joog/f8thSRtb0v87
pIqx6fsQTO/Kj2DTlT9f6mcyRq2MJZklfaX1phrfVJDdEjUIyE+VE6HhAZrgVEgz
qhBQ40M1iGQLwMbjrOA40dG/KralZpuHxiEKuWlbiZ57KfVKY/XtC9gCNP2nBjLn
XBwEDJ8a2zXkodapBpFdTwQNhFwOiiQKiLHBAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUzwWZWukg5T+R/ER2hZVgQs7ClTAwHwYDVR0jBBgwFoAUtWybLjoECHnP0A/n
TWl/sEZc8nowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvWkhJWUlO
L3RXeWJMam9FQ0huUDBBX25UV2xfc0VaYzhuby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvdFd5Ykxqb0VDSG5QMEFfblRXbF9zRVpjOG5vLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvWkhJWUlOL3p3V1pXdWtnNVQtUl9FUjJo
WlZnUXM3Q2xUQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn
hxMwDQYJKoZIhvcNAQELBQADggEBABhEWuFO3NLNTxNd3RRRSld33WhoG55wZO+T
sQtISm/s1GvbrhfqjcV+SGs3bFjTlyBhVngpOAhBHxILeszfStz3Z4XKm49seqAE
m8ahe5oNGajAkf1Xp1w60sYk2AU9R5p/xyjmMYXdRLo/Bn3QC8v3df5t0kOj/ihS
atpoeNqZ4EXYviuSiElVwmnOVa4EYZURXs+U1DYoI0eVwnrdW9Tlh2HidAw+07Zm
5tE3xJw8PCk+usn1a/EpRCqrjDhCO//KyALwIj2WK/7Cr5+1AVnxi/8zq2AirpMe
oRC3XiZjICLut56N3Ij6MJ/fgi9qOyQH4re67H3nQu/NB+86eaA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:52 2024 by rpki-client on console-ams.rpki-client.org