Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/7O-NIpyzeFtfKI6QrT0FJgQVX_M.roa
File:                     7O-NIpyzeFtfKI6QrT0FJgQVX_M.roa (raw, json)
Hash identifier:          CZCb+ltrbh2nReQq26mpdGfbmCvcNaJ/tjfopxauQ6o=
Subject key identifier:   EC:EF:8D:22:9C:B3:78:5B:5F:28:8E:90:AD:3D:05:26:04:15:5F:F3
Certificate issuer:       /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial:       0917
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/7O-NIpyzeFtfKI6QrT0FJgQVX_M.roa
Signing time:             Tue 29 Sep 2020 10:01:27 +0000
ROA not before:           Tue 29 Sep 2020 10:01:27 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     17709
IP address blocks:        210.201.78.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2327 (0x917)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
        Validity
            Not Before: Sep 29 10:01:27 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=ECEF8D229CB3785B5F288E90AD3D052604155FF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:56:64:e9:7e:fa:b4:5a:54:82:1e:b6:88:00:
                    4e:97:89:6e:c0:3a:ee:db:43:2f:3f:3e:b8:68:0d:
                    e1:93:59:05:2c:3b:6d:82:99:50:e9:86:f7:b3:19:
                    85:1d:dc:64:16:c5:36:ba:bc:91:a8:f7:41:00:17:
                    04:e3:0e:25:bc:9c:ea:3f:ab:5d:fe:11:7e:0d:ce:
                    f3:11:2e:1a:0e:33:e9:f3:03:88:62:73:6e:de:cb:
                    dd:dc:21:07:ea:2b:7e:f1:4c:55:9e:c2:bd:88:b1:
                    91:f8:93:0c:26:3a:ef:78:61:71:e9:6e:60:dc:d9:
                    65:09:22:c8:83:4b:81:07:ef:02:a9:9d:ba:26:93:
                    01:ae:4b:ae:c8:48:b4:e6:6b:10:12:16:32:68:d3:
                    23:16:d2:35:2a:71:a9:74:e1:0f:a8:44:3f:0c:07:
                    68:01:f9:76:6e:cb:c9:2a:74:46:b8:66:5f:45:6d:
                    15:d0:b9:8a:09:0e:57:c7:d8:a0:5d:08:87:17:c1:
                    e9:c6:c4:21:8e:64:f5:b3:e2:be:da:f1:93:33:75:
                    bb:b2:cf:e6:02:6d:10:0d:4f:19:92:45:ed:41:34:
                    9f:5c:4c:30:48:de:3f:90:ef:b1:31:8e:f1:2d:ca:
                    83:88:fb:39:4a:be:0d:ba:00:23:be:bc:46:c9:79:
                    94:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:EF:8D:22:9C:B3:78:5B:5F:28:8E:90:AD:3D:05:26:04:15:5F:F3
            X509v3 Authority Key Identifier:
                keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/7O-NIpyzeFtfKI6QrT0FJgQVX_M.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.201.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:96:ca:bd:ee:44:39:bd:93:6d:72:17:8e:7f:ce:6c:4f:82:
         6d:ce:84:c8:93:f1:19:f4:4b:1a:68:cc:06:69:bc:a7:7b:88:
         f3:01:0d:e4:0d:4a:90:37:b2:ef:35:3d:03:2d:ed:b0:12:4a:
         87:36:9c:af:ed:08:19:df:97:04:e0:cd:3e:63:c1:de:d4:0a:
         6f:53:d4:e2:bb:fb:64:fe:65:01:a4:46:f2:f7:8d:8b:79:0b:
         16:d5:0a:12:1e:70:a2:6b:0c:16:5e:24:c5:e7:f2:5d:74:88:
         fa:7a:dc:7e:9f:6c:86:f6:99:7c:11:20:86:a7:53:db:07:46:
         72:09:c1:7c:de:dc:24:54:e3:12:25:5d:9d:f5:e3:89:fc:d7:
         87:3a:a1:45:9b:bc:4c:02:9b:e9:b8:66:d7:ad:d1:8f:ab:f4:
         1a:b3:a5:51:54:4d:fc:bc:b6:b8:e4:a3:f0:f1:05:73:ee:79:
         7b:32:54:85:c6:87:12:86:66:0a:73:bf:9d:17:24:88:50:b0:
         41:35:04:d2:1e:07:4f:75:12:13:d8:c8:c0:16:5e:d5:17:81:
         d6:f8:b8:3b:33:78:87:41:81:76:6f:05:34:8b:78:66:30:9c:
         db:a4:b3:e5:83:2b:52:dc:a3:ae:40:2a:c1:19:92:b3:67:2e:
         c3:36:04:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:47:53 2025 by rpki-client