Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/a6vcD1z_L-OVdJ-n338lZRirA2Y.roa
File:                     a6vcD1z_L-OVdJ-n338lZRirA2Y.roa (raw, json)
Hash identifier:          3FFS68v3kQVw4d3i+RR4E2Vs2bMTL0yiRml/Hrv8AsU=
Subject key identifier:   6B:AB:DC:0F:5C:FF:2F:E3:95:74:9F:A7:DF:7F:25:65:18:AB:03:66
Certificate issuer:       /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial:       125F
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/a6vcD1z_L-OVdJ-n338lZRirA2Y.roa
Signing time:             Mon 10 Feb 2025 14:28:20 +0000
ROA not before:           Mon 10 Feb 2025 14:28:20 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     7482
IP address blocks:        203.79.128.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4703 (0x125f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
        Validity
            Not Before: Feb 10 14:28:20 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=6BABDC0F5CFF2FE395749FA7DF7F256518AB0366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:43:b0:33:7e:3b:a9:47:db:5c:9a:5c:0f:a9:
                    86:f5:67:ad:f6:c3:3a:cb:2b:e2:b6:54:61:b2:19:
                    94:33:62:0e:e6:87:16:a4:cf:e9:4e:fc:85:7a:bf:
                    23:50:3c:78:2b:31:6e:8d:04:a6:98:7e:2e:b2:e0:
                    75:3a:c8:f6:43:ac:36:9e:a2:5a:3d:73:60:d9:19:
                    94:02:e7:62:09:32:4f:c5:c6:b5:c3:e0:91:38:82:
                    b4:cc:e6:23:fc:43:b4:84:1b:c9:2b:7d:f3:d0:64:
                    72:78:01:42:77:17:27:ba:66:52:f6:67:71:57:bd:
                    bc:66:cc:b8:e5:0e:ca:f1:e3:e5:07:3a:3c:a7:14:
                    29:17:89:81:2b:cf:2a:2e:29:6d:fd:b0:9c:ea:d0:
                    1b:90:3c:17:88:94:62:1e:85:7b:95:c4:37:f2:f2:
                    c3:f9:b9:64:a9:84:8c:b1:cb:3a:9c:a0:d6:a5:ff:
                    38:f6:88:b3:24:6d:4d:39:ae:ee:13:ab:97:56:1b:
                    8b:f0:17:4e:18:25:71:71:39:44:44:68:69:2b:52:
                    b6:a0:86:0e:3d:74:d8:a4:2d:89:da:d3:29:2b:ad:
                    1a:e4:77:4d:98:18:88:af:5a:64:f1:f4:d4:7b:05:
                    b0:2f:e4:03:9a:c6:85:da:41:6b:ad:5c:8c:70:fb:
                    af:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:AB:DC:0F:5C:FF:2F:E3:95:74:9F:A7:DF:7F:25:65:18:AB:03:66
            X509v3 Authority Key Identifier:
                keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/a6vcD1z_L-OVdJ-n338lZRirA2Y.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.79.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         ae:d6:89:0d:fc:04:ba:c8:7a:16:b4:77:2c:16:0b:b5:62:4b:
         62:f3:2f:1e:39:0d:45:31:c0:c6:18:60:f4:23:0b:82:b2:d7:
         71:57:ee:13:dc:f7:86:e8:e6:4c:0b:fb:ad:1a:36:ed:b1:9b:
         93:95:b4:b2:51:0e:35:41:4a:6d:56:22:0e:26:74:62:0e:cb:
         80:c3:23:0b:c3:cc:67:7b:7c:c0:8f:a1:a7:ce:1d:89:84:62:
         21:ab:0d:2c:ae:75:42:97:f3:a8:3a:45:b7:15:dd:d8:1d:b0:
         00:c9:8e:8c:25:66:14:f6:5c:cd:e3:d5:81:ab:aa:57:db:6d:
         70:b9:d6:21:a2:da:33:69:2c:7e:e7:dd:15:59:a2:ff:84:c7:
         fe:54:d5:83:54:38:20:10:f0:f4:68:03:1b:d4:18:60:46:bb:
         4c:d1:cc:f6:aa:3b:0d:8f:82:b2:63:a7:ff:39:7d:ba:fd:f6:
         e2:cd:a7:8b:f3:5a:dd:af:50:a9:75:c5:48:7c:78:86:a2:1e:
         5d:fd:5f:8d:2d:7e:d6:c8:79:82:3d:6c:72:5f:88:0a:30:2f:
         ae:fc:b4:5d:c4:3c:69:ae:f6:06:4b:2d:46:70:01:a7:dd:b6:
         c4:a8:1a:3f:1b:e3:bc:55:65:a3:fb:81:9e:2a:a7:a6:54:3e:
         1e:6c:ec:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:49:23 2025 by rpki-client