Route Origin Authorization

$ rpki-client -vvf rpki.august.tw/repo/HYSP/9/3231362e3134362e32392e302f32342d3234203d3e203535383336.roa
File:                     3231362e3134362e32392e302f32342d3234203d3e203535383336.roa (raw, json)
Hash identifier:          VF1U06JK76+Jv1fW9wOazakmnV6WXyu/eCbLeLP4A7I=
Subject key identifier:   61:F7:1A:21:65:CC:2C:FE:F6:15:3A:01:8B:CD:4C:C7:95:C7:79:7F
Certificate issuer:       /CN=eebda479192a2ba7ed108d4de136469716063a0c606d17d64b
Certificate serial:       1AE898BD812569ABD373DD816171B09E0D36E2B9
Authority key identifier: E1:EC:20:71:76:25:7B:50:82:C6:17:8E:DA:ED:93:85:D1:40:73:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/eebda479192a2ba7ed108d4de136469716063a0c606d17d64b.cer
Subject info access:      rsync://rpki.august.tw/repo/HYSP/9/3231362e3134362e32392e302f32342d3234203d3e203535383336.roa
Signing time:             Mon 28 Nov 2022 12:30:43 +0000
ROA not before:           Mon 28 Nov 2022 12:25:43 +0000
ROA not after:            Mon 27 Nov 2023 12:30:43 +0000
asID:                     55836
IP address blocks:        216.146.29.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:e8:98:bd:81:25:69:ab:d3:73:dd:81:61:71:b0:9e:0d:36:e2:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eebda479192a2ba7ed108d4de136469716063a0c606d17d64b
        Validity
            Not Before: Nov 28 12:25:43 2022 GMT
            Not After : Nov 27 12:30:43 2023 GMT
        Subject: CN=61F71A2165CC2CFEF6153A018BCD4CC795C7797F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4f:3c:f3:2c:24:2d:85:d8:ea:4f:1c:67:f0:
                    51:22:f6:b7:6b:6a:98:68:3b:51:42:48:cf:ff:b3:
                    df:1e:40:3e:0d:00:33:38:4f:d5:57:81:c4:83:3e:
                    ca:ba:ed:93:d8:28:59:db:04:fc:05:cd:e6:68:56:
                    6c:2b:a0:19:1d:d3:16:16:bd:b6:0c:62:63:e9:52:
                    72:22:6b:2e:f9:3e:6f:0e:8f:86:ed:19:14:b2:80:
                    a9:01:1f:2f:2a:b7:d1:06:ca:03:57:a8:fb:e3:0b:
                    6e:1c:a8:a8:6d:4c:6d:98:7e:a2:f9:57:c7:25:65:
                    e0:a5:f6:70:17:6a:c7:1f:52:52:8a:69:4a:86:2f:
                    5c:35:0e:85:a0:58:3c:44:af:e5:33:e5:7a:99:2b:
                    ad:3c:55:20:41:6d:6d:b0:ad:c3:1f:99:f7:c2:52:
                    93:cd:6e:31:f4:68:ce:6e:ec:b2:a9:c8:ac:5e:f7:
                    42:20:07:1b:20:dd:83:24:4c:49:c7:64:8c:e7:a4:
                    54:62:f9:ff:e6:6c:2c:c7:d0:a8:23:f5:e2:b1:a0:
                    57:bc:06:ca:a5:78:5f:be:7c:e8:7e:4f:84:06:72:
                    ba:67:15:c8:12:77:02:3a:c7:ee:b4:51:86:38:7e:
                    c0:24:60:64:e5:c9:aa:0e:83:ae:8f:0a:03:f8:df:
                    c8:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:F7:1A:21:65:CC:2C:FE:F6:15:3A:01:8B:CD:4C:C7:95:C7:79:7F
            X509v3 Authority Key Identifier:
                keyid:E1:EC:20:71:76:25:7B:50:82:C6:17:8E:DA:ED:93:85:D1:40:73:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.august.tw/repo/HYSP/9/E1EC207176257B5082C6178EDAED9385D140735D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/eebda479192a2ba7ed108d4de136469716063a0c606d17d64b.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.august.tw/repo/HYSP/9/3231362e3134362e32392e302f32342d3234203d3e203535383336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.146.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:fa:42:a5:12:d6:99:3d:ff:c1:95:5e:b4:96:11:94:84:25:
         d9:cc:b2:ec:b6:96:d3:cd:24:6d:bb:db:4d:02:f0:6d:e9:fa:
         de:31:6f:28:11:54:bb:a5:09:13:8b:ff:83:ea:31:ad:fc:6e:
         ca:f5:ee:e2:5a:b5:91:4c:a9:e8:c1:cc:15:77:4e:c7:da:a8:
         57:74:8e:bc:b2:aa:0e:ea:23:13:38:86:05:c6:10:a5:70:92:
         ef:a0:51:98:cc:3e:a8:54:ca:a1:a4:40:0d:ae:8e:8c:84:df:
         9d:e2:37:8b:b8:68:20:b1:99:6e:0d:7a:13:ba:0f:b6:d4:a5:
         7a:e9:c7:bb:6f:18:eb:5e:52:54:ca:2c:cd:66:d8:c1:d0:5c:
         5b:94:fe:93:c1:f5:14:ea:60:8c:25:63:e2:ee:6b:5e:5d:21:
         83:7c:92:3b:53:17:13:01:e1:51:03:50:f9:d6:3f:25:51:b4:
         94:94:0d:69:3d:de:89:11:cc:6f:00:ee:6d:5a:6e:cc:53:10:
         18:90:66:11:cf:7a:e0:84:f2:bb:93:e8:f7:82:d6:ce:bb:21:
         5e:50:42:c6:4d:90:31:b1:e7:c3:46:05:01:a1:d1:39:d8:f6:
         41:9a:92:6e:50:97:cf:2e:44:fb:2c:cf:40:18:46:33:c3:11:
         b1:f3:f9:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 18:36:58 2025 by rpki-client