Route Origin Authorization

$ rpki-client -vvf rpki.august.tw/repo/MT/3/323030313a3637633a326265383a3a2f34382d3438203d3e20323035333239.roa
File:                     323030313a3637633a326265383a3a2f34382d3438203d3e20323035333239.roa (raw, json)
Hash identifier:          QinaEa5uJEBA0RTPMdm41Yb8XYnWEi9BTiAPdGC8ZT0=
Subject key identifier:   01:7B:A0:5C:68:39:8F:01:28:AC:2A:42:AC:94:57:3B:42:4E:6C:8E
Certificate issuer:       /CN=39c8f1fa9e8ad55f856c24f5fdc8264462462160
Certificate serial:       444FEF348B1248A2C3AAE79A976A45A2E844F909
Authority key identifier: 39:C8:F1:FA:9E:8A:D5:5F:85:6C:24:F5:FD:C8:26:44:62:46:21:60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ocjx-p6K1V-FbCT1_cgmRGJGIWA.cer
Subject info access:      rsync://rpki.august.tw/repo/MT/3/323030313a3637633a326265383a3a2f34382d3438203d3e20323035333239.roa
Signing time:             Tue 07 Mar 2023 15:45:47 +0000
ROA not before:           Tue 07 Mar 2023 15:40:47 +0000
ROA not after:            Tue 05 Mar 2024 15:45:47 +0000
asID:                     205329
IP address blocks:        2001:67c:2be8::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:4f:ef:34:8b:12:48:a2:c3:aa:e7:9a:97:6a:45:a2:e8:44:f9:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39c8f1fa9e8ad55f856c24f5fdc8264462462160
        Validity
            Not Before: Mar  7 15:40:47 2023 GMT
            Not After : Mar  5 15:45:47 2024 GMT
        Subject: CN=017BA05C68398F0128AC2A42AC94573B424E6C8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:73:73:52:27:80:e5:4a:8a:9d:e9:5c:56:01:
                    26:4c:44:93:35:e8:50:18:ca:0e:46:e1:0a:f9:1b:
                    de:1a:3a:59:50:00:e3:7d:cb:ac:32:f5:a2:a4:37:
                    11:3d:b6:b5:85:46:ab:e9:99:52:c5:ba:23:91:e8:
                    70:1c:be:9d:2a:8d:c8:4e:96:04:4b:84:9a:ab:2a:
                    1a:37:40:e8:f6:25:ec:42:05:b3:a4:c8:bc:1b:99:
                    6c:c1:82:70:30:cf:ad:f7:17:c3:ff:35:a5:5c:0b:
                    b8:24:d3:26:90:ba:76:12:a2:ec:26:62:f7:fc:ee:
                    ab:f6:f8:8a:eb:95:53:15:13:71:99:52:2b:7d:12:
                    0f:88:5f:77:5c:04:9d:56:17:d0:61:69:41:6c:6e:
                    6c:8b:c0:29:0e:90:6b:db:28:b1:e5:3b:b0:ba:a5:
                    77:6e:78:ad:d0:0f:7e:89:ad:3a:ca:37:59:47:0b:
                    fb:e5:9d:80:e5:e1:62:13:d5:02:c0:cd:54:e1:25:
                    55:6d:b3:fe:3c:0f:4a:c5:9c:a2:17:77:0f:c5:73:
                    ca:35:b6:5c:6b:91:89:32:04:ec:e4:7b:6c:98:3d:
                    5e:c3:7d:2a:8d:51:9a:9b:7b:ad:3a:da:82:37:4a:
                    79:28:fc:c5:ce:0b:ae:88:2e:d1:a3:b9:ba:4c:5e:
                    4b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:7B:A0:5C:68:39:8F:01:28:AC:2A:42:AC:94:57:3B:42:4E:6C:8E
            X509v3 Authority Key Identifier:
                keyid:39:C8:F1:FA:9E:8A:D5:5F:85:6C:24:F5:FD:C8:26:44:62:46:21:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.august.tw/repo/MT/3/39C8F1FA9E8AD55F856C24F5FDC8264462462160.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ocjx-p6K1V-FbCT1_cgmRGJGIWA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.august.tw/repo/MT/3/323030313a3637633a326265383a3a2f34382d3438203d3e20323035333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:2be8::/48

    Signature Algorithm: sha256WithRSAEncryption
         9e:56:34:8e:50:ad:f7:03:7f:73:d5:b9:78:78:a3:a9:91:cc:
         3d:17:3b:d7:bf:8c:84:ef:ed:c8:84:26:11:e7:71:78:7b:a1:
         a8:db:ad:9d:ac:2d:1c:f3:81:99:6d:73:93:10:cf:f3:85:06:
         90:89:17:a5:f0:15:eb:8a:d8:bb:f4:36:d1:51:a7:14:69:e8:
         c5:2d:5d:07:36:1b:63:71:c2:b4:eb:d4:be:10:de:d6:37:22:
         b5:c3:80:13:07:7e:4a:cf:e8:19:ce:bc:f2:62:ff:e7:81:78:
         15:a7:71:92:48:c5:77:a4:e2:3c:85:64:02:07:0f:42:ba:2e:
         84:e9:86:00:d0:52:bf:4e:43:5e:90:d8:ce:6e:68:63:45:8e:
         83:9d:a6:6b:21:db:07:1a:25:64:24:37:db:ba:36:69:05:b7:
         ce:eb:27:7d:bc:6c:cf:0e:2d:8f:63:1a:7f:12:b3:b0:e0:68:
         d2:a5:9f:14:66:7f:2e:ea:d8:02:86:de:47:df:60:ea:33:93:
         c7:d7:ed:9f:59:3c:f8:7b:db:aa:b9:3d:a9:dc:6b:25:b0:79:
         c0:23:75:70:ba:89:bd:1f:1d:48:36:07:a3:79:a6:82:39:44:
         cf:82:2a:e3:80:91:3a:d4:c5:35:7f:b2:ab:74:bc:19:08:95:
         1b:e0:2a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:13 2023 by rpki-client on console.sobornost.net