Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/A7n0vXQ5JC_UCQAsb_KnD7ou83s.roa
File:                     A7n0vXQ5JC_UCQAsb_KnD7ou83s.roa (raw, json)
Hash identifier:          rDIcknPxNgymNGnk8S5LSQMSOEeVEg5ijJcWDPvjXg4=
Subject key identifier:   03:B9:F4:BD:74:39:24:2F:D4:09:00:2C:6F:F2:A7:0F:BA:2E:F3:7B
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       131D
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/A7n0vXQ5JC_UCQAsb_KnD7ou83s.roa
Signing time:             Fri 01 Sep 2023 09:24:29 +0000
ROA not before:           Fri 01 Sep 2023 09:24:29 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     9919
IP address blocks:        106.106.236.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4893 (0x131d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep  1 09:24:29 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=03B9F4BD7439242FD409002C6FF2A70FBA2EF37B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b9:54:6e:01:8d:cb:76:6a:64:3f:7e:22:0c:
                    22:44:71:bc:0d:f3:73:01:85:ac:cc:99:4b:2d:0b:
                    e6:ae:95:87:ca:80:b5:2d:6b:51:aa:34:dd:6f:2f:
                    78:f0:57:58:98:da:24:15:09:cb:c4:95:4c:c7:b8:
                    1f:96:f8:14:ed:3d:c6:24:7e:90:a4:2f:b0:32:35:
                    3b:b3:24:20:f8:47:81:d8:49:d4:04:ef:2e:62:93:
                    c9:e9:7a:69:ef:8d:45:51:3b:89:9f:2d:a2:59:7f:
                    0a:42:95:da:57:e9:49:0c:59:4e:3f:ca:72:d4:9d:
                    01:3c:45:52:f9:bb:ac:77:d0:64:e3:bb:5d:5d:af:
                    14:19:8c:8c:ac:ab:b5:fb:1c:89:ca:67:4e:2a:a2:
                    a3:41:dd:2f:4d:02:9e:c5:b2:a5:dd:1b:53:20:95:
                    1d:a9:be:20:a8:3c:e1:55:1b:54:78:1e:e5:bb:95:
                    c0:af:c0:19:8e:29:5d:81:d7:24:16:6f:22:c3:20:
                    ba:18:f2:fc:27:ad:8a:d2:47:11:32:53:4c:92:c2:
                    02:83:cd:98:cd:04:36:1d:11:0e:d3:60:96:44:be:
                    1a:1a:c5:40:a6:45:98:cd:6a:45:48:37:5e:79:b6:
                    02:30:8c:e5:ba:d1:0b:3c:8f:bd:48:1d:18:4a:f0:
                    f2:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:B9:F4:BD:74:39:24:2F:D4:09:00:2C:6F:F2:A7:0F:BA:2E:F3:7B
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/A7n0vXQ5JC_UCQAsb_KnD7ou83s.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.106.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:bc:be:15:d3:b6:66:6b:86:47:4d:b0:02:5b:a2:7c:5a:40:
         55:50:50:a5:3c:f2:07:bb:eb:2a:d4:95:9d:bb:45:00:88:16:
         74:72:50:50:25:1c:9c:bd:9b:f9:75:3c:f7:01:6f:99:6c:de:
         bd:c9:81:21:2a:8a:2a:34:af:2a:2a:5a:e8:b2:a7:17:92:a8:
         c2:22:c1:27:31:1f:a2:0a:32:ae:8a:74:48:14:b7:a8:85:62:
         1f:19:18:8d:02:ec:a1:25:8f:97:2a:95:c0:e7:4a:db:38:87:
         d0:2b:00:3d:50:6a:84:fe:2a:12:c9:32:cc:19:64:4c:22:b5:
         6b:b2:12:bc:5c:68:b3:fd:37:0d:38:a5:47:e7:13:f4:f6:29:
         34:8e:6b:89:11:fc:c0:6e:32:10:04:29:7a:72:99:f1:a5:56:
         d3:41:0d:73:c1:f0:3b:3e:4e:61:38:b3:a8:ab:41:20:ff:c8:
         91:d6:32:3e:64:6b:6d:5e:dc:38:5c:bc:21:79:c1:4c:81:19:
         32:69:f8:0a:64:51:f1:cd:86:1d:a7:3f:48:c9:76:81:fd:84:
         eb:df:18:1e:c7:1a:16:bc:f9:78:59:45:30:82:04:db:fc:55:
         9f:17:be:83:98:f4:5f:ab:b0:24:13:9f:7e:5b:c5:23:aa:2f:
         29:df:2f:06
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICEx0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw
OTI0MjlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDAzQjlGNEJENzQzOTI0
MkZENDA5MDAyQzZGRjJBNzBGQkEyRUYzN0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC7uVRuAY3LdmpkP34iDCJEcbwN83MBhazMmUstC+aulYfKgLUt
a1GqNN1vL3jwV1iY2iQVCcvElUzHuB+W+BTtPcYkfpCkL7AyNTuzJCD4R4HYSdQE
7y5ik8npemnvjUVRO4mfLaJZfwpCldpX6UkMWU4/ynLUnQE8RVL5u6x30GTju11d
rxQZjIysq7X7HInKZ04qoqNB3S9NAp7FsqXdG1MglR2pviCoPOFVG1R4HuW7lcCv
wBmOKV2B1yQWbyLDILoY8vwnrYrSRxEyU0ySwgKDzZjNBDYdEQ7TYJZEvhoaxUCm
RZjNakVIN155tgIwjOW60Qs8j71IHRhK8PIbAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUA7n0vXQ5JC/UCQAsb/KnD7ou83swHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvQTduMHZYUTVKQ19VQ1FBc2JfS25E
N291ODNzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGpq7DAN
BgkqhkiG9w0BAQsFAAOCAQEACby+FdO2ZmuGR02wAluifFpAVVBQpTzyB7vrKtSV
nbtFAIgWdHJQUCUcnL2b+XU89wFvmWzevcmBISqKKjSvKipa6LKnF5KowiLBJzEf
ogoyrop0SBS3qIViHxkYjQLsoSWPlyqVwOdK2ziH0CsAPVBqhP4qEskyzBlkTCK1
a7ISvFxos/03DTilR+cT9PYpNI5riRH8wG4yEAQpenKZ8aVW00ENc8HwOz5OYTiz
qKtBIP/IkdYyPmRrbV7cOFy8IXnBTIEZMmn4CmRR8c2GHac/SMl2gf2E698YHsca
Frz5eFlFMIIE2/xVnxe+g5j0X6uwJBOfflvFI6ovKd8vBg==
-----END CERTIFICATE-----
Generated at Thu Apr 10 22:20:06 2025 by rpki-client