Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/COCHENTEK/56khbUx6EW5OBTfecIBv-W1SD5A.roa
File:                     56khbUx6EW5OBTfecIBv-W1SD5A.roa (raw, json)
Hash identifier:          u1rZ8qqZKsziTFm2zqqh12/mE50ojlyQLZ645GvzT04=
Subject key identifier:   E7:A9:21:6D:4C:7A:11:6E:4E:05:37:DE:70:80:6F:F9:6D:52:0F:90
Certificate issuer:       /CN=A736CFF1948740614D0321E63B8403EB9AB9748D
Certificate serial:       023A
Authority key identifier: A7:36:CF:F1:94:87:40:61:4D:03:21:E6:3B:84:03:EB:9A:B9:74:8D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/pzbP8ZSHQGFNAyHmO4QD65q5dI0.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/COCHENTEK/56khbUx6EW5OBTfecIBv-W1SD5A.roa
Signing time:             Mon 10 Feb 2025 14:15:35 +0000
ROA not before:           Mon 10 Feb 2025 14:15:35 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     38136
IP address blocks:        103.36.24.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 570 (0x23a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A736CFF1948740614D0321E63B8403EB9AB9748D
        Validity
            Not Before: Feb 10 14:15:35 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=E7A9216D4C7A116E4E0537DE70806FF96D520F90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c0:72:f5:58:5d:ea:7c:1c:20:ad:72:2f:b8:
                    bd:41:5f:23:b9:4b:65:51:ae:b0:51:76:68:f2:71:
                    fa:5e:e2:a2:73:55:f9:0b:8b:1e:a2:26:ed:67:1f:
                    cc:e5:f6:ea:57:00:50:73:21:61:de:f2:66:61:1a:
                    e9:53:a8:4f:21:10:7f:e5:27:5d:88:a0:79:06:5f:
                    7b:50:6a:27:4f:bd:c5:3d:ea:0f:c2:21:58:bc:07:
                    4a:c3:91:1c:a4:f9:2f:d1:52:3a:13:2d:e7:f8:2a:
                    52:19:dc:31:ec:4b:b0:f7:ac:5e:be:eb:f1:36:9b:
                    14:22:78:77:7b:31:22:c1:b6:c9:10:40:4d:16:8f:
                    60:63:f8:11:c5:d9:e4:b2:e2:fb:1c:6f:00:0a:e2:
                    35:0e:0b:1f:48:f6:d2:95:88:1a:c6:09:1f:7e:0b:
                    e9:2a:3a:a4:ff:c8:12:ad:11:59:52:ac:78:f0:00:
                    32:69:ea:61:31:9c:b8:79:c9:0c:82:82:2a:5d:d5:
                    e6:ee:54:a8:6a:07:82:47:ac:e0:cc:2a:e3:1b:43:
                    d7:c3:71:b1:61:3f:de:c0:ad:17:db:61:bd:7e:47:
                    ad:91:49:6c:83:bb:7f:d5:92:65:51:11:34:10:99:
                    28:97:78:0c:77:61:ac:a5:4b:f7:ec:21:57:1d:42:
                    14:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:A9:21:6D:4C:7A:11:6E:4E:05:37:DE:70:80:6F:F9:6D:52:0F:90
            X509v3 Authority Key Identifier:
                keyid:A7:36:CF:F1:94:87:40:61:4D:03:21:E6:3B:84:03:EB:9A:B9:74:8D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/COCHENTEK/pzbP8ZSHQGFNAyHmO4QD65q5dI0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/pzbP8ZSHQGFNAyHmO4QD65q5dI0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/COCHENTEK/56khbUx6EW5OBTfecIBv-W1SD5A.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.36.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         35:87:07:76:e0:e7:45:84:2a:98:d6:91:51:e7:c0:21:e6:09:
         0a:1f:c3:4c:38:7c:0d:02:af:20:f5:79:28:85:3f:28:71:aa:
         a7:d4:a2:46:d0:78:90:94:0d:5d:6b:16:45:cb:dc:35:82:0b:
         90:20:80:07:e2:bd:93:6e:64:54:50:87:f7:02:e0:80:e4:a9:
         25:48:14:98:d7:12:c8:71:7d:70:83:de:d2:f9:fc:24:dc:70:
         e6:62:1b:24:72:45:f7:42:c7:46:39:06:5d:1b:14:3e:c0:ec:
         bf:4e:08:55:83:e5:6b:95:9c:f1:f0:ce:09:3b:6a:da:f9:2a:
         85:ff:75:9f:e0:f5:b8:7a:4c:09:a4:2f:b8:44:6e:a8:6c:08:
         d8:40:ac:dc:e1:30:f9:15:aa:b1:95:1f:ca:74:5c:83:e4:c7:
         d0:94:3f:9c:51:62:e4:51:34:f8:66:67:48:e3:25:44:3c:f5:
         b4:31:17:92:04:a7:41:d4:f9:34:1e:ab:08:6e:4f:8d:80:d7:
         0f:f4:3b:3b:85:15:d0:c8:64:36:94:fb:b1:38:80:1d:f2:bf:
         17:f3:8f:2c:17:a0:bd:e4:30:93:40:78:4d:d6:88:94:67:60:
         62:b0:85:3c:6b:92:6c:77:77:0f:a1:33:30:6d:5e:b0:06:37:
         99:26:87:4f
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgICAjowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTcz
NkNGRjE5NDg3NDA2MTREMDMyMUU2M0I4NDAzRUI5QUI5NzQ4RDAeFw0yNTAyMTAx
NDE1MzVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEU3QTkyMTZENEM3QTEx
NkU0RTA1MzdERTcwODA2RkY5NkQ1MjBGOTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCzwHL1WF3qfBwgrXIvuL1BXyO5S2VRrrBRdmjycfpe4qJzVfkL
ix6iJu1nH8zl9upXAFBzIWHe8mZhGulTqE8hEH/lJ12IoHkGX3tQaidPvcU96g/C
IVi8B0rDkRyk+S/RUjoTLef4KlIZ3DHsS7D3rF6+6/E2mxQieHd7MSLBtskQQE0W
j2Bj+BHF2eSy4vscbwAK4jUOCx9I9tKViBrGCR9+C+kqOqT/yBKtEVlSrHjwADJp
6mExnLh5yQyCgipd1ebuVKhqB4JHrODMKuMbQ9fDcbFhP97ArRfbYb1+R62RSWyD
u3/VkmVRETQQmSiXeAx3YaylS/fsIVcdQhQ1AgMBAAGjggH0MIIB8DAdBgNVHQ4E
FgQU56khbUx6EW5OBTfecIBv+W1SD5AwHwYDVR0jBBgwFoAUpzbP8ZSHQGFNAyHm
O4QD65q5dI0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg
UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ09DSEVO
VEVLL3B6YlA4WlNIUUdGTkF5SG1PNFFENjVxNWRJMC5jcmwwYAYIKwYBBQUHAQEE
VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX
TklDQ0EvcHpiUDhaU0hRR0ZOQXlIbU80UUQ2NXE1ZEkwLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw
a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ09DSEVOVEVLLzU2a2hiVXg2RVc1
T0JUZmVjSUJ2LVcxU0Q1QS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50
d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAFnJBgwDQYJKoZIhvcNAQELBQADggEBADWHB3bg50WEKpjWkVHnwCHmCQof
w0w4fA0CryD1eSiFPyhxqqfUokbQeJCUDV1rFkXL3DWCC5AggAfivZNuZFRQh/cC
4IDkqSVIFJjXEshxfXCD3tL5/CTccOZiGyRyRfdCx0Y5Bl0bFD7A7L9OCFWD5WuV
nPHwzgk7atr5KoX/dZ/g9bh6TAmkL7hEbqhsCNhArNzhMPkVqrGVH8p0XIPkx9CU
P5xRYuRRNPhmZ0jjJUQ89bQxF5IEp0HU+TQeqwhuT42A1w/0OzuFFdDIZDaU+7E4
gB3yvxfzjywXoL3kMJNAeE3WiJRnYGKwhTxrkmx3dw+hMzBtXrAGN5kmh08=
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:20 2025 by rpki-client