Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/sopQ6NkqF7_McTpWMuFSPRAT_TE.roa
File:                     sopQ6NkqF7_McTpWMuFSPRAT_TE.roa (raw, json)
Hash identifier:          qBObB9i3kaqvKPzqxXrfrrW32tHy+osik1/qGn5PWs4=
Subject key identifier:   B2:8A:50:E8:D9:2A:17:BF:CC:71:3A:56:32:E1:52:3D:10:13:FD:31
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0912
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/sopQ6NkqF7_McTpWMuFSPRAT_TE.roa
Signing time:             Tue 29 Sep 2020 09:52:46 +0000
ROA not before:           Tue 29 Sep 2020 09:52:46 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9919
IP address blocks:        175.180.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2322 (0x912)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 09:52:46 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=B28A50E8D92A17BFCC713A5632E1523D1013FD31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:47:fc:c3:b9:62:72:eb:87:d5:f2:ec:e6:e0:
                    02:9d:ba:8b:8b:e3:20:28:84:80:46:37:c3:64:59:
                    02:a2:0e:fe:9f:c7:55:cc:be:a8:c0:26:2f:d0:c5:
                    c8:0a:9b:a6:74:c7:08:82:7b:85:7e:33:5c:09:5b:
                    b7:d4:d9:e0:da:0d:80:de:8e:bc:59:3f:9e:1a:6c:
                    73:35:02:41:f8:ff:22:48:44:8c:ee:97:80:33:70:
                    36:70:e6:9c:70:ec:6b:22:12:cf:dc:c7:b0:e3:8c:
                    a8:2c:76:4f:89:26:85:20:73:48:c4:23:12:5e:99:
                    a8:5c:0b:0e:25:e1:93:cb:77:3d:6d:07:e1:01:82:
                    4b:9d:b4:e8:98:56:15:20:e8:93:a6:8d:91:0b:b8:
                    03:45:af:ab:ad:36:0a:15:c9:55:ca:29:ab:92:9d:
                    2e:f1:34:a2:a9:01:db:4c:6e:be:0c:71:3d:24:f8:
                    c4:d6:08:30:b8:75:ea:0b:97:fa:23:30:d9:a7:7f:
                    30:bb:26:f4:b5:4d:3c:b2:76:20:86:a5:57:2d:e2:
                    b4:e6:91:91:66:36:45:b6:9c:07:f3:c1:ca:c2:f1:
                    65:44:7a:ff:b6:45:bb:9b:02:22:c6:73:d7:30:44:
                    98:2a:13:33:5f:ce:d4:98:28:70:f0:99:04:86:bc:
                    e3:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:8A:50:E8:D9:2A:17:BF:CC:71:3A:56:32:E1:52:3D:10:13:FD:31
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/sopQ6NkqF7_McTpWMuFSPRAT_TE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.180.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         2f:ab:01:e4:c1:e7:50:08:86:7a:a3:f3:a5:fb:aa:76:56:ab:
         8c:c8:bf:44:04:a3:ac:6a:2a:36:5a:29:03:b7:65:da:96:6a:
         e2:da:95:9b:2f:4f:a4:a6:66:87:50:1a:fc:bc:11:ce:db:23:
         fb:a3:fd:e7:20:a3:22:f1:aa:03:cc:19:4b:a6:b0:a7:71:0c:
         bc:ff:98:cb:a1:bf:a9:1b:66:32:6d:e1:ab:91:f2:0f:01:5f:
         be:9e:90:55:4b:27:68:cf:23:0d:07:8d:d0:d1:9c:c9:2a:af:
         d4:fa:7f:35:42:50:58:69:46:22:5e:0e:d1:85:b3:1c:d9:d3:
         cc:a2:90:dd:25:c5:a3:a4:20:a8:6a:9e:7e:4a:81:20:51:b7:
         12:b2:70:b8:d8:fd:eb:21:1f:c5:2f:09:4e:86:1e:d2:ba:88:
         d1:d1:d4:32:aa:2a:b7:ff:6d:55:26:f1:f1:c0:89:cf:4d:ef:
         7a:99:55:ac:e0:cc:04:97:e8:d3:7b:bb:48:8f:b0:95:07:e7:
         31:f5:35:6c:23:de:ef:c2:5b:3e:a6:ad:5c:a1:9c:b4:92:1e:
         ce:46:ac:70:5a:b6:5e:40:8a:82:69:bd:14:e0:d0:2e:27:eb:
         bb:9c:6a:a2:a1:5a:e3:3f:34:17:59:50:75:d7:fc:b7:e2:42:
         f7:51:70:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:22:02 2025 by rpki-client