Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/n8f-ao69LioQK0Y2t-xLh-ezA7U.roa
File:                     n8f-ao69LioQK0Y2t-xLh-ezA7U.roa (raw, json)
Hash identifier:          cOjRYR2/3+X5wHgonqNC2GFunf0TI91drUnyWmx2VWI=
Subject key identifier:   9F:C7:FE:6A:8E:BD:2E:2A:10:2B:46:36:B7:EC:4B:87:E7:B3:03:B5
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       10AC
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/n8f-ao69LioQK0Y2t-xLh-ezA7U.roa
Signing time:             Wed 01 Feb 2023 10:28:53 +0000
ROA not before:           Wed 01 Feb 2023 10:28:53 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     9919
IP address blocks:        218.210.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4268 (0x10ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Feb  1 10:28:53 2023 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=9FC7FE6A8EBD2E2A102B4636B7EC4B87E7B303B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a6:f0:5c:68:41:95:94:a9:56:f5:aa:f2:ec:
                    e3:40:ee:5e:f7:c4:d8:34:7a:16:fa:b0:6e:cc:7c:
                    b8:0f:20:e3:68:2e:24:fd:46:77:a4:6d:a5:52:68:
                    59:bd:89:b1:f5:67:c6:b2:50:14:77:af:a8:ea:62:
                    3a:bd:f4:a9:ca:77:08:50:8b:7a:02:8d:37:d8:fc:
                    8e:51:16:fc:98:fc:b0:79:cf:2a:2a:6d:d6:29:a5:
                    e1:0b:ad:c7:19:b6:8a:0a:b3:9a:b5:a1:4c:ff:02:
                    2b:f1:0d:72:85:1d:97:9f:ba:91:52:03:76:3a:3d:
                    e8:54:d4:49:fd:c6:01:d2:33:55:fe:75:d3:af:1e:
                    0d:dd:1b:3f:60:15:7f:ef:95:3e:45:d8:2a:b7:d2:
                    24:db:b1:57:cc:04:72:43:76:8d:57:a3:a5:88:bf:
                    ef:5e:cb:20:63:3a:85:ff:d9:33:c1:d5:7b:98:c5:
                    86:d9:46:34:13:b1:3a:3d:23:f5:47:39:94:90:b6:
                    39:e2:fb:3e:c0:39:f8:87:82:ca:35:a0:19:6d:d2:
                    97:44:88:c4:19:db:a2:4c:fd:e2:42:96:e3:e4:38:
                    ff:1b:7c:9d:a4:de:7c:02:68:e5:9e:c6:39:85:7b:
                    d2:c6:c1:e8:34:3c:26:72:82:cc:f4:b9:ee:03:4f:
                    2a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:C7:FE:6A:8E:BD:2E:2A:10:2B:46:36:B7:EC:4B:87:E7:B3:03:B5
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/n8f-ao69LioQK0Y2t-xLh-ezA7U.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.210.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2d:2c:e2:46:c4:5f:79:8b:ea:78:e9:f4:02:49:20:cc:34:8d:
         84:16:49:80:d0:0f:00:82:84:9a:65:16:ad:b4:79:af:e1:c4:
         13:de:23:42:b8:ed:98:b8:9c:db:29:60:b4:80:c9:bd:73:40:
         d4:27:63:52:ae:58:10:01:17:e0:46:23:66:34:f9:8f:b0:b9:
         cd:1b:dc:42:49:77:6e:87:c5:17:b9:ed:3b:c6:7b:f1:27:d5:
         80:e0:dc:5a:c7:49:f8:b3:69:12:3c:7d:05:f7:71:b7:6f:21:
         55:fa:6d:fd:88:db:86:73:35:17:69:38:27:93:29:c3:67:42:
         6c:16:b4:af:51:63:3e:f5:0b:43:81:88:1b:c2:d0:70:d0:32:
         b0:b8:c5:8a:a7:cc:92:a6:a1:aa:62:15:1c:7d:6d:54:af:34:
         37:19:6e:d2:6c:40:e4:28:6f:07:ad:fb:ad:e8:10:65:c7:9b:
         66:b2:6a:e9:b7:cf:86:ce:f9:f0:b2:87:2e:37:5c:81:2c:00:
         ff:f3:2a:4d:88:2b:1d:6b:a5:51:ea:ac:4d:c8:19:46:4b:07:
         1f:bf:9e:c9:52:1e:fd:44:b0:1c:33:31:1c:35:5c:61:38:01:
         35:cb:38:03:b2:40:a8:78:46:65:f3:e4:92:68:be:1e:49:62:
         30:75:4d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:23:01 2025 by rpki-client