Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/2kVrFsEUazqwgZqTC4UAcKx6V4U.roa
File:                     2kVrFsEUazqwgZqTC4UAcKx6V4U.roa (raw, json)
Hash identifier:          qe/BmbAMAoEDSIOFYSvoW8VUtrpl6ys6q02QhKnN2nM=
Subject key identifier:   DA:45:6B:16:C1:14:6B:3A:B0:81:9A:93:0B:85:00:70:AC:7A:57:85
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0EC0
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/2kVrFsEUazqwgZqTC4UAcKx6V4U.roa
Signing time:             Wed 29 Sep 2021 02:43:55 +0000
ROA not before:           Wed 29 Sep 2021 02:43:55 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     9919
IP address blocks:        122.146.64.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3776 (0xec0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 02:43:55 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=DA456B16C1146B3AB0819A930B850070AC7A5785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ce:90:d5:96:da:b8:04:52:ef:11:4e:4c:d5:
                    d8:6c:cf:45:b2:a9:34:a5:86:93:26:ff:51:6b:cc:
                    fe:2d:fd:c6:a5:e7:0c:c0:90:12:85:db:00:d6:2a:
                    ff:32:03:65:f6:f5:d9:bf:84:b4:44:73:8a:9b:f6:
                    d0:45:ce:5d:08:72:4f:3f:9d:1f:2b:86:cc:36:e9:
                    67:6c:e6:c3:4b:be:2b:a0:70:7e:15:16:6a:e5:e8:
                    5a:0b:f0:45:27:a5:18:fd:2b:0b:30:0c:27:8a:c4:
                    fb:de:cb:30:8d:a5:38:b4:45:04:a9:01:c5:ca:26:
                    6a:aa:2b:c9:ca:f3:66:08:34:c8:be:78:9a:06:04:
                    a2:d2:66:f8:16:ff:c3:4b:cf:e1:a0:0a:c3:0d:9b:
                    4d:6b:39:e8:74:b6:91:49:bc:c1:72:e1:24:57:90:
                    dd:99:8f:21:e0:95:16:8e:13:ac:5d:aa:81:e0:f9:
                    7d:3d:b7:33:d4:43:bc:12:ac:74:3c:93:5c:8c:a6:
                    46:65:53:ef:b8:ca:98:a9:46:4c:a2:15:53:75:59:
                    66:9c:b4:a7:3c:77:16:0d:34:51:c8:7c:7e:9d:3c:
                    d0:b5:2b:fb:8e:a2:ff:86:b7:66:36:9c:9f:93:f3:
                    3e:76:c4:81:bb:a7:43:c2:b4:3b:a7:5d:6c:0e:5b:
                    c1:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:45:6B:16:C1:14:6B:3A:B0:81:9A:93:0B:85:00:70:AC:7A:57:85
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/2kVrFsEUazqwgZqTC4UAcKx6V4U.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.146.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         3c:93:8e:06:a9:cc:cd:d8:4b:e7:05:61:ba:da:95:a7:98:b1:
         cb:b5:15:74:2e:7e:69:fd:44:db:1b:59:4d:f2:8f:e9:b9:b8:
         a9:34:60:92:58:43:32:1e:57:0e:71:d1:bb:8a:21:3f:b0:4c:
         f4:26:5a:db:f1:4f:d1:87:36:4a:13:0d:d7:bf:bf:db:4e:59:
         50:9d:f2:df:b9:ed:40:1a:64:94:9e:8f:fa:16:b2:49:78:b9:
         3f:4d:48:03:5f:32:af:7b:bc:c6:65:35:e1:7a:98:fc:32:3a:
         51:02:e9:4b:0e:f4:65:eb:0b:86:ce:92:a0:96:1e:b6:e0:54:
         09:6f:bd:68:f7:78:ce:3c:ba:5f:f8:84:db:c7:9e:46:f5:84:
         34:a8:9d:ff:20:ac:22:30:8e:80:92:7d:d6:ba:94:a2:c8:06:
         57:36:d2:37:96:45:7a:98:93:61:96:05:c5:39:ed:cd:57:f8:
         a1:fc:d5:a5:14:61:27:5d:15:41:0a:ec:70:56:c3:17:0b:7b:
         7d:e3:ca:bd:82:eb:2e:1f:9e:2b:41:70:81:f0:7f:fe:19:12:
         df:5b:e5:e8:d3:79:3d:6e:ab:bc:95:7d:fd:66:02:99:80:48:
         67:27:93:bf:e7:7d:07:43:7e:82:84:9a:93:14:1a:a5:cb:9f:
         92:5f:ee:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:20:03 2025 by rpki-client