Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/-JH8NIdG4WdDt4zLguqrjNVks-w.roa
File:                     -JH8NIdG4WdDt4zLguqrjNVks-w.roa (raw, json)
Hash identifier:          X7yS/VXdyIwtafq/FGnj2xq/trNu6Ca4rcywgvDoe/s=
Subject key identifier:   F8:91:FC:34:87:46:E1:67:43:B7:8C:CB:82:EA:AB:8C:D5:64:B3:EC
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0E9C
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/-JH8NIdG4WdDt4zLguqrjNVks-w.roa
Signing time:             Wed 29 Sep 2021 02:43:47 +0000
ROA not before:           Wed 29 Sep 2021 02:43:47 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     9919
IP address blocks:        122.146.112.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3740 (0xe9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 02:43:47 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=F891FC348746E16743B78CCB82EAAB8CD564B3EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:83:b9:0d:98:59:88:e3:95:a2:d8:47:4d:1c:
                    c8:89:92:f4:4b:5c:28:9f:f6:56:51:02:1a:fa:0c:
                    c2:d8:46:dd:85:c9:b7:2a:f1:eb:8d:23:59:70:f8:
                    7a:7b:90:d0:1e:37:28:bd:08:e0:e6:cc:f4:6b:0b:
                    8c:fb:7f:44:4d:b7:50:36:94:9d:05:d2:bf:ca:64:
                    6f:d1:eb:f7:6b:b6:dd:be:a3:b9:d0:25:91:ac:59:
                    8b:1c:fa:b8:39:71:1d:a6:53:9b:9d:41:3e:6e:d1:
                    7b:84:88:49:05:53:95:2a:62:43:ec:d8:d0:1f:ef:
                    60:a4:72:17:c2:20:c4:4f:4f:ae:27:06:bb:59:da:
                    22:41:e1:5f:be:09:76:b5:4a:41:2e:c2:45:7f:29:
                    d4:d6:a9:77:d8:87:00:f4:ed:45:5d:9d:f7:54:8a:
                    d4:d2:0e:a0:d8:2c:4c:f5:38:b1:e1:eb:0a:35:b2:
                    2a:8d:e0:6d:c2:0a:ca:0d:d5:fd:e8:af:36:3a:77:
                    ca:25:6e:14:86:05:87:a2:30:d3:26:ea:16:89:e5:
                    12:23:93:14:9c:6e:0c:a1:3c:41:ca:8f:1e:4c:e5:
                    54:54:ff:2b:b2:39:81:04:70:4f:96:61:f9:52:43:
                    23:fb:ae:78:b1:f5:c4:dc:18:52:84:f5:a5:fc:25:
                    52:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:91:FC:34:87:46:E1:67:43:B7:8C:CB:82:EA:AB:8C:D5:64:B3:EC
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/-JH8NIdG4WdDt4zLguqrjNVks-w.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.146.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         56:0f:fe:11:1f:12:a7:a3:30:2c:71:22:60:70:1d:13:d4:bd:
         1a:b1:3b:6f:47:9b:1b:0c:43:ce:3e:63:e5:58:6a:2d:57:86:
         0b:6b:a4:f7:e1:a4:ad:14:66:d2:60:d6:5e:d6:85:bb:c5:32:
         19:44:7a:f7:16:a5:ee:92:6e:72:2d:a2:a1:c7:52:e7:af:90:
         98:3f:e5:21:7d:b6:fe:d4:a6:92:4e:25:96:20:c6:a6:03:3b:
         3e:59:fc:f1:31:12:d7:39:cb:bb:78:71:5d:d8:6a:28:4b:87:
         14:2f:04:82:1f:f9:21:48:58:f1:94:d8:6d:3b:fb:0a:31:1d:
         e3:22:b5:d3:bf:81:18:ef:cb:9d:85:02:d7:33:36:b3:58:a9:
         f7:61:d6:85:4e:fd:bb:73:7f:3e:27:4f:f7:ed:04:8c:e4:32:
         ce:0a:26:82:67:25:bf:2a:2d:d8:e9:da:c1:99:de:16:2d:e2:
         36:dd:0d:4d:41:ad:47:bf:07:06:51:c8:d5:60:d7:bd:a2:e6:
         81:6f:46:66:12:0a:38:b0:32:ca:ea:18:d0:40:3d:09:54:b1:
         f7:7f:fd:8b:e1:fe:04:55:5a:a2:b1:b1:e4:46:3c:a4:1e:7d:
         37:22:93:10:5d:4b:51:57:c2:ac:00:c0:f6:98:c6:db:51:73:
         d8:72:c8:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:18:39 2025 by rpki-client