Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/8A619SVOkFKXsgiyN-L0pPovkCU.roa
File:                     8A619SVOkFKXsgiyN-L0pPovkCU.roa (raw, json)
Hash identifier:          T7S+fj4FARRmSmz0maTNd2KPfPRTRGPQjXDHaiuEisA=
Subject key identifier:   F0:0E:B5:F5:25:4E:90:52:97:B2:08:B2:37:E2:F4:A4:FA:2F:90:25
Certificate issuer:       /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial:       1473
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/8A619SVOkFKXsgiyN-L0pPovkCU.roa
Signing time:             Mon 10 Feb 2025 14:34:55 +0000
ROA not before:           Mon 10 Feb 2025 14:34:55 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     3462
IP address blocks:        2001:b400:e9f0::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5235 (0x1473)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
        Validity
            Not Before: Feb 10 14:34:55 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=F00EB5F5254E905297B208B237E2F4A4FA2F9025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:49:02:a0:f3:c1:fa:d2:72:a7:c1:03:2f:2e:
                    9e:f3:04:e5:52:41:0d:74:ca:1f:6d:2c:a5:15:c6:
                    6f:4d:de:5b:35:13:73:85:e0:ee:ce:3d:e4:6b:b9:
                    e3:90:24:76:34:b4:56:93:1f:40:11:1c:1f:ac:76:
                    0c:cc:5d:19:e1:53:ca:03:24:09:e0:20:d2:36:18:
                    ac:1d:9f:f5:42:03:a9:f3:8c:32:89:9c:a5:91:1d:
                    69:83:18:bc:5a:65:f8:52:88:61:45:99:2b:25:1d:
                    1f:7e:e8:77:d0:61:98:5b:45:0f:4b:9a:ea:93:45:
                    41:2a:1f:fc:8d:ed:a5:4f:eb:03:cb:c0:55:dd:df:
                    c7:c1:e5:e0:98:f6:55:c9:58:97:9e:45:b0:9c:ee:
                    22:90:88:de:68:ea:37:6d:ce:20:79:fa:74:50:80:
                    0c:cb:e1:1f:7c:e8:ab:4d:97:f7:39:ee:4a:66:6f:
                    7f:5f:f1:1d:6a:a0:07:81:67:95:37:8d:09:db:95:
                    0d:f9:b2:28:59:5f:0a:2a:a8:b6:ab:34:68:25:e5:
                    1b:9e:f6:2e:99:75:8d:81:aa:f1:29:fb:5f:4a:28:
                    27:53:eb:e3:35:d7:49:c8:47:20:53:1d:95:8a:95:
                    c4:7a:55:ea:48:fb:23:51:9a:91:07:ae:5b:ce:df:
                    c4:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:0E:B5:F5:25:4E:90:52:97:B2:08:B2:37:E2:F4:A4:FA:2F:90:25
            X509v3 Authority Key Identifier:
                keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/8A619SVOkFKXsgiyN-L0pPovkCU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:b400:e9f0::/44

    Signature Algorithm: sha256WithRSAEncryption
         9b:c2:0e:d7:90:0c:18:d3:6e:4e:8b:55:77:ef:f3:ad:76:7e:
         07:92:32:ab:2c:7f:25:38:59:26:1b:13:de:f9:ef:37:40:4f:
         7d:23:0e:f6:cb:f7:fc:be:6e:62:76:5e:19:f0:e5:4a:8a:9b:
         f8:56:8c:51:82:1c:59:b7:3c:6f:14:71:73:23:cd:26:25:b3:
         80:e5:ad:7d:51:54:59:09:c6:29:aa:d6:87:c5:57:50:a2:a4:
         57:b4:05:ac:54:95:1a:dd:e7:28:a9:ae:a0:41:7d:2f:3f:68:
         e2:33:6c:89:b9:2d:df:75:db:15:f5:26:e3:70:49:aa:f5:16:
         da:cb:22:8d:13:d3:c4:9a:f9:0a:22:af:36:00:0b:e8:56:aa:
         2f:77:5f:5a:b9:9a:cd:12:1a:c1:0d:c8:6f:a5:91:2d:ab:ad:
         f5:55:55:1c:74:a4:b5:f1:40:b8:28:52:d3:6c:12:48:ac:b2:
         1b:a3:c4:02:2b:cf:10:d3:c4:69:cc:85:79:b4:d6:d9:be:10:
         17:4f:b3:c1:56:e4:02:92:b5:f9:82:3b:37:5d:c4:40:cf:9b:
         3b:7e:d2:82:5e:97:d3:f3:d8:e2:d0:80:22:54:28:66:82:8b:
         21:9c:63:05:0b:50:97:33:b0:e7:ee:b8:83:1d:8e:72:de:cb:
         f6:66:be:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----