Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/LpEVZxfQ6RrRKFGtpBcIjTwHgaY.roa
File:                     LpEVZxfQ6RrRKFGtpBcIjTwHgaY.roa (raw, json)
Hash identifier:          9mgVHQ3xYEuH22MRek4UMWzOos8P/z7yLkCdQjo/3p8=
Subject key identifier:   2E:91:15:67:17:D0:E9:1A:D1:28:51:AD:A4:17:08:8D:3C:07:81:A6
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/LpEVZxfQ6RrRKFGtpBcIjTwHgaY.roa
Signing time:             Thu 15 Sep 2022 02:43:24 +0000
ROA not before:           Thu 15 Sep 2022 02:43:24 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     9919
IP address blocks:        122.147.0.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4036 (0xfc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 15 02:43:24 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=2E91156717D0E91AD12851ADA417088D3C0781A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:12:ea:85:62:4f:c5:41:1a:1f:91:fa:6b:7e:
                    46:c3:56:ea:db:a9:cc:b5:07:94:3d:bb:98:ea:1e:
                    4e:01:b1:ec:db:18:16:94:a9:51:5c:b4:63:3b:d4:
                    8f:20:67:ff:9b:a9:5f:ef:6b:9f:52:0d:b1:7f:6f:
                    4f:22:39:7d:c9:fc:93:1e:68:6e:3d:65:53:71:9d:
                    fa:07:f4:51:69:bc:b3:1b:30:f1:66:09:8c:0a:78:
                    8e:a0:38:7a:d9:15:77:f5:17:77:57:57:b6:4a:10:
                    0c:b6:40:74:c2:bd:eb:07:88:d1:78:ef:4a:1a:f6:
                    ec:f2:d2:de:47:e4:38:4d:40:ea:67:6a:93:f8:2d:
                    62:d9:89:60:f9:cd:fe:f4:4d:02:52:f5:eb:66:9d:
                    36:c8:bb:5e:8f:7a:17:40:94:b7:29:fe:4d:d2:88:
                    52:5d:82:7b:b0:ee:21:82:6d:cc:0e:08:ed:2d:cc:
                    a3:2d:48:a8:db:57:61:28:09:a4:22:b8:4a:02:71:
                    61:88:f3:61:93:12:d5:2e:7f:c1:f2:54:34:3c:3c:
                    19:9c:60:ed:99:33:ea:be:98:ff:46:4a:b6:46:6a:
                    2f:02:90:8b:81:c3:f3:ef:e3:35:db:54:3b:bd:c5:
                    3b:3f:4d:f8:07:73:50:6e:22:73:67:eb:8e:9e:af:
                    eb:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:91:15:67:17:D0:E9:1A:D1:28:51:AD:A4:17:08:8D:3C:07:81:A6
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/LpEVZxfQ6RrRKFGtpBcIjTwHgaY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.147.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         01:da:cf:28:65:49:73:54:fb:d9:62:71:3c:1d:bc:a2:6e:66:
         03:a7:9e:ce:ac:53:c5:14:b6:46:41:3f:0a:df:56:a4:2a:d1:
         0e:d0:b0:a5:e3:30:f5:46:e4:44:74:96:c7:76:39:07:45:02:
         7e:9d:30:b1:1c:50:34:5f:f4:aa:c8:e1:dd:ed:a6:ce:79:f0:
         a1:ab:fa:96:fe:07:6d:ea:2d:85:b1:8a:cd:12:27:20:91:26:
         e0:bd:58:25:ca:82:d0:0a:87:3e:c3:27:36:aa:09:5f:be:51:
         5f:01:1c:fa:4d:15:65:6f:3f:c4:2f:1b:1e:65:57:e9:d4:44:
         90:59:fe:54:82:c0:de:5c:50:5a:4c:03:03:7e:15:38:ac:e2:
         26:92:8d:22:5e:d3:fc:39:f2:5c:fe:19:c1:6f:60:fc:a0:63:
         1e:04:32:ce:9d:c8:52:21:49:88:4e:09:a6:9b:83:ff:7c:60:
         8f:eb:f2:59:2a:e7:f4:53:5e:8b:d3:dd:58:9c:ac:f1:28:30:
         b7:cc:f5:b6:cc:31:0b:a3:cc:f7:b2:89:8f:79:bf:58:a3:9e:
         22:fc:41:28:49:9d:6b:86:f3:83:7f:ba:f2:2b:b6:7b:be:2d:
         02:c1:6f:88:e4:46:75:4e:16:85:ae:28:e7:94:40:c1:7a:b7:
         4d:ce:81:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:40:39 2025 by rpki-client