Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/eIjaJuFEcHnPwJh0KjT-We6dYJ4.roa
File:                     eIjaJuFEcHnPwJh0KjT-We6dYJ4.roa (raw, json)
Hash identifier:          pKinhn0OOdY/pOT7gHfm42ur8dWovODtyzbsmSQLDoQ=
Subject key identifier:   78:88:DA:26:E1:44:70:79:CF:C0:98:74:2A:34:FE:59:EE:9D:60:9E
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0E09
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/eIjaJuFEcHnPwJh0KjT-We6dYJ4.roa
Signing time:             Wed 29 Sep 2021 02:43:08 +0000
ROA not before:           Wed 29 Sep 2021 02:43:08 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     4780
IP address blocks:        211.74.128.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3593 (0xe09)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 02:43:08 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=7888DA26E1447079CFC098742A34FE59EE9D609E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:20:9f:7e:4b:cd:04:8d:92:3d:c8:3f:6f:53:
                    41:f2:cd:9e:76:35:57:6e:fa:37:9c:57:ad:9d:33:
                    96:c8:d7:4f:67:1c:98:b4:95:ad:46:3b:c9:b7:d9:
                    be:f5:d5:66:1c:c3:f3:ad:ea:66:cf:9a:0a:07:bc:
                    2e:a9:76:da:d6:ee:fa:26:b0:61:91:3e:96:53:bf:
                    0c:bc:d3:70:d1:be:5f:2d:b6:d8:d9:34:f7:ab:79:
                    12:e1:91:55:01:1a:10:73:2a:69:02:29:85:67:c2:
                    c6:f3:a9:16:80:46:12:d0:1f:d8:38:48:4b:0b:5d:
                    99:39:3f:25:d9:5c:1f:b7:c4:00:b3:71:74:f2:f7:
                    5c:aa:f3:8f:16:85:0a:c4:5e:54:7c:51:2b:ce:55:
                    9c:06:f4:b8:98:56:ec:6c:30:c1:fb:f2:19:32:35:
                    5e:39:24:27:5f:17:c9:1f:d4:b0:28:4b:b4:18:73:
                    8b:15:99:90:05:eb:ac:fe:04:c5:f5:db:f5:16:29:
                    2e:32:e0:03:f7:b6:a2:7e:49:d3:82:9c:a1:2d:e6:
                    89:36:72:36:73:7f:c2:55:93:2b:41:a0:b8:26:9d:
                    e3:2a:d9:d8:45:d9:c0:64:a9:ec:75:bc:f8:91:0f:
                    c6:42:7b:6c:bf:54:f4:52:15:7b:41:16:db:21:cb:
                    c4:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:88:DA:26:E1:44:70:79:CF:C0:98:74:2A:34:FE:59:EE:9D:60:9E
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/eIjaJuFEcHnPwJh0KjT-We6dYJ4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.74.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         7e:9c:30:dc:46:ae:28:d7:94:c9:ce:9b:df:5b:bd:af:c8:a9:
         f6:fc:3f:64:f6:19:2f:1b:ef:44:57:2c:24:ae:b9:22:3f:c3:
         93:a4:9c:b8:77:a1:1b:2c:0f:20:3a:aa:af:29:b8:61:d5:69:
         66:4c:50:fb:b5:2e:82:8a:76:1c:40:d1:d3:bf:a9:6a:22:f5:
         91:ba:ba:49:49:75:f0:e1:99:90:35:0c:39:99:be:a0:e8:d4:
         30:38:8c:fb:28:59:5a:b4:9e:fa:b3:03:8a:1d:7e:a2:0f:dc:
         71:e8:72:8b:de:c4:ab:5b:b8:8e:22:ba:4a:8a:58:96:30:06:
         bb:ae:9e:55:5a:e0:0e:18:ca:20:4a:b8:00:dc:3e:3b:9f:64:
         75:6f:f4:da:73:2e:37:d2:65:61:01:1b:a8:9b:39:4d:1c:79:
         7e:d8:21:a0:97:ae:9e:47:ed:fb:ff:6d:00:92:a7:c5:56:33:
         a5:1f:93:fe:e1:6c:c9:2d:59:1f:ed:f0:ef:fe:66:02:86:87:
         26:c0:d7:ec:fe:ab:b3:14:15:72:d1:f7:08:26:7f:ec:b0:27:
         14:5a:18:98:49:47:44:f8:66:aa:df:bc:87:e4:69:aa:38:56:
         36:4e:ef:ca:34:bf:0b:91:24:46:2e:ce:45:91:d2:2a:b0:89:
         5b:01:63:6b
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICDgkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMTA5Mjkw
MjQzMDhaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDc4ODhEQTI2RTE0NDcw
NzlDRkMwOTg3NDJBMzRGRTU5RUU5RDYwOUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDcIJ9+S80EjZI9yD9vU0HyzZ52NVdu+jecV62dM5bI109nHJi0
la1GO8m32b711WYcw/Ot6mbPmgoHvC6pdtrW7vomsGGRPpZTvwy803DRvl8tttjZ
NPereRLhkVUBGhBzKmkCKYVnwsbzqRaARhLQH9g4SEsLXZk5PyXZXB+3xACzcXTy
91yq848WhQrEXlR8USvOVZwG9LiYVuxsMMH78hkyNV45JCdfF8kf1LAoS7QYc4sV
mZAF66z+BMX12/UWKS4y4AP3tqJ+SdOCnKEt5ok2cjZzf8JVkytBoLgmneMq2dhF
2cBkqex1vPiRD8ZCe2y/VPRSFXtBFtshy8TNAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUeIjaJuFEcHnPwJh0KjT+We6dYJ4wHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvZUlqYUp1RkVjSG5Qd0poMEtqVC1X
ZTZkWUo0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEB9NKgDAN
BgkqhkiG9w0BAQsFAAOCAQEAfpww3EauKNeUyc6b31u9r8ip9vw/ZPYZLxvvRFcs
JK65Ij/Dk6ScuHehGywPIDqqrym4YdVpZkxQ+7Uugop2HEDR07+paiL1kbq6SUl1
8OGZkDUMOZm+oOjUMDiM+yhZWrSe+rMDih1+og/ccehyi97Eq1u4jiK6SopYljAG
u66eVVrgDhjKIEq4ANw+O59kdW/02nMuN9JlYQEbqJs5TRx5ftghoJeunkft+/9t
AJKnxVYzpR+T/uFsyS1ZH+3w7/5mAoaHJsDX7P6rsxQVctH3CCZ/7LAnFFoYmElH
RPhmqt+8h+RpqjhWNk7vyjS/C5EkRi7ORZHSKrCJWwFjaw==
-----END CERTIFICATE-----
Generated at Thu Apr 10 22:20:08 2025 by rpki-client