Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Txk5doQefCH1y7FQv5hU20T4mIk.roa
File:                     Txk5doQefCH1y7FQv5hU20T4mIk.roa (raw, json)
Hash identifier:          HteHd7v8D8l0iyk94zE0twdelbDITKbeI/y2CHLdBKI=
Subject key identifier:   4F:19:39:76:84:1E:7C:21:F5:CB:B1:50:BF:98:54:DB:44:F8:98:89
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       1380
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Txk5doQefCH1y7FQv5hU20T4mIk.roa
Signing time:             Mon 10 Feb 2025 14:09:30 +0000
ROA not before:           Mon 10 Feb 2025 14:09:30 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     18049
IP address blocks:        210.62.192.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4992 (0x1380)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Feb 10 14:09:30 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=4F193976841E7C21F5CBB150BF9854DB44F89889
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:12:3b:ca:4f:d2:35:b7:ec:9d:6c:32:c3:c3:
                    36:5f:3d:c1:5e:02:34:3f:5d:a9:f4:35:cc:02:8d:
                    e8:0f:50:56:ac:df:d0:de:54:37:18:ec:7b:69:83:
                    2c:6e:3b:37:5a:05:5c:bd:d9:53:47:e4:61:14:0a:
                    c1:e8:72:d1:e3:52:16:6d:a5:b5:3c:14:06:27:9c:
                    8b:4c:71:c8:53:5e:d1:57:f6:c5:6a:f3:02:5b:fa:
                    2e:5f:f4:7a:e6:df:0e:6e:37:6c:f6:9d:7b:a7:64:
                    3e:f9:f6:6d:df:af:d9:d6:9b:a4:c5:a7:c7:5c:dc:
                    f5:01:6d:06:a2:4b:51:c0:ec:ed:22:60:5f:69:11:
                    10:e6:e4:4c:56:85:6a:b3:6b:12:6b:0f:68:6d:60:
                    39:d7:5b:68:41:79:17:25:84:72:42:06:bd:9d:38:
                    b1:fb:20:17:b8:fa:44:a7:25:63:d3:c9:12:e8:f6:
                    87:91:7a:e1:28:28:b5:6a:58:87:f9:07:d2:c0:96:
                    c4:41:50:90:3e:da:29:66:70:2a:bf:fb:d4:e0:bf:
                    eb:3c:15:68:1e:72:02:1e:37:b3:a7:6b:c0:db:ab:
                    33:2d:15:2d:90:f3:45:b9:26:ac:c2:64:e5:fa:20:
                    69:c9:1d:98:e9:17:72:18:38:87:86:d2:36:56:5d:
                    3d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:19:39:76:84:1E:7C:21:F5:CB:B1:50:BF:98:54:DB:44:F8:98:89
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Txk5doQefCH1y7FQv5hU20T4mIk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.62.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         71:79:67:91:3c:5d:6e:d1:29:ab:2a:c9:43:ad:e0:2d:8f:46:
         75:83:61:1c:45:ab:40:cb:e4:25:1d:ea:74:e8:c9:9b:4e:72:
         03:42:82:6d:c9:1e:aa:d1:54:fb:5b:5c:d4:73:ec:15:b3:cc:
         3a:99:6c:c9:92:c9:c1:77:43:a1:e6:f0:67:87:b6:bd:a3:43:
         48:a8:36:5a:b8:d7:78:f2:e4:15:b4:63:8e:63:68:25:aa:18:
         f5:0d:12:26:5d:a3:5d:b7:26:e2:06:fd:28:94:e7:87:06:4a:
         de:cc:99:b0:99:b6:67:af:c0:c4:7f:89:d0:bc:bb:57:4f:a6:
         62:3e:7e:d6:a9:b1:62:ca:1c:e0:09:1c:9f:a9:ce:20:1d:1c:
         63:c7:4c:64:bb:eb:bb:2e:90:9e:f8:c8:30:26:94:f5:43:2c:
         f6:78:da:58:a6:c9:c1:1b:a3:d9:f7:94:0d:0d:de:fe:59:b3:
         cd:e4:f2:65:fa:6c:55:47:e4:93:09:91:89:ae:b9:09:ff:65:
         37:a9:59:76:9a:12:94:05:f9:e5:89:f9:49:21:2a:2e:dc:2d:
         5b:d6:e2:4e:eb:b2:a4:d4:0b:4a:53:d5:2f:00:56:6f:3d:03:
         4b:2e:1b:0b:99:e2:2b:6b:71:ef:1d:f8:bb:1d:f9:ae:d5:68:
         27:87:0b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 16:54:02 2025 by rpki-client