Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/i2kijmvHaq3d8fjJlL_YEgb0zj8.roa
File:                     i2kijmvHaq3d8fjJlL_YEgb0zj8.roa (raw, json)
Hash identifier:          9HYDHaAiN1FjpEJLDHD6NLd+ipwE4i3HFGW1LUVyMx4=
Subject key identifier:   8B:69:22:8E:6B:C7:6A:AD:DD:F1:F8:C9:94:BF:D8:12:06:F4:CE:3F
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       365F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/i2kijmvHaq3d8fjJlL_YEgb0zj8.roa
Signing time:             Mon 10 Feb 2025 13:54:15 +0000
ROA not before:           Mon 10 Feb 2025 13:54:15 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     38841
IP address blocks:        106.1.46.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13919 (0x365f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb 10 13:54:15 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=8B69228E6BC76AADDDF1F8C994BFD81206F4CE3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:12:ae:59:5f:b2:77:dc:97:b9:3a:e1:dd:28:
                    2c:17:21:e6:e4:97:88:cf:64:e4:37:ac:ab:f2:41:
                    60:d6:e3:20:88:fe:e6:6b:e5:6f:f0:ef:31:04:36:
                    ec:2f:06:07:7e:7a:e7:7c:05:72:3d:96:0d:47:ac:
                    b5:47:8f:27:11:3c:9a:aa:85:04:33:4f:62:b9:69:
                    d2:ab:6c:4d:1d:f3:6b:78:ca:51:6c:04:c0:e0:e5:
                    0b:4b:c6:1a:9d:cf:c5:2e:c4:ef:3c:bf:67:f3:62:
                    2c:57:8d:8b:4e:ca:14:3b:11:84:92:b2:a2:52:43:
                    a2:01:3b:46:90:48:1f:5f:bf:c6:ab:8d:4a:96:cb:
                    60:86:8f:71:15:ac:19:4d:d0:87:0a:2d:a0:14:c7:
                    a4:3a:50:6c:d8:a7:2b:7e:25:20:d5:fa:d0:56:a1:
                    2a:d4:d2:17:b8:03:04:b5:e2:e5:27:64:72:4a:60:
                    77:39:af:f5:60:8b:a7:08:fc:2d:de:3e:e1:40:99:
                    f1:23:9e:03:ba:73:cb:f8:03:ed:2c:a8:89:90:87:
                    c6:88:39:f2:00:59:34:37:9e:34:01:c6:24:7a:bb:
                    2c:c3:95:b7:63:14:92:c2:93:da:70:3f:09:e5:65:
                    ee:d8:ac:51:28:ed:31:91:8e:35:c0:a9:eb:39:d8:
                    36:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:69:22:8E:6B:C7:6A:AD:DD:F1:F8:C9:94:BF:D8:12:06:F4:CE:3F
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/i2kijmvHaq3d8fjJlL_YEgb0zj8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:67:4d:f4:46:44:77:2f:ad:2e:d0:b7:68:f8:db:f9:03:f3:
         bf:55:51:57:c3:90:82:d9:11:3c:af:8e:90:59:90:77:f8:f6:
         64:30:49:5a:cc:17:40:f8:37:7c:de:2b:bb:fa:15:66:01:ff:
         2f:ea:4d:80:e1:23:61:1d:0d:23:6f:16:e0:c0:05:7d:79:52:
         ff:a1:2e:0e:c5:34:31:16:1b:84:79:57:6f:bd:4a:57:18:5b:
         23:b4:9c:9c:c8:ec:1e:97:74:1f:cf:af:7a:47:89:d6:e9:49:
         92:c6:ab:6a:12:73:90:93:5a:21:41:a5:ba:24:5c:56:55:27:
         49:a2:4e:f8:87:da:89:d3:fb:f8:a8:dd:ad:a0:db:70:c6:52:
         4e:0c:fa:1d:90:fc:24:e2:27:4d:b5:4a:b0:29:de:4b:d4:b2:
         fd:09:8d:49:77:78:c4:0c:39:53:87:f8:63:bf:ca:cb:6c:2e:
         e7:be:46:a5:23:17:73:39:9c:80:72:15:ac:b1:4d:6c:3c:44:
         e2:17:0c:79:fb:c6:b9:87:ce:73:d5:d6:95:16:d6:03:3d:92:
         0d:e3:1c:d4:00:0a:ca:25:d2:5d:53:e2:d0:1e:8f:90:95:4a:
         af:34:39:84:99:77:94:93:bd:17:35:d2:66:80:07:1b:0e:1f:
         25:9a:ee:ea
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICNl8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx
MzU0MTVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDhCNjkyMjhFNkJDNzZB
QUREREYxRjhDOTk0QkZEODEyMDZGNENFM0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDrEq5ZX7J33Je5OuHdKCwXIebkl4jPZOQ3rKvyQWDW4yCI/uZr
5W/w7zEENuwvBgd+eud8BXI9lg1HrLVHjycRPJqqhQQzT2K5adKrbE0d82t4ylFs
BMDg5QtLxhqdz8UuxO88v2fzYixXjYtOyhQ7EYSSsqJSQ6IBO0aQSB9fv8arjUqW
y2CGj3EVrBlN0IcKLaAUx6Q6UGzYpyt+JSDV+tBWoSrU0he4AwS14uUnZHJKYHc5
r/Vgi6cI/C3ePuFAmfEjngO6c8v4A+0sqImQh8aIOfIAWTQ3njQBxiR6uyzDlbdj
FJLCk9pwPwnlZe7YrFEo7TGRjjXAqes52DZpAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUi2kijmvHaq3d8fjJlL/YEgb0zj8wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2kya2lqbXZIYXEzZDhmakps
TF9ZRWdiMHpqOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq
AS4wDQYJKoZIhvcNAQELBQADggEBAExnTfRGRHcvrS7Qt2j42/kD879VUVfDkILZ
ETyvjpBZkHf49mQwSVrMF0D4N3zeK7v6FWYB/y/qTYDhI2EdDSNvFuDABX15Uv+h
Lg7FNDEWG4R5V2+9SlcYWyO0nJzI7B6XdB/Pr3pHidbpSZLGq2oSc5CTWiFBpbok
XFZVJ0miTviH2onT+/io3a2g23DGUk4M+h2Q/CTiJ021SrAp3kvUsv0JjUl3eMQM
OVOH+GO/ystsLue+RqUjF3M5nIByFayxTWw8ROIXDHn7xrmHznPV1pUW1gM9kg3j
HNQACsol0l1T4tAej5CVSq80OYSZd5STvRc10maABxsOHyWa7uo=
-----END CERTIFICATE-----
Generated at Fri Apr 18 22:55:25 2025 by rpki-client