Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/rLauauukZ4Xg2bj8XGfT9FuwAIs.roa
File:                     rLauauukZ4Xg2bj8XGfT9FuwAIs.roa (raw, json)
Hash identifier:          mVBPKdFGc/rl1QDOtoNEjc7Yzaylzm8+ZB6MUumWV44=
Subject key identifier:   AC:B6:AE:6A:EB:A4:67:85:E0:D9:B8:FC:5C:67:D3:F4:5B:B0:00:8B
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0E16
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/rLauauukZ4Xg2bj8XGfT9FuwAIs.roa
Signing time:             Wed 29 Sep 2021 02:43:11 +0000
ROA not before:           Wed 29 Sep 2021 02:43:11 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     9919
IP address blocks:        218.211.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3606 (0xe16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 02:43:11 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=ACB6AE6AEBA46785E0D9B8FC5C67D3F45BB0008B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c7:fd:f0:39:11:fd:14:4f:8c:71:cb:82:5a:
                    52:82:d5:97:1b:16:fc:42:63:78:2c:3c:8b:e9:88:
                    a5:ce:2d:e9:c6:e8:df:02:9f:8e:b0:20:51:2d:37:
                    04:81:ac:52:9d:4e:7a:77:95:92:31:3f:81:6a:30:
                    f2:18:dc:9f:3f:65:20:74:ae:06:c4:1f:85:96:c6:
                    0c:84:bd:e8:39:10:ff:04:95:6a:9a:76:94:c6:92:
                    3d:64:cd:c5:24:28:4e:9e:9f:e2:e5:6f:fb:61:7d:
                    17:89:9f:e8:c6:d5:f6:a9:37:99:dc:5a:59:1c:41:
                    af:ab:d1:a7:6d:d9:e4:30:26:09:12:aa:e3:06:28:
                    c0:49:bc:22:12:ec:48:c0:9d:45:05:e4:b1:0a:07:
                    be:8c:84:86:3d:fc:5f:6c:1a:54:a6:71:bc:15:80:
                    99:59:06:d1:2a:62:f0:61:c3:28:71:56:f6:e9:84:
                    e1:d3:b3:41:f3:5e:b1:b7:b5:8e:26:54:db:8d:05:
                    3a:d9:04:94:8e:44:cc:4b:8b:0f:93:76:c6:ae:f5:
                    c9:89:97:69:be:61:10:e3:93:74:f4:a0:4b:b3:e8:
                    59:eb:5f:57:b7:16:9b:40:af:87:9c:53:cf:47:e3:
                    a9:b8:36:1c:a8:56:8d:c4:f6:9e:fb:f3:5a:85:ff:
                    b4:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:B6:AE:6A:EB:A4:67:85:E0:D9:B8:FC:5C:67:D3:F4:5B:B0:00:8B
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/rLauauukZ4Xg2bj8XGfT9FuwAIs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.211.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         96:b9:a3:22:5e:74:9a:1d:39:2c:b9:81:3b:ad:4d:0a:d8:15:
         f2:27:53:72:be:fb:8e:cb:a8:43:97:df:22:39:7a:9c:4e:c6:
         26:73:34:5d:fc:ba:8b:0b:c8:d1:73:24:70:a6:ea:3e:fe:8b:
         1d:3a:39:14:fe:c4:88:30:92:db:cd:2d:90:c3:e1:e7:10:e4:
         2c:69:0d:af:0f:5e:20:00:9b:4b:00:bb:73:91:db:8a:2e:ce:
         82:a4:da:ba:47:61:ac:99:ee:10:9d:13:af:f0:44:25:c9:89:
         41:2b:43:37:cc:25:f7:41:57:29:74:1e:fc:09:b0:db:5e:e9:
         d6:41:be:9b:f6:79:1c:ba:78:fc:55:7b:c5:67:93:f1:6d:34:
         7a:59:97:b1:d3:6f:98:5a:5a:34:fe:73:3a:a4:cb:fb:5d:a9:
         12:32:f5:a4:ee:c2:f4:27:1e:fe:9d:4b:b1:8f:fa:b6:f1:68:
         b2:aa:47:96:49:00:b9:36:4d:d8:ba:8b:ad:57:0a:90:93:59:
         43:32:e7:43:83:ad:14:13:84:a3:b1:83:89:a9:77:d8:b6:c3:
         54:18:9f:ff:f6:0b:53:d0:f7:72:58:e7:79:a6:85:21:ef:b4:
         24:8b:a4:67:a4:f4:54:07:2f:ee:0f:70:80:16:7a:dd:29:7d:
         94:81:ff:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:18:34 2025 by rpki-client