Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/CRm0d-n8D3HqlEGv14ZjYOwfJFM.roa
File:                     CRm0d-n8D3HqlEGv14ZjYOwfJFM.roa (raw, json)
Hash identifier:          a6+jedtTQ+rOc9SXfa/SVlaBYGfhqQYz9FbY1jAiG80=
Subject key identifier:   09:19:B4:77:E9:FC:0F:71:EA:94:41:AF:D7:86:63:60:EC:1F:24:53
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/CRm0d-n8D3HqlEGv14ZjYOwfJFM.roa
Signing time:             Thu 15 Sep 2022 02:43:54 +0000
ROA not before:           Thu 15 Sep 2022 02:43:54 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     9919
IP address blocks:        122.146.110.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4036 (0xfc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 15 02:43:54 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=0919B477E9FC0F71EA9441AFD7866360EC1F2453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:cb:bd:7d:7d:ac:fa:ee:c7:17:24:7b:25:84:
                    e1:c6:50:2b:27:c7:34:a1:56:00:ad:d8:66:10:ee:
                    c2:5f:58:30:a5:a5:5d:65:d9:b5:89:d7:57:6b:82:
                    a4:ff:d8:83:52:52:17:cb:07:9f:d9:19:81:31:1f:
                    90:a9:ec:bb:0d:42:1b:d6:a2:65:77:87:e2:8e:e5:
                    a6:6d:0d:1b:d5:61:1c:1f:20:1a:7d:ec:b1:de:f1:
                    fd:9f:d8:62:8a:97:27:67:8b:89:7c:d8:f1:a2:fb:
                    cb:bb:f3:10:3e:e0:7d:f0:e5:44:9d:10:81:36:c6:
                    86:87:12:46:b1:d6:19:0c:57:26:65:cc:b7:a0:ff:
                    de:cf:56:18:60:33:e7:39:dc:64:a2:f5:41:d0:ea:
                    2c:39:98:ad:db:01:08:24:9d:a0:92:5d:97:47:b8:
                    4d:91:d6:5d:15:9b:b8:7e:d8:98:ae:4c:93:05:f3:
                    51:b1:07:62:f5:f4:7d:8e:d5:62:e2:41:d8:25:6a:
                    38:ea:35:5c:67:39:01:e2:78:6e:ba:b2:82:69:2f:
                    ac:9f:bd:1d:b7:40:44:0c:cf:4c:90:93:7f:cf:be:
                    8e:c0:f6:83:12:24:ce:f9:29:c6:07:2c:50:23:53:
                    b8:72:8a:bc:c5:b8:3a:66:ac:20:37:2d:82:5f:5e:
                    cc:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:19:B4:77:E9:FC:0F:71:EA:94:41:AF:D7:86:63:60:EC:1F:24:53
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/CRm0d-n8D3HqlEGv14ZjYOwfJFM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.146.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         33:87:bd:65:c9:f7:f3:7d:bb:b6:cb:16:77:18:88:69:21:4c:
         73:6d:9b:21:c5:dd:f2:f0:8c:44:59:0c:b8:4d:39:43:33:53:
         1a:81:31:13:a3:30:19:dd:b9:fe:bd:3d:4b:f8:48:d0:e9:9d:
         46:fc:d0:c3:0f:29:98:71:c6:4b:37:a9:a6:94:b6:e1:54:70:
         c9:ed:95:26:4a:42:0e:d5:d9:24:e6:3f:76:b7:ab:5f:d1:01:
         c4:ae:a9:a7:07:d5:37:e0:0b:6f:98:ec:5c:23:9d:0d:13:3f:
         42:65:b2:62:f6:49:4d:03:15:e6:54:e0:70:6a:6d:84:0e:12:
         72:76:c9:71:e7:63:80:95:59:91:e7:e0:c0:3e:04:8a:61:b2:
         94:41:cf:1f:db:62:5a:5e:f4:36:2d:81:3a:6c:18:e5:3c:8d:
         b2:f3:88:dd:de:82:84:3d:c2:c0:c2:6c:34:c3:e1:70:37:b6:
         d6:35:b3:fe:f7:67:eb:d5:eb:50:2a:0f:21:33:0c:4f:84:e9:
         e8:8b:f5:f8:58:b7:7f:f9:57:97:83:78:4f:c4:dd:6d:2e:cf:
         4f:94:ad:2f:aa:9b:59:f2:27:1a:10:46:95:d2:d4:fb:f2:85:
         74:22:ac:20:fb:31:59:b4:33:e8:2a:67:bb:e7:4c:9b:f4:9d:
         02:3c:2b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:17:08 2025 by rpki-client