Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/dx9He3rPNIhfjztsRTLtDcAgR3E.roa
File:                     dx9He3rPNIhfjztsRTLtDcAgR3E.roa (raw, json)
Hash identifier:          I2XdE5VA8o/IOo08flIsB3qrHAwW4dzGQXYaj4E+wUs=
Subject key identifier:   77:1F:47:7B:7A:CF:34:88:5F:8F:3B:6C:45:32:ED:0D:C0:20:47:71
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0876
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/dx9He3rPNIhfjztsRTLtDcAgR3E.roa
Signing time:             Tue 29 Sep 2020 09:52:03 +0000
ROA not before:           Tue 29 Sep 2020 09:52:03 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     4780
IP address blocks:        112.105.8.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2166 (0x876)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 09:52:03 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=771F477B7ACF34885F8F3B6C4532ED0DC0204771
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ad:d8:fa:18:4c:8e:bc:99:7d:f1:3b:02:4d:
                    3f:45:1c:e9:63:ce:31:b7:02:9e:cd:0b:d1:7d:0f:
                    f0:bc:d1:ae:89:40:77:8e:1c:b1:d5:c2:93:d1:3f:
                    25:43:f5:95:17:ae:c0:87:8c:82:bf:a7:a2:2a:f9:
                    a4:dc:9d:dd:9c:a7:0f:5a:b3:66:fd:10:0d:3f:e0:
                    8d:d6:ea:5e:51:6c:70:37:87:9f:fe:76:9c:16:72:
                    3f:90:e1:0e:3a:b2:21:f7:dd:7c:48:4e:b0:e5:40:
                    72:ee:f9:6a:be:f3:c8:7e:c2:94:1c:db:13:06:56:
                    97:64:78:7b:5e:90:bb:ed:71:de:49:28:45:b8:bf:
                    90:81:e9:ed:69:70:58:b4:79:59:f5:d0:dc:2d:92:
                    23:65:2b:a6:51:0b:6b:f5:37:7b:50:2d:6a:25:c2:
                    24:69:88:f0:18:fb:b1:15:81:70:f4:12:e0:b7:2d:
                    a6:97:bc:1a:fc:64:58:d9:17:62:1a:b0:ac:d3:5c:
                    29:c9:20:63:11:e6:e3:e8:13:ac:3c:be:89:69:3e:
                    23:39:2b:28:59:22:e5:04:04:a9:ca:09:74:74:af:
                    0c:d4:5b:42:3c:f3:89:dc:84:60:dd:6b:e7:fe:7b:
                    93:45:6f:19:cc:44:47:e5:7c:3a:84:22:bb:90:07:
                    4e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:1F:47:7B:7A:CF:34:88:5F:8F:3B:6C:45:32:ED:0D:C0:20:47:71
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/dx9He3rPNIhfjztsRTLtDcAgR3E.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.105.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:80:f2:04:75:12:36:30:d8:45:a7:ec:c9:9b:a3:82:96:64:
         a3:a2:f4:9b:77:42:96:1a:86:ac:26:f6:2a:59:7a:0c:1f:db:
         90:ae:b9:ff:92:1d:70:5a:aa:cb:83:a0:08:b7:53:84:51:86:
         e6:9c:20:45:24:88:11:46:ad:42:f2:c9:0e:c1:50:40:9c:97:
         b6:62:4f:d9:f0:59:32:eb:31:28:25:a6:82:c3:45:fb:f6:9b:
         12:4b:65:41:c1:a6:c4:92:0b:93:2b:d0:a7:47:67:7c:3c:0e:
         ed:eb:4b:42:6f:4a:08:dc:d3:fb:5c:08:0a:8c:8b:64:9d:6d:
         a9:d7:4e:57:a9:c5:94:e8:2d:10:8e:c9:26:ca:96:c4:4d:e5:
         7e:7d:17:8a:9b:77:10:e8:c2:d7:e1:fc:e5:10:35:9e:8e:39:
         a1:bf:56:df:b2:d9:18:fc:c0:c6:a4:fe:d2:11:59:b7:b7:8a:
         45:43:1f:ca:ba:d0:5f:9a:14:61:74:3f:23:c9:01:f5:19:b8:
         4c:34:19:3f:f6:a3:41:62:b9:a5:09:8c:2b:71:3b:93:f2:66:
         9a:55:c0:d3:b6:87:cb:a1:eb:e9:9d:98:33:cc:88:ab:06:17:
         38:d5:3f:9f:b6:5f:05:e1:f0:e4:16:a6:58:77:24:18:7b:5e:
         fb:db:49:23
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICCHYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMDA5Mjkw
OTUyMDNaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDc3MUY0NzdCN0FDRjM0
ODg1RjhGM0I2QzQ1MzJFRDBEQzAyMDQ3NzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDZrdj6GEyOvJl98TsCTT9FHOljzjG3Ap7NC9F9D/C80a6JQHeO
HLHVwpPRPyVD9ZUXrsCHjIK/p6Iq+aTcnd2cpw9as2b9EA0/4I3W6l5RbHA3h5/+
dpwWcj+Q4Q46siH33XxITrDlQHLu+Wq+88h+wpQc2xMGVpdkeHtekLvtcd5JKEW4
v5CB6e1pcFi0eVn10NwtkiNlK6ZRC2v1N3tQLWolwiRpiPAY+7EVgXD0EuC3LaaX
vBr8ZFjZF2IasKzTXCnJIGMR5uPoE6w8volpPiM5KyhZIuUEBKnKCXR0rwzUW0I8
84nchGDda+f+e5NFbxnMREflfDqEIruQB06XAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUdx9He3rPNIhfjztsRTLtDcAgR3EwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvZHg5SGUzclBOSWhmanp0c1JUTHRE
Y0FnUjNFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHBpCDAN
BgkqhkiG9w0BAQsFAAOCAQEAvYDyBHUSNjDYRafsyZujgpZko6L0m3dClhqGrCb2
Kll6DB/bkK65/5IdcFqqy4OgCLdThFGG5pwgRSSIEUatQvLJDsFQQJyXtmJP2fBZ
MusxKCWmgsNF+/abEktlQcGmxJILkyvQp0dnfDwO7etLQm9KCNzT+1wICoyLZJ1t
qddOV6nFlOgtEI7JJsqWxE3lfn0Xipt3EOjC1+H85RA1no45ob9W37LZGPzAxqT+
0hFZt7eKRUMfyrrQX5oUYXQ/I8kB9Rm4TDQZP/ajQWK5pQmMK3E7k/JmmlXA07aH
y6Hr6Z2YM8yIqwYXONU/n7ZfBeHw5BamWHckGHte+9tJIw==
-----END CERTIFICATE-----
Generated at Thu Apr 10 22:32:19 2025 by rpki-client