Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/54-NoPGfPYKXjDHz-QNXKaOlYJI.roa
File:                     54-NoPGfPYKXjDHz-QNXKaOlYJI.roa (raw, json)
Hash identifier:          rOMAji4QprztsJwdFyxycQzvpu/2wyHX53IholYVyKE=
Subject key identifier:   E7:8F:8D:A0:F1:9F:3D:82:97:8C:31:F3:F9:03:57:29:A3:A5:60:92
Certificate issuer:       /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial:       0F63
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/54-NoPGfPYKXjDHz-QNXKaOlYJI.roa
Signing time:             Thu 15 Sep 2022 02:39:52 +0000
ROA not before:           Thu 15 Sep 2022 02:39:52 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     7482
IP address blocks:        203.79.128.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3939 (0xf63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
        Validity
            Not Before: Sep 15 02:39:52 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=E78F8DA0F19F3D82978C31F3F9035729A3A56092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:14:10:97:33:cf:35:3c:90:1b:48:5b:98:a3:
                    04:d0:74:2f:66:a5:a9:c2:17:84:47:fd:21:dc:f0:
                    3f:ee:3a:66:62:c5:e9:c1:7f:ac:dc:1e:f0:bd:28:
                    8d:e1:d4:92:01:df:e8:fe:15:34:c5:d5:4f:1a:a7:
                    19:08:6b:45:04:71:81:c4:de:01:60:73:45:71:4e:
                    49:e2:48:24:df:00:c3:ff:1e:1d:e5:e9:39:1e:d2:
                    de:58:2d:ce:a6:1b:2a:cb:9f:d5:eb:0a:9a:ee:ea:
                    86:bf:13:1b:60:ec:72:be:ae:5f:a8:06:38:8d:42:
                    9e:a0:eb:e0:f0:63:40:44:10:e7:c5:0c:2e:c1:82:
                    c9:54:c4:a2:13:18:78:3f:ea:f2:5c:da:e7:5c:fe:
                    2b:01:ad:63:93:ee:87:22:19:88:fa:f0:94:e6:24:
                    02:83:70:55:74:a2:5a:53:c2:98:79:76:0f:88:03:
                    ff:50:e5:b2:20:1a:20:02:b3:b8:5f:29:5d:a6:a8:
                    3b:51:28:bd:80:87:fe:ae:71:d1:52:98:67:2a:92:
                    90:fd:53:06:1a:61:96:b9:25:45:55:a7:94:ce:77:
                    26:32:84:69:44:32:23:9f:75:43:34:41:ca:f0:54:
                    fe:0b:cf:f4:bb:32:0f:d9:59:80:e6:e1:8e:80:89:
                    af:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:8F:8D:A0:F1:9F:3D:82:97:8C:31:F3:F9:03:57:29:A3:A5:60:92
            X509v3 Authority Key Identifier:
                keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/54-NoPGfPYKXjDHz-QNXKaOlYJI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.79.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         3d:91:2e:0e:a2:b9:bb:17:08:75:2a:d3:ec:52:d5:c6:3c:8e:
         08:52:1c:c7:fb:6f:40:2a:2b:1d:47:67:18:10:4e:4d:df:38:
         95:64:75:b1:be:9b:72:90:52:54:85:de:52:40:0e:cb:8a:d3:
         cb:f0:a3:75:4a:98:06:8b:90:b5:2d:84:8f:d0:3c:9b:86:91:
         35:eb:f5:c9:62:fd:4c:cc:b1:e3:24:67:8f:dd:2e:6e:5f:c7:
         18:d3:ff:74:ec:34:c0:6c:19:6e:dd:1c:8e:aa:e0:21:bd:79:
         aa:e2:7c:9b:5c:e1:af:dd:fd:da:3a:cf:a4:c8:c1:b0:57:b2:
         65:99:71:81:61:39:2e:25:80:7e:c9:db:de:c6:f7:9d:1b:da:
         71:59:8b:e9:4f:a6:d1:dd:e4:2d:b5:a7:42:21:3a:cf:c4:8f:
         95:05:a6:c4:3f:1d:73:7a:c4:92:ac:37:e5:cb:2b:7c:1f:5b:
         74:80:f8:5f:d0:aa:5d:f3:42:d6:cd:d2:da:c1:56:94:ae:84:
         f6:14:b1:90:51:75:af:e0:78:e3:f0:46:46:4f:b8:5d:9f:b8:
         e0:08:90:33:13:a4:79:a8:ca:f7:1f:92:ea:d8:b7:62:04:1a:
         9c:11:d9:f4:a5:1b:e1:8f:01:7b:4e:03:a2:76:3c:1a:9e:18:
         4d:fb:41:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:42:05 2025 by rpki-client