Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/VKVlMVZZ0l0UpXGUfMLTsbOiWPg.roa
File:                     VKVlMVZZ0l0UpXGUfMLTsbOiWPg.roa (raw, json)
Hash identifier:          HBLfcqarXWyJ0hzh2zIDPPSyWn72gzuJV6YQtL4nGDc=
Subject key identifier:   54:A5:65:31:56:59:D2:5D:14:A5:71:94:7C:C2:D3:B1:B3:A2:58:F8
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       17F1
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/VKVlMVZZ0l0UpXGUfMLTsbOiWPg.roa
Signing time:             Mon 10 Feb 2025 14:07:26 +0000
ROA not before:           Mon 10 Feb 2025 14:07:26 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     18049
IP address blocks:        175.183.0.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6129 (0x17f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Feb 10 14:07:26 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=54A565315659D25D14A571947CC2D3B1B3A258F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b6:a4:16:cb:2f:f9:05:4f:f7:2d:f9:9b:99:
                    c0:7d:03:12:da:3b:f3:d4:e9:84:91:8c:6b:da:cb:
                    40:90:11:d7:56:9a:41:34:47:b6:ba:e7:66:12:77:
                    5c:67:38:cd:9f:7a:84:24:30:9c:8a:0e:bc:23:cc:
                    c3:d8:11:f4:4e:6a:09:42:b9:33:69:e9:53:19:39:
                    f5:18:33:e3:bb:a8:fe:06:e8:d8:e8:28:f6:d0:33:
                    ee:7f:01:8f:16:c4:fa:f8:c6:69:f6:5a:d8:d9:96:
                    57:55:64:a6:6c:e2:6a:00:4b:94:c3:10:01:cc:1f:
                    b1:db:0f:38:cd:02:a1:15:96:b0:58:53:a4:5e:d8:
                    3a:32:a3:27:87:30:35:fa:65:44:5d:0d:a8:a7:4f:
                    07:08:e6:1b:26:a1:4d:12:23:42:02:e4:33:08:2d:
                    26:6f:2e:7e:06:77:a2:17:cc:4c:26:10:a4:33:a9:
                    62:4f:2c:ca:c0:f1:ad:86:64:de:17:81:3c:c3:70:
                    b3:0a:eb:36:0b:d3:c1:59:e6:62:27:56:a4:bf:88:
                    de:63:83:5d:a1:1b:86:36:ea:6f:bd:44:c9:f3:eb:
                    78:b3:e9:04:be:00:d2:36:f0:d0:1e:76:a3:2d:51:
                    ce:7e:e6:d7:27:6a:72:12:11:a7:fb:4d:b2:03:5f:
                    11:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:A5:65:31:56:59:D2:5D:14:A5:71:94:7C:C2:D3:B1:B3:A2:58:F8
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/VKVlMVZZ0l0UpXGUfMLTsbOiWPg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.183.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         a2:70:ef:ae:f4:88:d7:b0:2d:58:a6:c6:dc:d6:94:48:0b:77:
         a6:28:f4:8d:93:3b:1f:de:a2:f8:2d:2d:b9:71:b4:33:2f:cf:
         cf:74:be:97:34:9f:48:63:e4:d9:f0:cf:5a:c1:b6:c9:a6:ab:
         af:28:87:81:7b:d5:b6:b5:6d:6e:86:63:48:72:90:4d:f8:b6:
         8e:52:e7:53:cd:1e:61:85:e1:59:a4:4c:07:67:4a:1e:b6:f5:
         e5:9f:63:33:24:0a:7d:65:99:aa:72:22:6b:53:ed:ec:8c:2f:
         ab:94:a6:a6:e6:dc:31:2f:4c:ac:1c:57:d5:66:00:91:82:e7:
         7f:b3:60:e0:18:dd:bf:3d:10:a6:11:93:c2:c7:a0:eb:48:f9:
         47:09:ea:f8:cd:00:34:2b:b1:4b:f8:90:fe:50:dd:de:87:a0:
         d3:0f:ea:73:0a:73:5d:3b:6c:6a:ff:c3:be:8a:1c:62:72:c1:
         46:5c:01:13:03:24:2a:69:91:51:38:66:a7:a7:d6:f4:cd:06:
         af:6f:2f:e4:85:d3:e5:ad:b5:d2:d4:3e:74:47:40:b2:e8:0e:
         33:6e:eb:09:df:ae:c8:b2:7b:c2:93:26:ba:5d:1a:f9:9b:cd:
         6d:64:5c:b8:10:23:63:68:64:82:41:f8:1f:75:f3:b0:11:4a:
         29:b1:88:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:11:35 2025 by rpki-client