Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/GOP_b1GmhzBn157PQ8McVkQ6mHk.roa
File:                     GOP_b1GmhzBn157PQ8McVkQ6mHk.roa (raw, json)
Hash identifier:          h8lYRQdLYpwtmCVYlJGFdYQelfeOwjr8mFP9sZjCVZ4=
Subject key identifier:   18:E3:FF:6F:51:A6:87:30:67:D7:9E:CF:43:C3:1C:56:44:3A:98:79
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0E2C
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/GOP_b1GmhzBn157PQ8McVkQ6mHk.roa
Signing time:             Wed 29 Sep 2021 02:43:16 +0000
ROA not before:           Wed 29 Sep 2021 02:43:16 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     9919
IP address blocks:        211.74.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3628 (0xe2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 02:43:16 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=18E3FF6F51A6873067D79ECF43C31C56443A9879
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:08:5b:f3:fc:b4:2f:ed:59:74:8a:4b:20:44:
                    8e:56:c0:77:7d:5f:0f:bc:bc:43:e6:87:d2:88:77:
                    a6:68:35:d7:1b:bf:73:b5:73:fc:41:c8:6f:c3:4c:
                    d4:32:87:98:e1:59:29:a0:cb:e3:8e:af:ec:b6:ad:
                    6f:e5:ea:93:1e:f7:91:5d:27:04:3d:67:23:f9:5e:
                    d5:05:ee:33:7e:d9:6a:a7:36:8e:d0:e2:8f:06:4e:
                    a8:fc:ed:f5:94:26:aa:f5:91:30:a5:b1:61:40:1f:
                    2e:9e:53:b6:a1:b9:ea:a3:ce:bd:0f:9d:4c:d1:e6:
                    05:20:95:6f:72:33:39:77:f3:70:29:48:45:b7:6d:
                    67:65:7b:34:55:39:d8:f8:a0:cc:80:1c:98:57:4c:
                    27:7d:6d:20:5e:df:16:a7:20:82:8b:a2:3e:9c:ff:
                    4e:13:d4:34:16:1a:6e:c5:c5:02:ca:c4:21:45:78:
                    89:28:9b:e5:0a:6c:cd:91:a8:ce:6f:ed:ed:36:86:
                    1b:c0:63:7e:fd:62:1b:7e:2d:45:0b:a1:7f:04:0e:
                    6e:e2:34:91:b4:5c:2d:71:df:ca:eb:ff:9d:de:70:
                    36:f2:a9:3a:02:03:c1:3d:c1:2e:55:21:b8:d6:eb:
                    48:9c:b5:c1:66:47:71:79:9e:84:19:f1:ec:71:38:
                    ee:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:E3:FF:6F:51:A6:87:30:67:D7:9E:CF:43:C3:1C:56:44:3A:98:79
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/GOP_b1GmhzBn157PQ8McVkQ6mHk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.74.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b8:16:4b:0e:b1:80:de:db:95:c9:2f:4a:28:e7:36:80:10:b8:
         71:37:4e:72:31:cb:3f:e9:22:a3:9c:e1:c2:4b:6a:59:87:24:
         95:bf:49:0d:9b:e5:fd:05:6a:a5:fd:74:71:23:10:f0:51:38:
         f7:52:28:ab:a1:15:73:d9:c3:27:92:87:e3:b4:3c:b8:ff:1f:
         fd:8d:ac:6a:05:96:73:36:f2:7b:cb:f2:10:07:16:d2:6b:92:
         ef:b1:52:1a:65:c7:77:bd:2c:27:65:53:ee:b8:11:b4:3d:09:
         38:4d:ea:b4:bd:d9:81:43:fd:84:57:65:38:68:39:09:eb:a8:
         6b:0d:ff:77:ed:36:34:9b:5b:8d:4c:e7:b2:2e:fe:ef:cc:57:
         86:25:fc:3b:19:41:55:5a:f9:1a:c4:9a:19:0f:12:62:d3:78:
         3d:53:eb:98:01:ef:9a:fd:e2:9a:97:5b:f2:30:2f:06:1d:46:
         c7:b1:f9:29:db:68:3d:96:1d:e4:e2:90:53:4c:5d:33:1d:78:
         e2:12:81:70:8b:ef:d9:27:de:2d:4e:ed:e1:fc:0a:8b:08:a4:
         d6:18:b4:62:6c:95:d2:ac:f1:e9:46:56:1e:62:bb:0a:8f:35:
         0f:37:82:09:b2:b7:78:20:3f:3b:09:6c:2d:a9:d4:3b:5f:3e:
         fe:ed:5d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:40:35 2025 by rpki-client