Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/awxUeV8D5n8cZaU1yC-9wJ_lNDk.roa
File:                     awxUeV8D5n8cZaU1yC-9wJ_lNDk.roa (raw, json)
Hash identifier:          Nl3x6CbUGdFioP6Q4m/Mrv0Uu1BgP515IEGFP9nCDHI=
Subject key identifier:   6B:0C:54:79:5F:03:E6:7F:1C:65:A5:35:C8:2F:BD:C0:9F:E5:34:39
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       17B1
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/awxUeV8D5n8cZaU1yC-9wJ_lNDk.roa
Signing time:             Mon 10 Feb 2025 14:07:10 +0000
ROA not before:           Mon 10 Feb 2025 14:07:10 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     131584
IP address blocks:        106.105.181.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6065 (0x17b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Feb 10 14:07:10 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=6B0C54795F03E67F1C65A535C82FBDC09FE53439
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:39:84:e0:5f:42:08:16:4f:95:d2:31:73:36:
                    03:b8:45:c0:6d:59:44:7c:a3:36:cc:3e:6a:eb:68:
                    32:02:f5:a1:58:1a:e2:85:e4:dd:7e:6a:93:e6:56:
                    c2:ee:64:ed:ee:09:5c:35:79:7b:66:03:8b:0f:69:
                    fb:7d:fd:ca:ff:2b:80:cb:a3:0d:77:50:d7:be:64:
                    fc:79:79:bb:7f:41:2f:e7:92:7d:5e:36:ea:72:9a:
                    bf:cf:a5:df:bd:6d:5a:89:17:77:f3:c3:42:ba:80:
                    b3:cf:5d:42:65:64:ec:c0:81:f1:c4:ee:01:8a:c9:
                    4f:24:ba:e3:07:b3:50:f9:16:cd:83:ba:8e:1c:1b:
                    a7:d1:1a:ba:9f:d6:23:f1:e5:d9:f3:b3:db:a8:d2:
                    03:b3:20:73:2f:ae:73:d0:d1:71:d3:a0:d6:3f:1b:
                    33:8e:05:23:52:57:bd:43:c9:c8:cc:73:1e:5b:5a:
                    eb:b1:86:12:08:ce:a9:cd:22:63:7e:c7:fa:cd:0e:
                    3d:58:b7:61:54:49:b2:b1:0a:f8:2c:e2:08:90:3d:
                    8c:e3:79:a1:53:65:2d:d2:a9:cb:ff:5a:68:48:6d:
                    6c:40:40:2f:22:69:df:40:eb:e1:bd:38:03:ab:d0:
                    b5:a1:a3:4c:82:8b:e7:66:bd:13:fe:c7:4c:ea:e8:
                    7d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:0C:54:79:5F:03:E6:7F:1C:65:A5:35:C8:2F:BD:C0:9F:E5:34:39
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/awxUeV8D5n8cZaU1yC-9wJ_lNDk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.105.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:07:d4:3b:24:ea:c6:a5:2f:86:26:ff:a6:1e:09:af:22:a2:
         39:c5:5b:05:1d:c4:ec:a1:50:d5:4f:44:c9:95:1e:4a:aa:0b:
         be:4c:fc:ea:cc:f7:47:2c:ed:57:9d:96:89:0f:24:86:f9:a0:
         b5:9b:c3:9d:28:f6:d2:37:68:b6:93:51:ec:d3:e6:87:75:d8:
         5a:80:9b:2b:61:12:76:6d:96:e6:94:3f:2c:1a:49:db:56:8f:
         58:92:b5:ae:50:51:63:d5:ba:df:50:83:fa:76:be:98:6f:ff:
         ee:3d:0b:05:1c:1a:0e:0d:5e:ce:33:aa:8c:e2:18:39:96:a0:
         53:de:39:e0:75:32:6d:5f:7e:03:98:44:66:eb:c5:20:d3:2a:
         87:85:07:41:e9:b6:d9:36:6f:44:3e:26:67:e7:9d:6b:c8:be:
         c7:3d:13:d0:cf:a1:fd:53:35:e0:50:82:20:b8:e0:af:25:91:
         ae:82:f3:d1:fc:73:4c:c9:cc:9e:78:6b:8c:41:ee:cb:2e:69:
         81:fc:b6:b3:59:33:a2:03:cc:b8:e1:64:05:48:65:c0:d8:e4:
         d0:5a:b9:fc:5a:ac:0f:77:3a:40:d4:f0:f0:b4:03:9e:7f:a1:
         e4:a7:ba:03:2a:54:e0:64:5d:ec:fa:e8:82:43:87:57:17:56:
         9b:96:05:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:10:58 2025 by rpki-client